Privacy notice
What Jalwatara collects, why, for how long, and the choices every member has. Draft until counsel signs.
Version 0.3-draft · Published 2026-10-01 · Draft until counsel signs.
What we collect
When you join: your email address, which you confirm with a code; a mobile number, only if you give one (we do not verify it); your role, your name and three photos (a headshot, a full-length and one of your choice); and your confirmation that you are 18 or older and the version of this notice you were shown, each with the date. The photos we keep are re-encoded copies without hidden details such as where a photo was taken; the file you sent is deleted once processed. As you use Jalwatara: the sedcards, photos, comments, messages, castings, applications, bookings, references, reports, support requests and settings you create, and whom you follow or block and what you save; if you check in to a booking, your location at that moment (kept until a day after the booking ends) and a coded form of the number you give for your contact; if you ask to register an organisation, its name, kind, city and work email, and its GSTIN and letterhead if you give them. When you verify: the result of the identity check (your level, that you are 18 or older, the name on your ID and the month), never the document or your date of birth. To keep accounts safe: a random device code in a cookie, the kind of device (such as Android or iOS), the country your connection comes from, sign-in times, your network address (kept in our records only as a one-way code), the public part of any passkey (your fingerprint or face stays on your device), and signals a bot check reads from your browser when you ask for a code. Our host also records each request with your network address and browser details, and may count page views: the page address, where you came from, the browser, the kind of device, and the country and city, without a member code. We record which screens and actions are used, under a member code and never your name, email or number, and how fast pages load.
Why
To run an adults-only platform for models, photographers and crew in India: to sign you in, to show the badge, to keep others safe, and to meet the law on age and identity.
Your choices
Set every field to public, members only or private. Export your data. Deactivate, or delete with a receipt of what was removed and what was anonymised. Withdraw any consent from Settings.
How long
Identity documents are never stored. The identity check result stays while the account exists. When you delete your account, or we close it (an unverified account after thirty days), it is removed within 48 hours. As Indian law requires, the details you gave when you joined (your email, your number if you gave one, your name, your role, the photos you added when you joined, and your acceptance of the terms, this notice and the 18+ statement) are then kept locked away for 180 days and then deleted; they are used only to answer a lawful request from the authorities. Photos and sedcards we remove for breaking the rules are kept hidden for 180 days from the removal, and then deleted. Exports expire after seven days. Erasure receipts are kept for twelve months without any personal data.