🔒 1. Our Commitment to Solemn Privacy
At Meri Last Wish (referred to as "we", "our", or "the Platform", accessible via merilastwish.in), we recognize that writing a final message, thoughts, instructions, and registering emergency contact details is an intensely personal, solemn, and private matter. We are committed to maintaining the highest standards of data security, confidentiality, and integrity under the Information Technology Act, 2000, and the Digital Personal Data Protection (DPDP) framework.
📋 2. Information We Collect
When you use Meri Last Wish, we collect only the information strictly necessary to provide our service:
- Account Information: Your full name, verified email address, mobile phone number, and encrypted password hash.
- Final Message & Instructions (Wish Content): The personal message, wishes, accounts/asset directives, or instructions you compose on the Canvas editor.
- Relative / Emergency Contact: The emergency telephone number or contact of your chosen relative, guardian, or trusted person.
- Government Identification Documents: Scanned copies or photographs of government IDs (Aadhaar, Passport, Voter ID, PAN, or Driver's License) uploaded to authenticate account ownership.
- Financial & Transaction Data: Records of your one-time Canvas fee payments via authorized gateways (Razorpay) and your payout details (UPI ID or Bank account details) for referral bonus withdrawals.
🛡️ 3. Irreversible Backend Locking & Security Protocols
Our core innovation is the Strict One-Time Write & Permanent Backend Lock protocol:
- Once you submit your final message via "Save & Exit", our backend server applies an immutable database lock (
is_locked = 1).
- Following lock execution, our APIs permanently reject any further update or select queries from user sessions. Your wish cannot be altered, reopened, or tampered with.
- Uploaded government ID documents are sequestered in an access-restricted repository with webserver-level access controls prohibiting direct public URL downloads.
🚫 4. Zero Data Selling & Third-Party Disclosure
We maintain an absolute Zero-Sale Policy:
- We do never sell, rent, monetize, or trade your personal data, message contents, or contacts with advertisers, data brokers, or marketing affiliates.
- Your emergency contact information is stored solely for notification and fulfillment protocols in accordance with the user's declared wishes.
- Payment processing is managed securely by RBI-compliant payment aggregators (e.g. Razorpay). We do not store raw credit/debit card numbers or bank passwords.
⚖️ 5. User Rights & Data Retention
You retain legal rights over your account under applicable data protection laws, including the right to request verification of stored details or request complete account deactivation by contacting our grievance team prior to final message release.
📞 6. Data Grievance Officer & Contact Details
If you have questions, inquiries, or privacy concerns regarding the treatment of your personal data on Meri Last Wish, please reach out to our dedicated support office:
Brand / Entity: Meri Last Wish