WEDDINGWAY PRIVACY POLICY
Operated by: Aatron ("Company")
Effective Date: September 14, 2026
Last Updated: September 14, 2026
1. INTRODUCTION AND SCOPE
This Privacy Policy governs the collection, processing, storage, disclosure, and protection of personal data by Aatron ("Company," "Aatron," "we," "us," or "our") in relation to WeddingWay ("WeddingWay," "Platform," "Service"), accessible via our website, web application, mobile applications, APIs, and associated landing portals.
Aatron is dedicated to facilitating lawful, dignified marriage matches between serious candidates and families. We recognize the profoundly personal nature of matrimonial search, which often necessitates sharing sensitive demographic, religious, familial, and lifestyle information. We adhere strictly to recognized global privacy principles, including the European Union General Data Protection Regulation (GDPR), the United Kingdom Data Protection Act, the California Consumer Privacy Act (CCPA/CPRA), and applicable international privacy frameworks.
BY CREATING AN ACCOUNT, ACCESSING, OR USING WEDDINGWAY, YOU VOLUNTARILY AND EXPLICITLY ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND CONSENTED TO THE COLLECTION, PROCESSING, AND TRANSFER OF YOUR PERSONAL DATA AS DESCRIBED IN THIS POLICY.
2. DATA CONTROLLER AND OFFICIAL CONTACT CHANNELS
For the purposes of applicable data protection legislation, Aatron serves as the Data Controller responsible for your personal data.
Data Controller: Aatron
Platform: WeddingWay (https://weddingway.net)
Customer Support & General Inquiries: support@aatron.org
Administration, Legal & Grievance Redressal: admin@aatron.org
Data Protection Officer (DPO) & Privacy Operations: weddingway@aatron.org
Registered Address: [Insert Corporate Address, City, State/Province, Country]
3. CATEGORIES OF PERSONAL DATA WE COLLECT
We collect personal data directly from you during registration and profile completion, automatically when you interact with the Platform, and through secure third-party service providers.
3.1 Information You Provide Directly
1. Account Registration Data:
Full legal name (first name and last name);
Email address;
Mobile telephone number and international country dialing code;
Account password (stored strictly as a salted, irreversible cryptographic hash using bcrypt);
Date of birth (to verify legal majority and marriage eligibility);
Biological gender.
2. Matrimonial and Biographical Profile Data:
Religious Affiliation: Religion, sect/tradition, and personal level of religious commitment;
Marital History: Never married, legally divorced, widowed, or annulled;
Cultural Background: Ethnicity, mother tongue, spoken languages, citizenship, residency status, country, and city/state of residence;
Education and Professional Details: Highest education degree, institutions attended, occupation/profession, employment status, annual income range, and income currency;
Physical Characteristics: Height, body type, and blood group;
Lifestyle and Preferences: Smoking habits, dietary preferences, personal hobbies, and personality traits;
Family Background: Father's name and profession, mother's name and profession, number of male and female siblings, family type (nuclear/joint), and family geographic origin;
Partner Preferences (Preference): Desired partner age range, height range, education, profession, income bracket, location, religious commitment, and lifestyle traits.
3. Special Category / Sensitive Personal Data:
Under GDPR Article 9 and international privacy standards, data relating to religious beliefs, ethnic background, and health markers (blood group) constitutes "special category" or "sensitive" data. We collect and process this data strictly on the basis of your explicit, affirmative, voluntary consent, provided during account registration to enable matrimonial matching.
4. Identity Verification Documents (VerificationDoc):
Government-issued photo identification (such as National ID cards, Passports, Driver’s Licenses, or Voter ID cards) uploaded by members seeking administrative verification.
5. Photographs and Visual Media (UserImage):
Profile pictures and private gallery photos;
Blurred and unblurred versions of user images generated and maintained by our photo privacy system.
6. Inter-User Communications and Interaction Records:
Real-time messages, texts, and media attachments sent via secure Socket.IO connections;
Expressed interests (Interest), photo view requests (PhotoRequest), and meetup requests (MeetupRequest);
Profile bookmarks (ProfileSave), profile view records (ProfileView), and member blocking/reporting submissions (UserBlock, UserReport).
7. Support Communications (UserSupport):
Inquiries, help requests, and feedback submitted to support@aatron.org, admin@aatron.org, or through our support portals.
3.2 Information Collected Automatically
1. Device, Technical, and Telemetry Data:
Internet Protocol (IP) address;
Browser type, engine, and version;
Operating system and hardware platform;
Device screen resolution and language preferences;
Time zone and session timestamps.
