Privacy Policy

Mindset Mingle runs www.mindsetmingle.com, a marketplace where people book experiences and events run by local hosts. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and what you can ask us to do about it.

“We” and “us” mean Mindset Mingle, based in Trivandrum, Kerala, India. We decide why and how your personal data is used, so we are responsible for it.

Information we collect

When you create an account or book.

• Your name, email address and phone number.
• A password, which we store only in scrambled (hashed) form. If you sign in with Google we receive your name, email address and profile picture from Google, and never your Google password.
• Optional profile details: date of birth, address, profile picture and a short bio. We use your date of birth to check age limits on experiences.
• If you check out as a guest, we ask for your name, email and phone, and create an account for you without a password so your booking has somewhere to live. You can claim that account later by resetting its password.

About your bookings.

• What you booked, the date and time, the number of guests, the price, any coupon used, and any reason you give when you cancel.
• Payment records: the amount, the method, the status, and the gateway’s order and transaction references. We do not receive or store your card number, UPI PIN or net banking details. Those are entered on the payment gateway’s own page.
• Reviews you write.

If you apply to host or earn through us.

• Your application: business name, GST number if you have one, website, location, description of what you offer, and your listing text and photographs.
• If you are paid out by us (for example a Mingle Circle reward): your UPI ID or bank account details and, optionally, your PAN. Account and PAN numbers are stored encrypted, and only a small group of administrators can see them.

Mingle Circle.

• Your messages in a Circle, any bio and interests you add for it, and who you have blocked or reported.

When you contact us. The name, email and message you put in the contact form. These are emailed to us; the contact form does not store them in our database.

Collected automatically.

• Your IP address, browser and device type, the pages you view, and where you came from.
• Cookies and similar identifiers. See “Cookies and tracking” below.

How we use your information

• To take and manage your booking, take payment, and send confirmations and reminders.
• To pass your booking details to the host so they can run the experience.
• To refund, cancel or reschedule bookings, and to deal with disputes.
• To run your account, and to keep the platform secure and prevent fraud and spam.
• To run Mingle Circle, including emailing you a digest of unread messages (you can change this in your notification settings).
• To pay hosts, regional partners and Circle rewards what they are owed.
• To ask you to review an experience after you have taken it.
• To measure how the site is used and how our advertising performs, and to improve both.
• To meet our legal, tax and accounting obligations.

We do not sell your personal information. The emails we send are about your bookings, your account, your Circles, and asking you to review an experience you have taken.

Who we share it with

We share personal information only as described here, and only the part each recipient needs.

• The host of the experience you book. Your name, contact details, guest count and any notes, so they can run the experience and contact you about it.
• Other members of a Mingle Circle you join. See the next section.
• PayU, our payment gateway, which takes your payment and tells us whether it succeeded. Our backup gateways, HDFC and Razorpay, are not currently in use.
• Meta (Facebook and Instagram), only if you agree to advertising cookies, for advertising measurement. Google, for analytics: page views and the like only if you agree to analytics cookies, plus a count of completed bookings that carries nothing that identifies you (explained under “Cookies and tracking”). This is sharing for measurement and advertising, not for fulfilling your booking.
• WhatsApp (Meta), if you message us on WhatsApp or we message you there. Messages to and from our business number pass through WhatsApp, and a copy (your name and number as WhatsApp shows them, and the messages) is kept in our own system so our team can answer you. Only our admins can read it.
• Service providers who run the platform for us: Vercel (hosting), Neon (database), Resend and Gmail (sending email), Google Cloud Storage (photographs and uploads), and Cloudflare (bot protection on forms). They process data on our behalf and are not allowed to use it for their own purposes.
• Regional partners. Where a location or state partner earns a share of bookings in their area, they may see booking figures for their area.
• Authorities and advisers, where the law requires it, to enforce our terms, or to protect people from harm, and to our accountants and legal advisers under confidentiality.

Mingle Circle: what other people can see

A Mingle Circle is a group chat for people who have booked the same session. When you join one, the other members can see:

• Your first name and the first letter of your surname, and your profile picture.
• Your age, worked out from your date of birth. They never see the date itself.
• The Circle bio and interests you have chosen to add.
• Every message you post in the group.

