Privacy Policy

Depending on how you use Aghor:

• Account data - name, email, phone number, password (hashed), role, and studio/business details for Creators.
• Client and booking data- when a Creator manages their business on Aghor: member profiles, attendance, bookings, notes, memberships, waiver signatures, and communication preferences. We process this on the Creator's behalf.
• Payment data - payments are processed by Razorpay and Stripe. We receive transaction status, amount, and reference identifiers; we never store full card numbers, UPI PINs, or bank credentials.
• Content - schedules, images, videos, and posts uploaded to the platform. Video is hosted through our streaming provider (Mux).
• Usage and device data - log data, IP address, browser type, and interactions with the product, used for security, debugging, and improving Aghor.

• To provide the service: bookings, payments, reminders, client records.
• To send transactional communication - booking confirmations, receipts, waitlist promotions - by email and, where a Member has opted in, WhatsApp.
• To secure the platform: fraud prevention, rate limiting, abuse detection.
• To improve the product through aggregated, de-identified analytics.
• To comply with legal obligations, including tax and accounting requirements.

For a Creator's member data (client lists, attendance, notes), the Creator is the data fiduciary and Aghor acts on their instructions as a processor. Members should direct requests about how a specific studio uses their information to that studio; we support Creators in honouring such requests. For account data of Creators and for visitors to aghor.co, Aghor is the data fiduciary.

We share data only with service providers needed to run Aghor.

Each provider processes data under its own safeguards and only to provide its service to us. We do not sell personal data, and we do not share a Creator's member list with anyone other than that Creator and their authorised staff. We may disclose data if required by law or to protect the safety and integrity of the platform.

We use essential cookies for sign-in sessions and security. We do not run third-party advertising cookies on aghor.co. If we introduce product analytics cookies, this policy and the site will be updated accordingly.

We retain data while an account is active. When a Creator account is closed, business data is available for export for 30 days and then scheduled for deletion, except records we must keep for legal, tax, or dispute purposes. Members may ask a Creator to remove their profile from that studio; payment records persist as required by financial regulations.

Data is encrypted in transit, access is role-scoped and enforced at the database level (row-level security), payment credentials are held by the payment providers, and Creator payment integration secrets are stored encrypted. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and the relevant authorities as required by law.

Under India's Digital Personal Data Protection Act, 2023 (and comparable laws where applicable), you may request access to, correction of, or deletion of your personal data, and withdraw consent for optional processing such as WhatsApp notifications or marketing.

Write to support@aghor.co and we will respond within a reasonable time. If you are a Member of a studio, we may route the request through that studio where it concerns their records.

Aghor is not directed at children. Creators who enrol minors in classes (for example, kids' yoga batches) are responsible for obtaining verifiable parental consent as required by law.

We will post updates to this policy here and note the revision date above; material changes will be announced by email or in-product notice. Grievance and privacy contact: support@aghor.co, Aghor Labs Pvt. Ltd., India.