Draft · requires owner and qualified legal review
Privacy Policy
Draft notice
This draft describes how the USNikah software currently handles information. It has not received legal review, is not a certification, and does not create contractual guarantees. Placeholders remain where the operator has not published a legal name, mailing address, or support email. Qualified U.S. counsel must review this before production publication.
Who we are
USNikah is a private Muslim matrimonial matchmaking service operated by [LEGAL ENTITY NAME], with support currently reached by [SUPPORT TELEPHONE] or [SUPPORT EMAIL]. This is not a public browsing directory and there is no customer login.
Information collected
When a candidate or family representative submits a profile we collect identity and contact details (name, date of birth, WhatsApp number, required email), family information, marital history, education and employment, immigration/residency category, current U.S. city and state, Hyderabad-origin community assignment (set by the server, not chosen by the submitter), partner preferences, consent flags, payment-related identifiers from Stripe, messaging and delivery history, support-case notes recorded by administrators, and operational logs needed to run matching, payments, and WhatsApp delivery.
Sensitive information
Matrimonial profiles can include religious and community affiliation, marital history, and other information that may be treated as sensitive under U.S. state privacy laws. Collection of this information, and limiting launch eligibility to a Hyderabad-origin community, requires legal review of anti-discrimination and privacy disclosure obligations. This draft does not assert that those criteria are lawful in every U.S. jurisdiction.
How information is used
We use submitted information to operate reciprocal matchmaking, decide when a paid-access offer is eligible (at least three currently eligible mutual matches), process a $50 one-time Stripe Checkout (not a subscription), deliver consented WhatsApp templates, suppress messages after STOP or verified requests, investigate support cases, recover failed jobs, and keep financial/audit records.
Sharing with other candidates
Compatible profile summaries may be sent to a paying member over WhatsApp according to membership, matching, consent, and delivery-window rules. Name, WhatsApp number, and email are included only when the submitter gives a separate, unchecked opt-in for match-detail sharing. Communication consent does not authorize that disclosure. Contact numbers are not published in a public directory. Previously delivered match information cannot be recalled from a recipient’s device.
Processors
Infrastructure currently includes Supabase (PostgreSQL and admin authentication), Stripe (payments, refunds, and disputes), Meta WhatsApp Cloud API (templates and webhooks), Resend (optional match-availability email), Telnyx (optional match-availability SMS), and the application host used for Cloud Run and Cloud Scheduler. Those providers process data under their own terms. Email and SMS remain disabled until the operator verifies sender identity, campaign registration, and business identification details.
Consent and communications
Registration requires matching, service-communication, and commercial-email consents. Email is required because match-availability notices and paid matching-access invitations are sent to that address; those emails are commercial messages and include sender identification plus an unsubscribe link (CAN-SPAM). SMS match-availability notices remain optional and stay unchecked by default. WhatsApp consent is not treated as email or SMS marketing consent. SMS notices require explicit A2P consent, STOP/HELP handling, and an approved campaign before U.S. sending. WhatsApp STOP, number-level opt-out, and profile-level suppression stop automated outbound WhatsApp messages. START does not restore sending. A staff checkbox is not treated as proof that a new WhatsApp number is controlled; a pending destination challenge must be completed from that number before match delivery moves.
Family representatives
A family representative may submit a profile. Knowing a public Profile ID or controlling a family phone number does not grant the requester automatic candidate authority. Candidate-requested corrections, contact changes, withdrawal, and erasure review require a Support Case with scoped verification.
Retention and deletion
Administrators can withdraw a profile, stop matching, and stop WhatsApp. A Super Admin erasure review can redact free-text and email after verified authority. Payment, Stripe provenance, STOP/suppression, previously shared match records, and audit logs are retained because the software does not support an automated irreversible purge. Owner-approved retention periods are not yet set. See the Data Retention draft.
Security limitations
The application uses access control, encrypted transport to providers, Row Level Security on the database with service-role server access, and hashed abuse-control keys. No method of transmission or storage is completely secure. This page does not claim a specific encryption certification.
Your requests
Contact [SUPPORT TELEPHONE] or [SUPPORT EMAIL] to request correction, withdrawal, communication stop, or deletion review. Identity will be verified before destructive actions. The operator will not promise a statutory deadline until counsel sets one.
Children
Profiles are intended only for adults 18 years or older.
Changes
This draft will be replaced after owner approval and legal review. The public site must not present it as a finished policy until then.