They do not see your email address or phone number. You can hide yourself from the member list in your Circle settings. Anything you write in a Circle can be copied or shared by other members, so please do not post anything you would not want others to keep. A Circle is open for messages until about 48 hours after the session, is then read-only, and is closed 30 days after the session. We may keep records of closed Circles, including reported messages, for safety and dispute purposes.

Cookies and tracking

Cookies that keep you signed in, protect forms from bots and remember your cookie choice are always on, because the site cannot work without them. Everything else is off until you say yes. The first time you visit we ask, and you can change your mind at any time with “Cookie settings” in the footer. Rejecting is as easy as accepting, and you can still use the whole site if you reject.

• Analytics (only if you agree): Google Analytics. Sets cookies and records which pages you view and how you found us. If you complete a booking we also tell Google from our server, and link it to your visit.
• A count of bookings (whatever you choose). So that our booking figures are right, when a booking is made our server tells Google that it happened: the amount, which experience and how many guests, and an order reference. If you did not agree to analytics, this carries nothing that identifies you or your browser: no cookie, no name, email, phone or IP address, and it is not linked to your visit.
• Anonymous visit counts (whatever you choose). Our own server counts how many times each experience or event page is opened, Book is tapped, and bookings reach payment and are paid, with the advert or link tag the visit came from. It uses no cookie and keeps only daily totals: never your name, account, IP address, browser details or any visitor identifier. These counts stay with us.
• Advertising (only if you agree): the Meta Pixel. Sets cookies and tells Meta which pages you view and which actions you take (including submitting a host application, with the town and category but not your name or contact details), so we can measure and improve our adverts. If you complete a booking we also tell Meta from our server, including an encoded (hashed) form of your email, phone number and name, your IP address and browser details. Hashing scrambles the data, but Meta can still match it to an account, so we treat it as personal information.
• Always on: sign-in cookies, which also hold a small record of your name, email and role so the menu can show your name; Cloudflare Turnstile, which checks that a form is being filled in by a person; and a cookie that remembers your choice.

The full list, with what each cookie does and how long it lasts, is in our Cookie Policy. You can also block or delete cookies in your browser, which will stop sign-in working.

Where your data is processed

Several of the providers above, including Google, Meta, Vercel and Resend, process data on servers outside India. By using the site you understand your information may be transferred and processed in other countries, which may have different data protection laws from India.

How long we keep it

• Your account and profile: for as long as your account exists. If you ask us to delete it, we delete or anonymise your personal details.
• Booking, payment, commission and payout records: we must keep these for as long as tax, accounting and consumer law requires, so on a deletion request we remove the personal details we can and keep the financial record.
• Unfinished checkouts: kept only as long as needed to complete or reconcile the payment. Payment evidence is kept until any refund question is settled.
• Contact messages: they sit in our email inbox until we clear it out.
• Analytics and advertising data: kept by Google and Meta under their own retention rules.

How we protect it

Passwords are stored hashed, sign-in sessions are protected, bank account and PAN numbers are encrypted, access to personal data is limited by role, and forms are protected against bots and abuse. No system is perfectly secure. If a breach of your personal data occurs that is likely to affect you, we will tell you and the authorities as the law requires.

Your rights

You can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct anything that is wrong or out of date (you can also edit most of it in your account);
• delete your personal data, subject to the records we must keep by law;
• stop using your data for something you agreed to, by withdrawing that consent; and
• deal with a complaint about how we have handled your data.

If you have an account you can download a copy of your data yourself: sign in, open Settings and choose “Download my data”. You can edit most of your details in your profile, and ask us to delete your account from Settings too.

Otherwise, or for anything else, email mindsetmingle@gmail.com or call +91 80756 43571. We may need to confirm it is really you before we act. If you are not satisfied with our reply, you may complain to the Data Protection Board of India once it is operating, or to the relevant data protection authority if you live outside India.

Children

Mindset Mingle is for adults. We do not knowingly collect personal data from children under 18. If you think a child has given us their data, email us and we will remove it.

Changes to this policy

We will update this page when what we do with your data changes, and change the “last updated” date at the top. For significant changes we will tell account holders by email.

Contact

Questions, requests or complaints about your personal data: mindsetmingle@gmail.com, or +91 80756 43571. Mindset Mingle, Trivandrum, Kerala, India.