2. System Logs and Audit Trails:
Audit Logs (AuditLog): HTTP method, API route, activity description, HTTP status codes, user agent, IP address, and security timestamps;
Request Logs (RequestLog): Request and response payloads for security diagnostics, anti-fraud auditing, and system reliability;
Real-Time Presence: Online status, socket connections, and presence heartbeats (lastActivityAt);
Search Appearances (SearchAppearance): Aggregate logs of profile appearances in user search queries and member feeds.
3.3 Payment and Financial Records
Transactions for membership packages (OrderPlan) and profile visibility boosts (BoostPlan) are handled directly by PCI-DSS Level 1 certified third-party payment gateways (including Stripe, SSLCommerz, and acquiring banks).
AATRON DOES NOT COLLECT, PROCESS, OR STORE RAW CREDIT/DEBIT CARD NUMBERS, CARD EXPIRATION DATES, OR CVV CODES ON ITS SERVERS.
Aatron receives only anonymized payment tokens, transaction reference IDs, order plan keys, currency identifiers, and payable amounts for order fulfillment, tax accounting, and billing audits.
4. LAWFUL BASES FOR PROCESSING UNDER GDPR AND GLOBAL LAWS
Aatron processes personal data solely where a valid lawful basis exists under data protection laws:
1. Performance of a Contract (GDPR Art. 6(1)(b)):
Processing is necessary to perform our contractual commitments under the Terms and Conditions—namely, to create and administer accounts, facilitate matchmaking searches, deliver real-time messages, manage subscriptions, and process transactions.
2. Explicit Consent (GDPR Art. 6(1)(a) & Art. 9(2)(a)):
We process special category data (religious affiliation, marital history, biological attributes) and facilitate photo disclosure permissions exclusively based on your explicit, affirmative, and revocable consent.
3. Legitimate Business Interests (GDPR Art. 6(1)(f)):
Processing is necessary to safeguard the integrity of the Platform, prevent romance fraud, enforce our Terms of Service, defend against fraudulent chargebacks, maintain security audit logs, and improve our services, except where overridden by your fundamental rights.
4. Compliance with Legal Obligations (GDPR Art. 6(1)(c)):
Processing is required to comply with statutory taxation mandates, financial accounting rules, anti-money laundering regulations, and lawful court or police orders.
5. SPECIFIC PURPOSES OF DATA PROCESSING
Processing Purpose Categories of Data Involved Lawful Legal Basis
Account Creation & Login Name, email, phone, DOB, password hash, OTP Contractual Necessity
Matchmaking & Profile Discovery Profile data, religion, education, lifestyle, preferences Contractual Necessity & Explicit Consent
Identity Verification Badge Government ID copy, photo, name, DOB Legitimate Interests & Contractual Necessity
In-App Messaging & Attachments Chat messages, image attachments, socket sessions Contractual Necessity
Photo Privacy & Gated Access Uploaded photos, blur toggles, photo approvals Contractual Necessity & Consent
Contact Detail Gating Contact views left, viewer ID, viewed member ID Contractual Necessity
Billing & Order Fulfillment Order plan keys, transaction IDs, currency, amount Contractual Necessity & Legal Compliance
Fraud Prevention & Abuse Control IP address, audit logs, block/report logs, device info Legitimate Interests & Legal Compliance
Transactional & Digest Emails Email address, notification settings, activity metrics Legitimate Interests & Consent
Customer Service & Legal Notices Support tickets, email communications, audit logs Contractual Necessity & Legitimate Interests
6. GRANULAR PRIVACY CONTROLS AND VISIBILITY CHOICES
WeddingWay incorporates robust, user-configurable privacy controls:
6.1 Public vs. Authenticated Member Visibility
Public landing pages display strictly limited, non-identifying summary previews without phone numbers, emails, or sensitive details.
Full matrimonial profiles are viewable only by authenticated, logged-in members.
Your direct phone number and email address are never exposed publicly. They can only be unlocked by verified, paying members who utilize an allocated contact view credit (UserContactView).
6.2 Photo Privacy Engine and Blurring
Photo Blurring (blurPhotos): You can toggle photo blurring across your profile. When enabled, your images appear blurred to other members.
Photo Request Workflow (PhotoRequest): Members who wish to view your unblurred photographs must submit an explicit request. You retain complete authority to grant or deny access.
6.3 Notification and Communication Controls
You maintain granular control over your notification preferences (NotificationPreference), including toggles for interest emails, photo request alerts, profile view notifications, and saved profile alerts.
You can opt out of weekly engagement digests (WeeklyEngagementDigest) at any time via your account settings.
6.4 Blocking and Reporting Controls
User Block (UserBlock): Instantly prevents a designated member from viewing your profile, sending messages, or initiating requests.
User Report (UserReport): Allows you to flag suspicious, abusive, or fraudulent behavior directly to our administrative moderation team.
