What we do with what you tell us.

This note is written to India’s Digital Personal Data Protection Act, 2023 — assented to in August 2023, with its Rules notified in November 2025 (Press Information Bureau) and obligations phasing in through May 2027 (summary by S&R Associates). The deadlines are staggered; our reading of them isn’t. We build to the Act now. Counsel review is still pending before the first cohort opens — where something awaits that review, this note says so in brackets.

What we collect

The application asks for the following, and nothing more:

• your name
• your gender
• who you’re hoping to meet
• your age
• your city
• your profession
• a short bio, only if you choose to add one
• what you’ve tried before — apps, matrimonial sites, family
• your email
• your phone number

Alongside those: the consent box you tick, a timestamp, and — if you arrived through an ad or a shared link — the campaign tags (UTM) in the address that brought you here, which tell us which message resonated. That is the complete list. Nothing is collected silently, and later, if you choose, an intake conversation is added with the same rules attached.

What it’s for

One purpose: considering and preparing introductions for you — which at this stage means shaping balanced cohorts across India and who you might meet within them. We don’t sell your information, we don’t show it publicly, there is no browsable profile of you anywhere, and your answers are never used to build advertising audiences. The Act calls this purpose limitation; we would hold to it anyway.

Consent, unbundled

The consent you give at the end of the application is specific: it covers the waitlist and the consideration of introductions, nothing else. It isn’t bundled with marketing, isn’t buried in terms, and is withdrawable exactly as easily as it was given — one email to hello@talkiepoint.com, and both the consent and the data go.

How long we keep it

As long as the purpose lasts, and no longer. If you withdraw, we delete. If the waitlist test ends without a first cohort, we delete the pile — we don’t keep a mailing list as a consolation prize. There is no indefinite retention of applicants who never became members.

How it’s read

By AI, plainly disclosed: applications — and, later, intake conversations — are read and considered by Talkiepoint’s AI to shape balanced cohorts and prepare introductions. There is no human queue reading your application, and we won’t pretend otherwise. If you want to ask a person about anything we hold or how it was used, write to us — a person answers.

Who can see it

Access is limited to the founder and the systems described above. When an introduction is proposed, the other person sees only what the introduction note contains — never your contact details, which are shared only after both of you agree.

Your rights

Four, and you don’t need a lawyer to use them: access to a copy of everything we hold about you; correction of anything wrong; erasure — honored within 7 days; and nomination, meaning you can name someone to exercise these rights on your behalf. Write to hello@talkiepoint.com; the reply comes from a person.

Where it lives

In a managed Postgres database run by Supabase, in their Mumbai region (AWS ap-south-1) — your application is stored in India. Encrypted in transit and at rest, access-controlled, readable only as described above.

Cookies

This site sets none today — not for analytics, not for advertising, not under the label of “essential.” If that ever changes, this note changes first and says exactly what was added and why.

Questions and grievances

Write to hello@talkiepoint.com. Today that inbox reaches the founder directly. [Counsel review pending: the DPDP Rules require publishing the contact of a person able to answer data questions — a named grievance officer and the formal procedure will be listed here before the first cohort opens.]

This is version 1 of this note, written to the Act and Rules cited above and awaiting review by counsel. If a word of it changes, the date at the top changes with it.