Privacy Policy

AstroVeda AI (“AstroVeda AI”, “we”, “us”) is operated by [OPERATOR LEGAL NAME], [ENTITY TYPE], with its registered office at [REGISTERED ADDRESS] ([CIN/REGISTRATION NUMBER, if applicable]). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for the personal data described in this policy.

This policy applies to the website at aiastroveda.in and the reports, emails and services provided through it.

Information you give us

• Name, used to address your report and emails.
• Email address, used to deliver your private report link, payment confirmations and access recovery.
• Birth details: date of birth, time of birth, whether the time is approximate, and birthplace (place name, latitude, longitude and time zone).
• Marketing preference: whether you opted in to marketing emails.
• Messages you send us, for example support or refund requests.

Information created when you use the service

• Your calculated chart and the AI-generated interpretation (your report).
• Payment records: order and payment identifiers, amount, currency, status and timestamps received from our payment provider. We do not receive or store your full card number, CVV, UPI PIN or net-banking password.
• Records of transactional emails sent to you (type, time and delivery status).
• Technical data: IP address, browser and device type, and request logs processed by our hosting providers for security and reliability.
• Analytics data about how pages are used, as described in section 9.

We do not ask for government identifiers, and we ask you not to include sensitive information (such as health details) in messages to us.

Birth date, time and place are needed to calculate a Vedic birth chart; without them the service cannot work. We use them only to calculate your chart, generate your report and show it back to you. We do not sell them, use them for advertising, or send them to analytics. We do not write birth details to our application logs.

If you enter someone else’s birth details, you confirm that you have their permission to do so (or are their parent or lawful guardian).

We use your email address to send transactional messages that are part of the service:

• your free report is ready;
• payment confirmation and premium report ready;
• your secure access link, and links you ask us to re-send.

Marketing emails are sent only if you separately opted in. You can unsubscribe at any time using the link in any marketing email or by writing to support@aiastroveda.in. Unsubscribing from marketing does not stop transactional emails about a report you requested.

• Providing the service (calculating your chart, generating and delivering your report, enabling access recovery): on the basis of your consent, given when you submit the form, and to perform the service you requested.
• Processing payments and keeping transaction records: to complete your purchase and to comply with tax and accounting obligations.
• Security and abuse prevention (rate limiting, fraud checks, error monitoring): for the legitimate uses permitted by law and to protect the service and its users.
• Improving the service using aggregated, non-identifying analytics.
• Marketing emails: only with your separate, opt-in consent.
• Legal compliance: responding to lawful requests and enforcing our terms.

You may withdraw consent at any time (see section 12). Withdrawal does not affect processing already carried out, and we may not be able to provide a report without the data it depends on.

Report text is generated by a large language model from OpenAI, accessed through its API. To write your interpretation, OpenAI receives your calculated chart data and the birth context needed for the reading (which may include the name you entered and your birth date, time and place). OpenAI does not receive your email address or payment information.

OpenAI processes this data as our service provider under its API terms. Under those terms, API data is not used to train OpenAI’s models by default, and may be retained by OpenAI for a limited period for abuse monitoring. [CONFIRM CURRENT OPENAI DATA-RETENTION SETTINGS FOR OUR ACCOUNT.]

Payments for the complete report are processed by Razorpay Software Private Limited. When you pay, you enter your payment details directly into Razorpay’s checkout. Razorpay processes them under its own privacy policy and applicable RBI and PCI-DSS requirements. We receive only the payment status, identifiers and amount, and we may share your name and email with Razorpay to prefill checkout and send receipts.

Your data is processed by the following providers on our behalf:

• Google Cloud (Cloud Run and Firestore): our application server and database, located in the Mumbai region (asia-south1), India.
• Cloudflare: hosting and delivery of the public website.
• Google Maps Platform (Places): birthplace search. It receives the place text you type, not your name, email or birth date.
• OpenAI: report interpretation (section 6).
• Razorpay: payments (section 7).
• Resend: sending transactional emails. It receives your name, email address and the content of the email, including your report link.
• Google Analytics: usage analytics without personal identifiers (section 9).

Some of these providers may process data outside India (for example in the United States). Where they do, we rely on their contractual commitments and security measures, and we transfer data only as permitted under the DPDP Act and any restrictions notified by the Government of India. Our data policy describes each provider in more detail.

We use Google Analytics to understand how the website is used, for example which pages are visited and whether the form was started, submitted or a payment completed. Google Analytics may set cookies and collect device, browser, approximate location and pseudonymous identifiers. We never send names, email addresses, birth dates, birth times, birthplaces or report content to analytics.

You can block or delete cookies in your browser settings, or use Google’s opt-out browser add-on. The site continues to work without analytics cookies. [ADD COOKIE-CONSENT MECHANISM DETAILS IF IMPLEMENTED.]

• Reports and birth details: kept for a configurable retention period, currently 730 days (about two years) from creation, so that you can return to your report. After that they are deleted.
• Payment records: kept for as long as required by applicable tax, accounting and payment regulations, even if the related report has been deleted.
• Email logs: kept for the same period as the related report, or shorter.
• Support correspondence: kept for as long as needed to resolve your request and any follow-up, then deleted.

We delete data earlier when you ask us to (section 13), unless the law requires us to keep it.

• All traffic is encrypted with HTTPS.
• Reports are accessed through a private link with a cryptographically random token. We store only a keyed hash of the token, never the token itself, and personal information is never placed in the URL.
• Private reports are excluded from search engines.
• Database access is restricted to our backend service identity; credentials are kept server-side.
• Payment confirmations are verified server-side with signature checks.
• Generation and access-recovery requests are rate-limited.

No system is perfectly secure. Keep your report link private: anyone who has the link can open the report. If you think a link has been shared by mistake, contact us and we will help.

Subject to the DPDP Act and applicable law, you have the right to:

• obtain a summary of the personal data we process about you and the processing activities;
• request correction, completion or updating of inaccurate or incomplete data;
• request erasure of your personal data;
• withdraw consent, including for marketing, at any time;
• have grievances redressed by us, and if unresolved, approach the Data Protection Board of India;
• nominate another person to exercise your rights in the event of death or incapacity.

To exercise these rights, email support@aiastroveda.in from the address used for your report. We may ask you to confirm your identity or your access to the report before acting.

You can delete a report in two ways:

1. Open your report and use the “Delete my report” button. This removes your name, email, birth details and report content immediately.
2. Email support@aiastroveda.in asking us to delete your reports. We will confirm when it is done.

After deletion we keep only what the law requires, such as payment records, and minimal non-identifying information showing that a deletion took place. Details are in our data policy.

The service is intended for adults aged 18 or over. We do not knowingly process the personal data of children without verifiable consent of a parent or lawful guardian. If a parent or guardian creates a report for a child, they do so on the child’s behalf and are responsible for that consent. If you believe a child has used the service without such consent, contact us and we will delete the data.

We may update this policy when the service or the law changes. We will change the “Last updated” date above and, for material changes, notify users with active reports by email where appropriate.

For privacy questions or to exercise your rights, contact:

Grievance Officer: [GRIEVANCE OFFICER NAME]
[OPERATOR LEGAL NAME], [REGISTERED ADDRESS]
Email: [GRIEVANCE OFFICER EMAIL] or support@aiastroveda.in

We aim to acknowledge grievances within [48 hours] and resolve them within [30 days], or sooner where the law requires.