Privacy notice

How we handle your information

Who we are

Our Sandook ("we") provides an online tool to organise document references, personal wishes, letters and emergency contacts. Contact: support@oursandook.com. [Legal entity name, registered address and grievance officer details to be added before launch.]

Account details: your name, email address and a securely hashed password (we never store your password in readable form).
Content you choose to add: profile details, document references, wishes, letters, emergency contacts and check-in history.
Contacts' details you provide: name, relationship, email and/or phone. You confirm you have their permission.
Enquiries: details you send through booking, interest or contact forms.
Death reports: the reporter's name, contact details and relationship, and any statement they provide.
Technical data needed to run and secure the service, such as session cookies and limited server logs.

Passwords, PINs, OTPs, recovery codes or bank credentials for your other accounts.
Uploaded documents or scans.
Advertising or cross-site tracking data. We do not use third-party analytics in this version.

To provide your dashboard and keep your content private to your account.
To send reminders and check-in messages through channels you opted into.
To contact your nominated contacts with a neutral safety-check message after four consecutive missed check-ins, if you subscribe to letter safekeeping.
To review reported deaths and, only where approved, deliver specific letters to the recipients you chose.
To respond to enquiries, prevent abuse and meet legal obligations.

Only you can see your content in normal operation. This is enforced by database access rules.
Authorised reviewers can see release-case details (not letter contents) when a death has been reported.
Service providers who host our database and send messages on our behalf, under contract. [List providers and data locations before launch.]

You can delete your account at any time from Settings. This permanently removes your profile, content, contacts and check-in history.
Security and audit records that contain no personal content are kept for a limited period. [Define periods before launch.]
Backups are overwritten on a rolling schedule. [Define the schedule before launch.]

Change notification preferences and opt out of messages in Settings.
Request access to, correction of or deletion of your information by contacting us.
[Rights and grievance redressal under applicable Indian data protection law to be completed by legal counsel.]