7. DISCLOSURE AND SHARING OF PERSONAL DATA
Aatron maintains a strict policy: WE DO NOT SELL, RENT, LEASE, MONETIZE, OR TRADE YOUR PERSONAL DATA TO THIRD-PARTY ADVERTISERS OR DATA BROKERS.
We disclose personal data strictly in the following limited contexts:
7.1 To Other Platform Members
Profile data, partner preferences, and approved photographs are displayed to prospective matches in accordance with your chosen visibility settings.
Contact details (phone number and email) are disclosed only when an authorized, authenticated member consumes a valid contact view entitlement.
7.2 To Authorized Infrastructure Providers (Data Processors)
We engage vetted, industry-leading third-party service providers who process data strictly on our behalf under binding confidentiality and data protection agreements:
Cloud Storage: Cloudflare R2 object storage (AES-256 encrypted at rest) for storing photographs and verification documents;
Database & Hosting Facilities: Enterprise cloud data centers for hosting PostgreSQL databases and backend application logic;
Payment Gateways: Stripe, SSLCommerz, and authorized banking intermediaries for processing subscription payments;
Email Delivery Networks: Secure SMTP and transactional relay providers for delivering authentication OTPs, alerts, and notifications;
Analytics Providers: Google Analytics (GA4) on public landing pages for aggregated, anonymized web traffic analysis.
7.3 Legal Mandates and Protection of Safety
Aatron may disclose personal data to law enforcement, judicial bodies, or regulatory authorities where required by law, subpoena, warrant, or court order, or where Aatron determines in good faith that disclosure is necessary to:
Prevent romance scams, financial fraud, dowry extortion, or cyber harassment;
Protect the vital personal safety, life, or property of any user, Aatron employee, or the public;
Enforce our Terms and Conditions and defend against legal claims.
7.4 Corporate Transfers
In the event of a merger, acquisition, corporate reorganization, asset sale, or bankruptcy involving Aatron, user data may be transferred as a business asset, subject to the ongoing obligations of this Privacy Policy.
8. DATA SECURITY AND TECHNICAL SAFEGUARDS
Aatron implements rigorous administrative, physical, and technological security controls:
1. Transport Layer Encryption: All data transmitted across the Platform is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
2. At-Rest Encryption: User media assets and verification documents hosted in Cloudflare R2 are secured with industry-standard AES-256 encryption.
3. Cryptographic Password Hashing: Passwords are never stored in plaintext; they are hashed using salted, one-way bcrypt cryptographic algorithms.
4. Time-Limited Presigned Media URLs: Verification documents and private gallery photos are retrieved via short-lived, presigned URLs (R2SIGNEDURLEXPIRESIN) that expire automatically within minutes.
5. Role-Based Access Control (RBAC): Administrative access to user records and verification documents is strictly restricted to authorized compliance personnel and protected by multi-factor authentication (MFA).
6. Third-Party Breach Disclaimer: While Aatron employs commercial-grade security practices, no internet transmission or electronic storage architecture is 100% invulnerable. Aatron disclaims liability for unauthorized access, data leaks, or interceptions caused by sophisticated zero-day exploits, state-sponsored cyber warfare, or user compromise of their own devices or credentials.
9. DATA RETENTION AND ACCOUNT DELETION
9.1 Active Account Lifecycle
We retain your personal data for the duration of your active account to provide the matrimonial Services.
9.2 Verification Documents Retention Protocol
Government ID documents uploaded for verification (VerificationDoc) are reviewed by our compliance team. Once verified or rejected, documents are retained only for the minimum period necessary to complete audit checks, address fraud complaints, and satisfy regulatory requirements, after which they are permanently purged from active storage.
9.3 Voluntary Deactivation and Account Deletion
Deactivation: You may deactivate your profile at any time. Your profile is immediately hidden from searches and match feeds, but your account can be restored upon logging in.
Permanent Account Deletion: When you request account deletion through Account Settings or by emailing support@aatron.org, your personal profile, photos, preference records, and messages are permanently purged from active production databases within thirty (30) calendar days.
Statutory Retention of Financial and Audit Records: In accordance with statutory tax, corporate, anti-fraud, and legal obligations, Aatron retains financial transaction records, order logs, chargeback documentation, and fraud blacklists (e.g., telephone numbers and email addresses associated with confirmed scam operations) for five (5) to seven (7) years following account closure.
10. YOUR LEGAL DATA PROTECTION RIGHTS
Subject to your geographical jurisdiction and applicable laws (including GDPR, UK DPA, CCPA/CPRA, and regional privacy frameworks), you possess the following rights:
1. Right of Access: You have the right to request a formal copy of all personal data held about you by Aatron.
2. Right to Rectification: You can update, correct, or amend inaccurate or incomplete profile data directly via Account Settings or by contacting support.
3. Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your personal data, subject to Aatron’s statutory legal and fraud prevention retention requirements.
4. Right to Restrict Processing: You may request that we temporarily restrict the processing of your data (e.g., while verifying accuracy).
5. Right to Data Portability: You have the right to obtain your personal information in a structured, commonly used, machine-readable format.
6. Right to Object: You may object at any time to data processing based on legitimate interests or direct communications.
7. Right to Withdraw Consent: Where processing relies upon your consent (e.g., special category matrimonial data, optional digest emails), you may withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
8. Right to Non-Discrimination: Aatron will never deny services, charge different prices, or provide an altered quality of service because you exercised your statutory privacy rights.
How to Submit a Privacy Request
To exercise any statutory privacy right, submit a written request to our Data Protection Officer at weddingway@aatron.org or admin@aatron.org. We will verify your identity and respond within thirty (30) calendar days (or statutory deadlines).
11. CALIFORNIA PRIVACY NOTICE (CCPA / CPRA COMPLIANCE)
For residents of the State of California:
Categories Collected: Detailed in Section 3 of this Policy.
Purposes of Use: Detailed in Section 5 of this Policy.
Zero Sale of Personal Data: Aatron has NOT sold or shared (for cross-context behavioral advertising) any personal information in the preceding twelve (12) months.
Use of Sensitive Personal Information: Sensitive data (religion, marital status) is processed solely to perform requested matrimonial matching services and is never utilized to infer non-matrimonial consumer characteristics.
12. CHILDREN’S PRIVACY AND AGE ENFORCEMENT
WeddingWay is exclusively restricted to individuals who have attained the legal age of majority and are legally qualified to marry (eighteen (18) years of age or older, or twenty-one (21) where required by local statute).
Aatron does not knowingly collect, solicit, or maintain personal data from children or individuals under eighteen (18) years of age. If Aatron discovers that an individual under the age of eighteen has created an account or submitted personal information, Aatron will immediately terminate the account and purge all associated data without liability. If you suspect that a minor has registered on WeddingWay, please notify us immediately at weddingway@aatron.org or admin@aatron.org.
13. COOKIES, TRACKING TECHNOLOGIES, AND ANALYTICS
13.1 Functional Cookies
WeddingWay utilizes essential cookies and local browser storage to maintain secure user sessions, preserve CSRF tokens, and record interface preferences (such as light/dark theme selections).
13.2 Google Analytics Telemetry
On public landing portals, we employ Google Analytics (GA4) to evaluate aggregate site traffic and interaction flow. GA4 utilizes cookies to record anonymized telemetry. You can opt out of Google Analytics across the web by installing the official https://tools.google.com/dlpage/gaoptout" target="_blank" rel="noopener noreferrer" style="color: #0284c7; text-decoration: underline;">Google Analytics Opt-out Browser Add-on.
14. INTERNATIONAL TRANSFERS OF PERSONAL DATA
Aatron operates globally. Your personal information may be transferred to, stored, and processed in cloud servers situated in various jurisdictions (including the United States and the European Union).
When transferring data across international borders:
Aatron ensures that adequate technical, organizational, and contractual safeguards are maintained;
For transfers originating in the European Economic Area (EEA) or UK to jurisdictions without an adequacy decision, Aatron implements European Commission-approved Standard Contractual Clauses (SCCs).
15. REVISIONS TO THIS PRIVACY POLICY
Aatron reserves the right to modify or amend this Privacy Policy at its sole discretion to reflect changes in our technological features, statutory obligations, or operational protocols.
When modifications are implemented, we will update the "Last Updated" date at the top of this Policy.
In the event of material revisions impacting your privacy rights, we will provide conspicuous advance notice (via email or prominent platform alert) at least fourteen (14) days prior to the effective date.
Your continued use of WeddingWay following the effective date of an amended Privacy Policy constitutes your unconditional acceptance of the revised practices.
16. OFFICIAL CONTACT CHANNELS AND COMPLAINTS
If you have questions, inquiries, complaints, or feedback regarding this Privacy Policy or Aatron’s data protection practices, please contact us through our official channels:
Data Protection Officer & Privacy Operations: weddingway@aatron.org
Administration, Legal Notices & Grievances: admin@aatron.org
Customer Support & Inquiries: support@aatron.org
Operating Entity: Aatron
Platform URL: https://weddingway.net
Corporate Address: [Insert Corporate Address, City, State/Province, Country]
If you reside in the European Economic Area (EEA) or United Kingdom, you retain the statutory right to lodge a complaint with your local data protection supervisory authority.