Privacy Policy

1. Information we collect

Information you give us

• Account information: your email address or phone number, name, password (stored only in hashed form), profile details and settings.
• Content: Spaces, Events, puja listings, photos, messages, saves, ratings, claims and anything else you create, upload or send through the Services.
• Communications: messages you send to us or to hosts, and your choices about the emails you receive.

Information collected automatically

• Usage information: pages you visit, when and how long, how you arrived (for example a referring site, a shared link or a campaign), searches, filters and the actions you take, such as opening a listing, getting directions or contacting a host.
• Device and log information: IP address, browser and operating system, device type, language, time zone, and technical logs about requests and errors.
• Approximate location: the country and city derived from your IP address. We do not collect your precise location unless you choose to share an address or place.
• Cookies and similar technologies: see Cookies and measurement.

Information from others

• Sign-in providers: if you sign in with Google, we receive your name, email address and account identifier from Google.
• Other users: hosts and members may add information about Events and Spaces that involve you.
• Public sources: puja listings may be compiled from publicly available information. Organisers can claim and correct them.

2. How we use information

• To provide, operate and maintain the Services, including your account, Spaces, Events and the puja map.
• To measure and understand how the Services are used, to count visits and visitors, and to give hosts aggregated insights about their Spaces and Events.
• To improve, test and develop features.
• To keep the Services safe: to prevent fraud, spam, abuse and automated traffic, and to enforce our Terms of Service.
• To communicate with you, including sign-in codes, service notices, replies and, where you have asked for them, summaries and updates.
• To comply with legal obligations and to establish, exercise or defend legal claims.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Legal bases

Where the law requires a legal basis (for example the EU and UK GDPR), we rely on:

• Contract: to provide the Services you ask for.
• Legitimate interests: to measure, secure and improve the Services, where those interests are not overridden by your rights.
• Consent: where we ask for it. You can withdraw consent at any time without affecting processing before the withdrawal.
• Legal obligation: where the law requires us to process or keep information.

In India, we process digital personal data under the Digital Personal Data Protection Act, 2023, for the purposes described in this Policy, on the basis of your consent or for legitimate uses permitted by that Act.

4. Cookies and measurement

Cookies are small files stored by your browser. We use our own cookies only, set on davetti.in and world.davetti.in. We do not use advertising or cross-site tracking cookies.

Your choices. You can change your cookie choices at any time through “Cookie settings” on the site or, when signed in, in Settings › Privacy. We also honour the Global Privacy Control signal. Some basic, aggregated measurement is necessary to operate, secure and plan the Services and continues regardless of these choices: the pages viewed, which listing on the map was opened, and whether a page is still open (so we can show how many people are on the map right now). It is never linked to your account, and it is used only in counts, such as the figures shown on the map. You can also block or delete cookies in your browser; parts of the Services, such as signing in, may then not work.

5. How we share information

• With other users: content you publish, such as Events, listings, photos and public profile details, is visible to others according to its visibility settings. Hosts of a Space can see aggregated statistics about visits to their Space and Events, and the names of signed-in visitors unless you turn this off in Settings › Privacy.
• With service providers who process data on our behalf under contract, including hosting (Hetzner Online, Germany), email delivery, sign-in with Google, and map tiles (OpenStreetMap and OpenFreeMap, which receive your IP address when maps load).
• For legal reasons: when required by law, court order or a lawful request by a public authority, or to protect the rights, property and safety of Davetti, our users or the public.
• In a business transfer: as part of a merger, acquisition or sale of assets, subject to this Policy.
• With your consent or at your direction.

6. International transfers

Our servers are located in Germany, and our service providers may process data in other countries. Where data is transferred across borders, we take steps required by applicable law to protect it, such as contractual safeguards.

7. How long we keep information

• Account and content: for as long as your account is active, and deleted or anonymised within a reasonable period after you close it, unless we must keep it longer by law.
• Detailed usage records: up to 14 months.
• IP addresses and browser details attached to visits: up to 30 days.
• Daily visit statistics: up to 25 months; aggregated statistics that no longer identify anyone may be kept longer.
• Security and legal records: as long as needed for their purpose or as the law requires.

8. Security

We use technical and organisational measures designed to protect personal data, including encryption in transit, hashed passwords, signed cookies and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We will notify you and the authorities of a personal data breach where the law requires.

9. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• delete your data or close your account;
• object to or restrict certain processing, and withdraw consent;
• receive your data in a portable format;
• nominate another person to exercise your rights in case of death or incapacity (India);
• lodge a complaint with a data protection authority, including the Data Protection Board of India or your local supervisory authority.

You can manage much of this in Settings. For anything else, contact us as described below. We may need to verify your identity before acting on a request, and we will respond within the time the law requires.

10. Children

The Services are not directed to children. You must be at least 18 years old, or have the verifiable consent of a parent or legal guardian, to create an account. If we learn that we have collected personal data from a child without such consent, we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. We will post the new version here with a new “Last updated” date and, if the changes are significant, tell you through the Services or by email before they take effect.

12. Contact and grievances

Yeppler Internet Solutions Pvt Ltd is the controller (data fiduciary) of your personal data. For questions or requests about privacy, write to hello@davetti.in, or by post to Yeppler Internet Solutions Pvt Ltd, 104 Dakshinpally, Rahara, Khardah, Kolkata 700118, West Bengal, India.

For complaints, contact our Grievance Officers: Amitava Lahiri (India), at amitava.lahiri@yeppler.com and Pallabi Lahiri, at pallabi.lahiri@yeppler.com.