Privacy Policy
Purpus Orgorbit Super App (OPC) Private Limited
Effective Date: February 2026 · Last Updated: February 2026
1. Safety & Child Protection (Zero Tolerance)
Important: To ensure the safety of our users, specifically children, we enforce strict content standards. Purpus Orgorbit Super App (OPC) Private Limited has a Zero-Tolerance Policy regarding Child Sexual Abuse and Exploitation (CSAE).
- Prohibited Content: Users are strictly prohibited from uploading, sharing, or soliciting content that depicts or promotes CSAE.
- Enforcement: Any user found violating this policy will be immediately and permanently banned.
- Reporting: We report all instances to the National Center for Missing & Exploited Children (NCMEC) and applicable law enforcement agencies worldwide.
- In-App Reporting: Report inappropriate content via the 'Report' feature in any of our apps or email info@orgorbit.com.
We employ both automated detection systems and human review to identify and remove such content. We cooperate fully with law enforcement investigations related to child safety.
2. Who We Are
Purpus Orgorbit Super App (OPC) Private Limited ("Company", "we", "us", "our") is a technology company registered in India (CIN: U62090KA2024OPC195441) that builds and operates community-driven platforms. Our products include:
- BelongCart — an identity-driven marketplace where users discover and transact with communities, organizations, and service providers based on shared values and belonging.
- MahaMantra JapaRuchi — a dedicated app for tracking and improving Japa (chanting) practice, open to practitioners worldwide.
- Community marketplace apps — niche marketplace apps built for specific communities (e.g., faith-based, cultural, or interest-based groups).
All products are built, owned, and operated by the Company. The Company is an intermediary under the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. When this policy refers to "the Platform", it means all apps and services operated by the Company.
Our services are available to users worldwide. The Company is headquartered in Bangalore, India.
3. What This Policy Covers
This single privacy policy covers all Company products — BelongCart, MahaMantra JapaRuchi, all community marketplace apps, and the orgorbit.com website. By creating an account on any of our apps, you agree to this policy.
If you are located in the European Union, European Economic Area, United Kingdom, California (USA), or Canada, additional rights and disclosures apply to you — see Section 17 (Jurisdiction-Specific Rights) below.
4. How Our Apps Are Connected
When you create an account on any app (e.g., MahaMantra JapaRuchi), you are creating an account on the Platform. Your credentials work on the app you signed up on and on BelongCart. If you choose to sign up on additional community apps in the future, the same credentials will work there too — but signing up on one community app does not create your presence on any other community app. Data flows upward only: from your app to BelongCart, never sideways between community apps.
Cross-App Visibility
Your profile and activity are visible as follows:
- If you sign up on a community marketplace app (e.g., MahaMantra JapaRuchi), your profile is visible to other users of that same app, and to users on BelongCart.
- If you sign up on BelongCart directly, your profile is visible to other BelongCart users only.
- Users from one community marketplace app cannot see users from a different community marketplace app. Only BelongCart shows profiles and listings from community apps whose users have not set their profiles to private.
Your listings (products, courses, events, services) follow the same rules — they are visible within your app and on BelongCart.
Private Profile Option
You can set your profile to private at any time from Settings in your app. When your profile is private:
- You remain visible to other users within the app you signed up on (e.g., MahaMantra JapaRuchi). No change there.
- Your profile, listings, and posts are hidden from BelongCart. You will not appear in BelongCart search, feeds, or discovery.
- You can still use BelongCart to browse, buy, and consume content. You are simply not discoverable by others on BelongCart.
Shared Features
Certain features on the Platform — such as leaderboards, rankings, community challenges, and activity counters — may aggregate limited participation data (such as display name and activity score) from users. This means:
- If you participate in a feature that exists across multiple apps (e.g., Japa tracking in MahaMantra JapaRuchi), your participation data (such as your display name and activity score) may be visible to users on BelongCart and within the specific feature's context. This does not expose your data to users of other community apps you have not signed up on.
- This is limited to feature-specific participation data only. Your full profile, listings, posts, and identity declarations are not shared and continue to follow the cross-app visibility rules above.
