Data Policy

A Vedic birth chart is a calculation of where the planets were at a precise moment and place. We therefore need:

• Date and time of birth, to fix the moment;
• Birthplace (name, latitude, longitude, time zone), to convert local time to UTC and calculate the rising sign and houses;
• Whether the time is approximate, so the report handles time-sensitive factors with caution;
• Name, to address your report; and email, to send your private link, since there are no accounts.

We collect nothing else for the report. We do not need, and do not ask for, your phone number, address or identity documents.

Your birthplace is resolved to coordinates and a time zone. Your local birth time is converted to UTC using the historical time-zone and daylight-saving rules for that place and date. Planetary positions are then calculated by our astro engine using the sidereal zodiac, Lahiri ayanamsa, whole sign houses and the Vimshottari dasha system. These settings are stored with your report.

Calculation happens on our own servers. The AI provider receives only the finished calculation to interpret; it never determines planetary positions. Full methodology: how it works.

We use the following service providers (data processors). Each receives only what it needs for its task and is bound by its contractual terms with us.

Some providers may process data outside India. We transfer data only as permitted under the Digital Personal Data Protection Act, 2023 and any restrictions notified under it. [CONFIRM PROVIDER LIST, REGIONS AND DATA-PROCESSING AGREEMENTS BEFORE LAUNCH.]

• Reports (birth details, chart, interpretation, name, email): retained for a configurable period, by default 730 days from creation, then deleted.
• Payment records: retained as long as required by tax, accounting and payment regulations.
• Email logs (message type, time, delivery status): no longer than the related report.
• Generation job records (technical status of report generation): no longer than the related report.
• Application logs: kept briefly for security and debugging, and designed not to contain birth details. [STATE LOG RETENTION PERIOD.]

Delete it yourself

Every report has a “Delete my report” button. When you confirm, the report is marked deleted and its personal data (name, email, birth details, chart and interpretation) is removed immediately. The link stops working.

Ask us by email

Email support@aiastroveda.in from the address used for the report and ask us to delete it. We will verify the request and confirm deletion, normally within [7 days].

What remains

We keep payment records required by law and a minimal non-identifying record that a report existed and was deleted (needed for payment reconciliation and to honour refunds). Copies held by our providers are deleted according to their own schedules (for example, provider backups or logs).

• No accounts or passwords are used. Each report has a unique ID and a cryptographically random access token.
• We store only a keyed hash (HMAC-SHA256) of the token. Even someone with access to our database could not reconstruct your link from it.
• The token is placed in the fragment of the link (after #), which browsers do not send to servers or include in referrer headers. No personal information appears in the URL.
• Report pages are marked noindex and excluded from our sitemap, so they are not listed in search engines.
• If you lose your link, request a new one on the website. Recovery emails go only to the address on the report and are rate-limited.

We use Google Analytics to measure how the service is used, through page views and a small set of product events: landing page view, birth form started and submitted, free report generated, premium button clicked, checkout started, payment succeeded or failed, and premium report generated and viewed.

We do not send names, email addresses, birth dates, birth times, birthplaces or report content to analytics, and report links are not included in analytics data. See the privacy policy for cookie choices.

Transactional emails (your report link, payment confirmation, report-ready notices and access links you request) are part of the service. Marketing emails are separate: we send them only if you tick the optional marketing checkbox, which is unticked by default. You can withdraw marketing consent at any time through the unsubscribe link or by emailing support@aiastroveda.in, without affecting your report.

If we become aware of a personal data breach, we will:

1. contain the breach and secure affected systems, including revoking or rotating credentials;
2. assess what data and which users are affected;
3. notify the Data Protection Board of India and affected users as required under the Digital Personal Data Protection Act, 2023 and its rules, describing what happened, the likely consequences and the steps taken;
4. report to CERT-In where required under the Information Technology Act, 2000 and its directions; and
5. review the cause and put measures in place to prevent it happening again.

If you suspect a security problem, including a report link you did not share appearing elsewhere, email support@aiastroveda.in immediately.

Data questions and requests: support@aiastroveda.in. Grievance Officer: [GRIEVANCE OFFICER NAME], [GRIEVANCE OFFICER EMAIL], [OPERATOR LEGAL NAME], [REGISTERED ADDRESS].