Mandira Systems (“Mandira”, “we”) is the data fiduciary for personal data processed through the Mandira temple management platform. This notice explains, in plain language, what we collect, why, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP).
1. What we collect
- ◆Trust & temple operational data: temple name, address, GSTIN, ritual catalogue, ledger entries.
- ◆Devotee data your temple uploads: name, phone, Nakshatra, address, donation history. Only what your trust explicitly chooses to capture.
- ◆Counter clerk activity: signed transaction logs, timestamps, device identifiers.
- ◆Demo / waitlist contact details when you submit the forms on mandira.in (name, temple, phone, email).
2. Why we process it
- ◆To run the counter, ledger, payroll, panchang and notification modules you have licensed.
- ◆To send transactional reminders (pooja, seva renewal) on behalf of your trust via WhatsApp / SMS / Telegram.
- ◆To meet GST, audit and statutory bookkeeping requirements.
- ◆To respond to your enquiries and run the Mandira product.
3. Lawful basis
We process devotee data under the “certain legitimate uses” basis (Section 7, DPDP) where the temple is performing a function under law, and under explicit consent (Section 6) where consent is required — for example, promotional WhatsApp messages. Consent records are stored against every devotee profile and exportable at any time.
4. Where it lives
Each tenant trust runs in an isolated database namespace. Data is encrypted at rest using AES-256 and in transit using TLS 1.2+. Trusts that opt for on-premise deployment can host Mandira inside their own infrastructure with identical functionality.
5. Your rights as a Data Principal
- ◆Right to access a summary of your data and its processing.
- ◆Right to correct, complete, update or erase your data.
- ◆Right to nominate a person to exercise your rights in the event of death or incapacity.
- ◆Right to grievance redressal — write to grievance@nexorasuncore.com.
6. Retention
Active devotee records are retained for as long as your trust uses Mandira. On termination, you receive a complete export and we delete tenant data within 30 days, except where statutory retention (GST, income tax) requires otherwise.
7. Contact
Data Protection Officer · Mandira Systems · Kshethram@nexorasuncore.com