- We may introduce new shared features from time to time. When we do, the feature will clearly indicate that participation data is visible beyond your app (e.g., on BelongCart or within the feature itself).
- If your profile is set to private, your participation in shared features will be anonymized (e.g., displayed as "Anonymous User" on leaderboards).
5. What Data We Collect
Account Information
When you create an account, we collect: name, email address, phone number, and password. You may optionally provide a profile photo, bio, and location.
Identity Information (Sensitive Personal Data)
Our platform enables identity-based discovery. You may voluntarily declare identities such as faith, cultural background, interests, values, profession, and other personal attributes. This data is classified as sensitive personal data under applicable law and is handled with extra care:
- Identity declarations are always voluntary. We never collect this data automatically.
- Each identity you add is an active opt-in — you explicitly choose to declare it.
- We never infer or auto-assign identities. Every identity on your profile was explicitly declared by you.
- You can add, modify, or remove identity declarations at any time from your profile settings.
- Setting your profile to private hides your identity information from BelongCart discovery.
Usage Data
We collect information about how you use our apps: pages visited, features used, search queries, time spent, and interactions with content. On MahaMantra JapaRuchi, this includes Japa (chanting) session data such as round counts, session duration, and audio recordings used for voice-based chanting verification.
Transaction Data
When you buy, book, donate, or otherwise transact on the platform, we collect: transaction details, payment method (processed by third-party payment providers — we do not store full card numbers), order history, and delivery information if applicable.
Device and Technical Data
We collect: device type, operating system, app version, IP address, browser type (for website visits), and push notification tokens.
Content You Create
Posts, comments, reviews, listings, media uploads, and messages you create on the platform are stored by us.
6. How We Use Your Data
We use your data to:
- Provide, maintain, and improve our apps and services
- Enable identity-based discovery — connecting you with relevant communities, content, and offerings based on your declared identities
- Process transactions and facilitate order fulfillment between buyers and sellers
- Send notifications about your account, transactions, and communities you've joined
- Power shared features such as leaderboards and community challenges
- Detect and prevent fraud, abuse, and policy violations
- Comply with legal obligations
- Analyze usage patterns to improve the platform (in aggregate, not individually identifiable)
Legal Bases for Processing (for EU/EEA/UK users)
If you are located in the EU, EEA, or UK, we process your data under the following legal bases:
- Contract: Processing necessary to provide the Platform services you signed up for (account creation, transactions, cross-app features).
- Consent: Processing of sensitive personal data such as religious beliefs and identity declarations. You actively opt in each time you declare an identity, and you can withdraw consent by removing the declaration.
- Legitimate interest: Analytics, fraud prevention, and platform improvement where these do not override your fundamental rights.
- Legal obligation: Where we are required to process data by law (e.g., tax records, law enforcement requests).
7. Seller and Buyer Data Sharing
When you purchase a product, book a service, or enroll in a course, the seller or service provider receives the information necessary to fulfill your order. This includes: your name, contact number, delivery address (for physical products), and the source app from which the order originated (e.g., "Ordered via BelongCart").
Sellers do not receive: your identity declarations, your activity on other apps, your Japa data, your browsing history, or any information unrelated to the specific transaction.
8. Data Sharing With Third Parties
We do not sell your personal data to anyone.
We may share data with:
- Payment processors — to process transactions securely. They receive only the data necessary to complete the payment.
- Cloud infrastructure providers — our data is hosted on secure cloud servers. These providers process data on our behalf under strict contractual obligations.
- Law enforcement and regulatory authorities — when required by law, court order, or to protect the safety of our users (see Content Moderation section).
- Analytics services — we may use third-party analytics tools that process aggregated, non-personally-identifiable usage data to help us improve the platform.
We do not sell or rent your personal data. We do not share your data with advertisers. We do not use your data for targeted advertising by third parties.
9. Data Storage and Cross-Border Transfer
Your data is primarily stored on cloud servers located in India. Some data may be processed by third-party service providers (such as cloud infrastructure, payment processors, and analytics tools) whose servers may be located outside India, including in the United States, the European Union, and other countries.
