MehSang Privacy Policy

This Privacy Policy applies to personal information processed in connection with MehSang's website, mobile applications, customer accounts, professional mehndi bookings, customer support, payments and refunds, uploaded designs and photographs, reviews, communications, promotions, location-enabled features, AI-enabled features, and complaint and grievance handling.

The information we collect depends on the Services and features you use. We may collect identity and profile information, contact details, account and authentication records, booking information, uploaded designs and images, location information, payment and transaction records, support communications, ratings and reviews, device and technical information, cookies and analytics information, promotional and referral information, and fraud, complaint, and security information.

• Identity information, including your name, account/profile details, service-recipient name, and other information reasonably needed to fulfil a booking.
• Contact information, including mobile number, email address, service address, and billing-related contact information.
• Booking information, including event date and time, selected package, guest count, design preferences, additional services, rescheduling information, artist/team assignment, check-in, and completion information.
• Uploaded content, such as mehndi reference images, inspiration, hand/feet or event photographs, and custom design requests.
• Transaction information, such as payment amount and status, reference number, payment-method category, invoices, and refunds. We do not intend to store sensitive credentials such as CVV or UPI PIN unless required by law and appropriately secured.

We collect information directly from you when you create an account, make a booking, enter an address, upload a design, contact support, submit a review, request a refund, participate in a promotion, provide consent, or otherwise use our Services.

We may collect technical information automatically through cookies, SDKs, logs, and security systems. Assigned artists/teams and authorised service providers may also provide information needed for bookings, payments, authentication, communications, analytics, fraud prevention, and other platform functions.

We process personal information for legitimate and disclosed purposes connected with our Services.

• Creating and maintaining accounts, verifying customers, processing bookings, assigning artists/teams, and managing service addresses and instructions.
• Processing payments and refunds, issuing invoices, providing support, and communicating booking updates.
• Resolving complaints, preventing fraud, protecting customers and artists, maintaining security, enforcing our policies, and complying with legal requirements.
• Providing location-based features, recommendations, analytics, and improvements to Platform functionality.

Customers may manually enter a service address. When a feature needs device location, MehSang may request permission; you can deny or revoke it in device settings. We do not continuously track customers merely because the app is installed.

We process uploaded designs and relevant images to fulfil bookings, communicate requirements to assigned professionals, support customers, investigate complaints, perform quality control, and provide Platform functionality. Providing a photo for service fulfilment does not automatically authorise advertising or marketing use. Where required, we will obtain separate consent before using identifiable customer or event photos or videos for marketing.

• The app may request relevant permissions such as camera, photos/gallery, location, and notifications.
• Denying a permission can make the dependent feature unavailable, but should not automatically affect unrelated Services.

Payments may be processed through authorised third-party providers. We retain transaction information needed for bookings, accounting, refunds, disputes, and legal obligations.

We may share customer/service-recipient name, location, date and time, package details, relevant design uploads, guest information, and necessary contact information with an assigned artist or team to fulfil a booking. Artists and teams may not use this information for unrelated solicitation, independent marketing, platform bypass, or improper disclosure.

We may use providers for payment processing, OTP/SMS, communications, email, cloud hosting, analytics, maps/location, authentication, customer support, fraud prevention, cybersecurity, and related functions. We share only information reasonably necessary and seek appropriate safeguards. MehSang does not sell customer personal data to unrelated third-party data brokers.

We may use cookies and similar technologies for sessions, authentication, security, fraud prevention, preferences, Platform functionality, performance, analytics, conversion measurement, and marketing where applicable. Where required, we provide appropriate preferences or consent for non-essential technologies.

• Where permitted and consistent with your preferences, we may send offers, discounts, new-service, bridal, festival, referral, and campaign communications.
• You can opt out of promotional communications; necessary transactional and service communications such as OTPs, confirmations, payment updates, artist arrival information, security notices, and support messages may still be sent.

We may retain support chats, email, WhatsApp, telephone, and other communications for service delivery, support, dispute resolution, safety, quality assurance, training where appropriate, and legal/compliance purposes. Calls may be recorded where permitted with appropriate notice or consent.

Where customers submit reviews, ratings, testimonials, or other public content, we may display the content intended for publication and moderate it under our Terms. We seek to avoid displaying unnecessary personal information publicly.

