Introduction & About Nigama Connect
Nigama Connect is developed and operated by Nigama Connect Private Limited ("we", "us", "our"). The Nigama Connect mobile application ("App") is a private family-oriented social networking platform designed to help users:
- Build and manage multi-generational family trees.
- Connect with relatives and friends within a private community.
- Organize and coordinate community and family events with invitations and RSVP tracking.
- Post classified listings (buy/sell, services, jobs).
- Discover community matrimony matches.
- Communicate securely via an integrated, proprietary real-time chat system.
Information We Collect
We follow a strict data minimization principle โ collecting only what is essential for application functionality:
- Identity Data: First name, last name, display name, date of birth, gender, profile photograph.
- Contact Data: Primary mobile phone number (account identifier), email address.
- Family & Relationship Data: Names, dates of birth, relationship types, photographs, and optional documents of members added to family trees.
- Matrimony Profile Data: Educational qualifications, profession, income range, physical attributes, horoscope/gothra details, family background, partner expectations.
- Community & Social Data: User posts, event listings, classified postings, RSVP status.
- Device & Technical Data: Device model, operating system version, unique device identifiers, IP address, app version, crash diagnostics.
- Communication Data: Messages exchanged via our proprietary built-in chat engine (no third-party SDK access).
- Transaction & Activity Data: Interaction logs, classified inquiries, event responses.
How We Use Your Information
Data is used exclusively to operate and enhance Nigama Connect:
- Authentication: Account creation, OTP validation, and credential security.
- Family Tree Processing: Generational linking, parent/child relationships, invite code dispatch.
- Community Networking: Connecting verified relatives and friends.
- Matrimony Matching: Filter-based profile discovery based on stated preferences.
- Event Coordination: RSVP tracking, headcount aggregation, reminder alerts.
- Classified Listings: Displaying community advertisements and job listings.
- Proprietary Chat: End-to-end routing of instant messages and media.
- Safety & Moderation: Detecting abuse, preventing unauthorized access, and upholding community safety.
Legal Basis for Data Processing
Processing occurs strictly under recognized legal bases under the DPDP Act 2023:
- Consent: Explicit, informed consent granted during registration and profile creation.
- Contractual Necessity: Processing required to deliver the core service features requested by the user.
- Legal Obligation: Compliance with applicable statutory regulations and legal disclosure mandates.
- Legitimate Interests: Security monitoring, fraud prevention, and platform integrity enforcement.
Data Storage, Infrastructure & Security
5.1 Infrastructure Stack
- Database Engine: Google Firebase / Google Cloud Database (ISO 27001 & SOC 2 certified).
- Cloud Infrastructure: Amazon Web Services (AWS) data centers with strict encryption and isolation.
- Chat Engine: 100% proprietary in-house messaging architecture (zero third-party messaging SDKs).
5.2 Security Safeguards
- Encryption in Transit: TLS 1.3 / HTTPS encryption across all client-server communications.
- Encryption at Rest: AES-256 cryptographic encryption for all stored sensitive data.
- Password Hashing: Salted cryptographic password hashing (bcrypt).
- Access Control: Strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) for administrative operations.
- Continuous Monitoring: Intrusion detection, automated firewalls, and regular vulnerability audits.
Data Sharing & Third-Party Disclosure
Data is shared only in strict operational scenarios:
- Infrastructure Providers: AWS & Google Cloud acting strictly as data processors under contractual confidentiality.
- Legal Mandates: Verified court orders or statutory law enforcement requests.
- Life Safety: Situations involving emergency prevention of serious harm.
User Rights & Data Control
Users maintain complete control under the DPDP Act 2023:
- Right to Access: Request a digital copy of all personal records.
- Right to Correction: Edit, update, or rectify profile and tree details anytime.
- Right to Erasure (Right to be Forgotten): Delete account and erase all associated personal data within 30 days.
- Right to Restrict Processing: Limit specific feature processing.
- Right to Data Portability: Obtain personal records in machine-readable format.
- Right to Withdraw Consent: Revoke data processing consent at any time.
- Response Timeframe: All verified requests are processed within 30 days.
Family Tree & User-Generated Data Responsibility
- User Authorship: Users are solely responsible for the factual accuracy of family tree entries, relationship tags, dates of birth, and names.
- Provisional Members: Adding temporary members requires that the user possesses appropriate family consent.
- Platform Exoneration: Nigama Connect acts solely as a technological platform and disclaims liability for incorrect user-entered dates, names, or genealogical claims.
Account Deletion & Complete Data Erasure
Deletion Process
Navigate to Profile โ Edit Profile โ Delete Account and verify identity via OTP sent to registered email.
Erasure Scope
- Profile data, photos, preferences, and personal media permanently erased from active servers within 30 days.
- Matrimony profiles and classified posts deactivated immediately.
- Chat messages removed from active servers.
- Backups fully purged across standard retention rotation cycles.
Childrenโs Privacy
- Nigama Connect is strictly for users 18 years of age and older.
- Independent registration by minors is prohibited.
- Minor family members may only be recorded as dependent nodes within adult family trees under parental authority.
- Accounts discovered to be operated by unsupervised minors will be suspended immediately.
Data Retention Policy
We maintain clear, statutory retention limits across all data categories:
| Data Classification | Standard Retention Period |
|---|---|
| Active User Accounts | Duration of account lifecycle |
| Deleted Accounts | Permanently purged within 30 days |
| Legal / Audit Records | Up to 5 years (as required by Indian statutory law) |
| Security & Server Logs | Up to 12 months |
| Anonymized Telemetry | Indefinite (non-identifiable aggregated metrics) |
Data Breach Response Protocol
- Containment: Immediate isolation of affected servers.
- Forensic Audit: Determination of incident scope within 24 hours.
- Notification: Direct alert to impacted users and regulatory authorities within 72 hours where required by law.
- Remediation: Immediate vulnerability patching and security audit.
Cookies & Tracking Technologies
- Essential Session Tokens: Maintain authenticated session state.
- Security Tokens: Prevent CSRF attacks and detect unauthorized logins.
- Zero Commercial Trackers: No third-party ad pixels, cross-site trackers, or commercial cookies.
Cross-Border Data Transfers
Data is stored across AWS and Google Cloud regional clusters adhering to DPDP Act 2023 international transfer guidelines and contractual safety covenants.
Policy Updates & Notifications
- Changes communicated via in-app notifications and updated "Effective Date".
- Continued application usage constitutes acceptance of updated terms.