Where data is transferred outside India, we ensure that adequate safeguards are in place as required by the Digital Personal Data Protection Act, 2023, and that the receiving country or entity provides a reasonable level of data protection. We will only transfer data to countries or entities permitted under applicable law.
For transfers of personal data from the EU/EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other approved transfer mechanisms under the GDPR. For transfers involving Canadian users, we ensure compliance with PIPEDA's requirements for cross-border data transfers.
10. Children's Privacy
Our apps are not intended for children under the age of 13 (or 16, where required by local law such as in certain EU member states). We do not knowingly collect personal data from children below the applicable age threshold. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it.
Users between 13 and 18 (or the applicable local age of digital consent) may use the platform with verifiable parental or guardian consent. We may request verification of parental consent where required by law.
11. Content Moderation and User Safety
Reporting and Blocking
- Our apps provide tools to report inappropriate content, offensive behavior, or violations of community guidelines.
- Users can block other users to prevent unwanted interactions.
- All reports are acknowledged within 24 hours and reviewed by our moderation team within 15 days.
- Reporter identities are kept confidential.
Enforcement
- Verified policy violations result in content removal and user warnings.
- Repeat or severe violations may result in temporary suspension or permanent account termination.
- Terminated users are prohibited from creating new accounts.
12. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.
Transaction records may be retained for up to 7 years as required by applicable tax and financial regulations in the relevant jurisdiction.
Aggregated, non-identifiable analytics data may be retained indefinitely.
13. Account Deletion
You can request deletion of your account at any time by:
- Using the "Delete Account" option in your app's Profile settings, or
- Emailing us at info@orgorbit.com
When you delete your account:
- Your profile is removed from the app you signed up on and from BelongCart.
- Your listings, posts, and content are removed.
- Your data is deleted from our systems within 30 days.
- Transaction records are retained as required by law (see Data Retention above).
- If you have signed up on additional apps using the same credentials, account deletion removes you from all apps you signed up on, including BelongCart.
14. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS/TLS), secure cloud hosting, access controls, and regular security reviews. No system is 100% secure, and we cannot guarantee absolute security, but we take reasonable measures to protect your information.
15. Cookies (Website Only)
The orgorbit.com website uses cookies for:
- Session management — keeping you logged in during your visit.
- Preferences — remembering your display and language settings.
- Analytics — understanding how visitors use our website (aggregated, non-personal).
You can disable cookies in your browser settings. Some website features may not function properly without cookies. Our mobile apps do not use browser cookies.
We do not use cookies for advertising or tracking purposes. If we introduce any analytics cookies that collect personal data, we will request your consent before setting them (as required by the EU ePrivacy Directive and similar laws).
16. Your Rights
Regardless of where you are located, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your account and associated data.
- Withdraw consent — withdraw consent for data processing at any time (this may affect your ability to use certain features).
Additional rights may apply depending on your location — see Section 17 below.
To exercise any of these rights, contact our Grievance Officer (details below). We will acknowledge your request within 24 hours and resolve it within 30 days.
17. Jurisdiction-Specific Rights
The following additional rights and disclosures apply to users in specific regions. These supplement the rights described in Section 16 above.
India — Digital Personal Data Protection Act, 2023
If you are located in India, the following applies in addition to your general rights:
- Nomination: You may nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act, 2023.
- Grievance redressal: You may raise a complaint regarding our data practices with our Grievance Officer (see Section 18). If unsatisfied with the resolution, you may approach the Data Protection Board of India.
- Consent withdrawal: You may withdraw consent for processing at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
The Company is an intermediary under the Information Technology Act, 2000 and complies with the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
European Union / European Economic Area — General Data Protection Regulation (GDPR)
If you are located in the EU or EEA, the following applies in addition to your general rights:
- Legal basis: We process your data under the legal bases described in Section 6 (contract, consent, legitimate interest, legal obligation).
- Right to restriction: You may request that we restrict processing of your data in certain circumstances (e.g., while we verify accuracy of disputed data).
- Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to object: You may object to processing based on legitimate interest. We will cease processing unless we have compelling legitimate grounds that override your rights.