MehSang may use AI-enabled or automated systems for design analysis, price estimation, recommendations, visual search, support, matching, fraud detection, quality improvement, and Platform optimisation. Where permitted, anonymised, de-identified, or aggregated information may be used to develop and improve these systems. Identifiable photographs or personal information are not used for AI training beyond what is necessary for a requested feature without an appropriate legal basis or consent where required.

We may process relevant information to prevent fraud, investigate payment abuse or safety incidents, protect customers and artists, maintain security, enforce policies, investigate circumvention, and establish, exercise, or defend legal claims. We may disclose information when required or permitted by applicable law or valid legal process, including lawful requests from courts, law-enforcement agencies, regulators, tax authorities, government agencies, and other competent authorities.

MehSang does not knowingly permit people below the applicable age for independent contracting to create accounts or make bookings where not legally permitted. If an adult books a service involving a minor, we process only information reasonably necessary and apply parental-consent or other safeguards where required by law.

We retain personal information only as long as reasonably necessary for service delivery, account management, support, disputes, fraud prevention, security, accounting, taxation, contractual enforcement, legal claims, and regulatory obligations. Different types of information may have different retention periods.

Customers may request deletion of their MehSang account and eligible personal information. Before processing a sensitive deletion request, MehSang may reasonably verify the requester's identity or account ownership. Where appropriate, MehSang may delete eligible information, anonymise or de-identify eligible information, or restrict further use.

Account deletion does not cancel, waive, or otherwise discharge an outstanding financial obligation owed to MehSang. Where a customer has a negative wallet balance or another amount due and payable to MehSang, we may retain the minimum information reasonably necessary to administer, document, collect, or resolve that obligation and to comply with applicable law.

Artists may likewise request deletion of their MehSang account. If an Artist has a negative wallet balance or another amount due and payable to MehSang, account deletion does not cancel or waive that obligation. MehSang may retain the minimum information reasonably necessary to administer, document, collect, or resolve that obligation and to comply with applicable law.

Certain information may need to be retained where reasonably necessary or legally required, including information relating to transactions, invoices, taxation, unresolved disputes, fraud, security incidents, legal claims, regulatory obligations, or enforcement of applicable agreements. Account deletion therefore does not necessarily result in immediate deletion of every record associated with a customer or Artist.

You may update certain account information through the Platform or request access to or correction of eligible personal information through our support/privacy channels. You may withdraw consent for future consent-based processing; doing so does not invalidate prior lawful processing and can mean a particular feature is unavailable.

We seek to implement reasonable technical and organisational safeguards appropriate to the nature of the information, processing risks, systems used, and applicable legal requirements. Measures may include authentication controls, access restrictions, secure transmission and storage, monitoring, security logs, restricted staff access, backups, and service-provider safeguards. No internet-based system can be guaranteed completely secure.

If we become aware of a personal-data security incident, we may investigate, contain it, mitigate harm, remediate vulnerabilities, restrict compromised access, reset credentials, and implement security updates. We will make notifications required by applicable law.

MehSang may use technology or providers that process or store information in India or other jurisdictions permitted by law. Where cross-border processing occurs, we seek to comply with applicable Indian data-protection requirements and use appropriate safeguards. In a merger, acquisition, investment, restructuring, sale, affiliate transfer, or similar transaction, relevant information may be disclosed or transferred subject to applicable law.

Customers should provide accurate information, protect account credentials, not improperly share OTPs, avoid unlawful uploads, have authority before providing another person's personal information, keep contact details current, and notify us of suspected unauthorised access.

Depending on applicable law, you may have rights to access, correct, delete/erase eligible information, withdraw consent, raise grievances, manage communication preferences, and exercise other rights available under data-protection law. Rights can be subject to lawful exceptions, identity verification, and retention obligations.

For privacy questions, requests, or grievances, contact Sarvesh Kumar, Director, at support@mehsang.com or 9319635009. Our registered office is Jalalpur Road, Muradnagar, Ghaziabad, 201206, Uttar Pradesh. We handle grievances under applicable law and our grievance procedures.

We may update this Policy to reflect changes to Services, features, operations, technology, law, or our practices. The revised Policy will display an updated date. For material changes, we may give reasonable notice through the website, app, email, SMS, in-app notification, or another appropriate channel. Where new consent is required for a new purpose, we will seek it.