- Automated decision-making: We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
- Data transfers: When we transfer your data outside the EU/EEA, we use Standard Contractual Clauses (SCCs) approved by the European Commission or other approved transfer mechanisms.
- Supervisory authority: You have the right to lodge a complaint with your local data protection supervisory authority.
For sensitive data (religious beliefs, identity declarations): we rely on your explicit consent (GDPR Article 9(2)(a)). Each identity declaration is a separate, active consent action. You can withdraw any declaration at any time from your profile settings.
United Kingdom — UK GDPR
If you are located in the UK, you have the same rights as described in the EU/GDPR section above, as implemented under the UK General Data Protection Regulation and the Data Protection Act 2018. Data transfers from the UK are governed by the UK International Data Transfer Agreement or UK Addendum to the EU SCCs. You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
California, USA — California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA)
If you are a California resident, the following applies in addition to your general rights:
- Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share data.
- Right to delete: You may request deletion of your personal information, subject to legal exceptions.
- Right to opt out of sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
- Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
- Right to correct: You may request correction of inaccurate personal information.
- Right to limit use of sensitive personal information: You may request that we limit our use of sensitive personal information (including religious beliefs) to what is necessary for providing the services.
To exercise these rights, email info@orgorbit.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days.
Categories of personal information collected in the preceding 12 months: Identifiers (name, email, phone), internet/electronic activity (app usage, device data), audio data (Japa verification), geolocation (approximate), sensitive personal information (religious beliefs — voluntarily declared), and commercial information (transaction history). See Section 5 for full details.
Canada — Personal Information Protection and Electronic Documents Act (PIPEDA)
If you are located in Canada, the following applies in addition to your general rights:
- Consent: We collect, use, and disclose your personal information with your knowledge and consent. You may withdraw consent at any time, subject to legal or contractual restrictions.
- Access and correction: You may request access to your personal information held by us and request correction of any inaccuracies.
- Cross-border transfers: Your data may be transferred to and processed in India and other countries. By using our services, you acknowledge that your information may be processed outside Canada, where it may be subject to the laws of the country in which it is processed.
- Complaints: You may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
18. Grievance Officer
In accordance with the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer:
Name: Suresh Paramayogi
Designation: Grievance Officer
Email: info@orgorbit.com
Address: Flat No H-2024, Mantri Tr, Gubbalala, Chikkalasandra, Bangalore South, Bangalore — 560061, Karnataka, India
The Grievance Officer will acknowledge your complaint within 24 hours and resolve it within 15 days of receipt. If you are not satisfied with the resolution, you may approach the Data Protection Board of India (for Indian users), your local data protection authority (for EU/EEA/UK users), or the relevant regulatory body in your jurisdiction.
For EU/EEA/UK users: The Grievance Officer also serves as our primary point of contact for data protection inquiries under GDPR and UK GDPR. If we appoint an EU representative under GDPR Article 27 in the future, their details will be published here.
19. Community Marketplace Partners
Some community marketplace apps on our platform may be operated in partnership with external organizations. In such cases:
- The partner organization may have access to user data within their specific marketplace app only (users who signed up through their app).
- Partners are bound by a Marketplace Partner Agreement that requires them to protect user data and comply with this privacy policy.
- Partners do not have access to data from other marketplace apps or from BelongCart.
20. Changes to This Policy
We may update this privacy policy from time to time. When we make significant changes, we will notify you through the app (via push notification or in-app message) and update the "Last Updated" date at the top of this page. Your continued use of our apps after changes are posted constitutes acceptance of the updated policy.
For EU/EEA/UK users: Where changes affect the legal basis of processing or introduce new categories of data collection, we will seek your renewed consent where required by GDPR.
21. Contact Us
For any privacy-related questions, requests, or complaints:
Purpus Orgorbit Super App (OPC) Private Limited
Flat No H-2024, Mantri Tr, Gubbalala, Chikkalasandra,
Bangalore South, Bangalore — 560061, Karnataka, India
Email: info@orgorbit.com
Website: orgorbit.com