Privacy Policy

1. Introduction

Astronaad (“Astronaad”, “we”, “us”) is a sole proprietorship (Udyam-registered) based in Bengaluru, Karnataka 560037, India. This Privacy Policy explains, in plain words, what personal data we keep, why we need it, how long we keep it, who receives it, and your rights under India's Digital Personal Data Protection Act, 2023. Our rule is simple: we keep as little as we can, for as short a time as the service and the law allow.

2. What We Keep, Why, and For How Long

• Name and emailTo sign you in, send receipts and help you.Kept: Until you delete your account
• Mobile number (optional)To protect your account and stop misuse of the first-recharge bonus.Kept: Until you delete your account
• Birth date, time, place and genderTo calculate your chart for reports and Nakshatra.Kept: Until you delete your account
• PreferencesYour language, currency, Vedic/Western choice and notification switches.Kept: Until you delete your account
• Consent recordWhen you agreed to our Terms and this Policy, which version, and how — our proof.Kept: Until you delete your account
• Payments and NaadCoin historyAmount, date and payment reference — required by tax law.Kept: 8 years, even after your account is deleted (without your name or contact details)
• Bonus fingerprintA one-way scrambled code of the card or UPI used for your first recharge, so the bonus is given once per payment method. It cannot be turned back into your card or UPI ID.Kept: Kept without any link to you
• Consultation request detailsYour WhatsApp number, preferred time and question — to arrange the consultation.Kept: 30 days after the consultation ends
• Puja booking detailsSankalp name, gotra, intention and WhatsApp number — to perform your puja.Kept: 30 days after the booking is completed
• Jewellery delivery detailsName, phone, WhatsApp and shipping address — to deliver your order.Kept: 30 days after delivery or cancellation
• Order, booking and session recordsWhat, when, status and NaadCoin — no personal details — as proof if a payment is disputed.Kept: 180 days
• Messages and complaintsWhat you send through the contact form — to answer you.Kept: 30 days after we resolve it
• NotificationsThe messages in your bell.Kept: 30 days
• Login codesThe one-time email code, stored scrambled — to sign you in.Kept: 24 hours
• Security recordsSign-ins, payment confirmations and admin actions (contact details masked) — to protect accounts and to meet India’s cyber-security rules.Kept: 1 year
• AI usage recordsWhich service ran and what it cost — never your question or the answer.Kept: About a month

Astrologers listed on Astronaad: we also keep your profile (name, photo, biography, specialisations, languages, experience, rates), your password in scrambled form, and the date and version of the Astrologer Partner Terms you accepted, until your listing is deleted. Bank and UPI details are never stored on the site — you share them with our payouts team directly.

3. What We Do Not Keep

• Your Nakshatra chat — it stays only in your own browser and is cleared when the session ends
• Consultation chat messages and call recordings — calls are never recorded
• Photos shared in a consultation — deleted when the session ends
• Palm photos and your generated reports
• Card numbers, UPI IDs or bank details — your payment provider handles these
• Google sign-in tokens, and your browser or device description
• Analytics or advertising data — we use no trackers

4. Deleting Your Account

You can ask us to delete your account from Settings → Delete Account, or by writing to us. Your account is erased within 30 days. Any NaadCoin balance is lost when the account is deleted and cannot be refunded or converted to money.

After deletion we keep only what the law or other people need, with nothing that identifies you: payment lines (tax law, 8 years), star ratings without your written text, and the record of a consultation an astrologer was paid for — all without your name or contact details.

5. Who Receives Your Data

We do not sell your personal data. These services receive only what they need to do their job for us:

• Razorpay, Cashfree — your payment, email and phone, to process a recharge.
• Supabase, Vercel — host our database and website.
• Google Gemini, Groq — your question and birth details (and a palm photo, Gemini only) to generate AI readings.
• Google — when you choose “Continue with Google”.
• VedAstro — birth date, time and coordinates, to calculate a chart.
• OpenStreetMap, Open-Meteo — the birth-place name you type in the search box.
• Daily.co — the audio and chat of a live consultation, while it runs.
• Cloudflare Turnstile — a bot check on sign-in and contact forms.
• Brevo — sends our emails (login codes, replies).
• Telegram — booking alerts to our team, with the customer's name, contact and booking details.
• Shiprocket — name, phone and address, to deliver a jewellery order.
• Browser push services (Google, Apple, Mozilla) — the text of a notification you allowed.
• Astrologers — when you book a consultation, the astrologer sees your name and request (never your contact details).
• Authorities — only when the law, a court or a government authority requires it.

6. How We Protect It

• Encrypted connections (HTTPS) everywhere, and encrypted storage by our database host
• Passwordless sign-in — login codes are scrambled and expire in minutes
• Contact details hidden from astrologers and masked in our logs
• Two-step login and an audit trail for every admin action
• Regular security reviews of our own code

No system is 100% secure. If a breach ever affects your data, we will tell you and the Data Protection Board of India without delay, as the law requires.

7. Messages From Us

• Service messages — login codes, payments, bookings and orders — are always sent, by email, notification or push, according to your switches in Settings.
• Offers and updates are sent only if you turn them on in Settings (“Offers & updates”, off by default). You can turn them off at any time.
• We never send promotional calls, SMS or WhatsApp messages, and we never sell or rent your number.

8. Cookies

We use only the cookies the site needs to work:

• Your sign-in session (30 days)
• A short guest-checkout cookie while a recharge completes (30 minutes)
• A security cookie for our administrators only

Your language, currency and similar choices are saved in your own browser. We use no analytics, advertising or tracking cookies.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023 (and, for visitors in the EU or UK, the GDPR), you have the right to:

• Access: a summary of the personal data we hold about you and who received it.
• Correction: fix anything inaccurate. Your phone number is locked once set, so changes go through support.
• Erasure: have your account and personal data deleted (Section 4).
• Withdraw consent: turn off offers, or stop using the service and delete your account, at any time.
• Nominate: name a person to exercise these rights for you if you die or cannot act yourself.
• Complain: raise any concern with our Grievance Officer (below) and, if you are not satisfied with our answer, with the Data Protection Board of India.

How to use these rights: email support@astronaad.com or use our contact form (you get a reference number). We acknowledge within 48 hours and answer requests about your data within 90 days.

10. Age

Astronaad is only for people aged 18 or older. By recharging you confirm you are 18 or older. If you believe someone under 18 has given us personal data, contact us and we will delete it.

11. Changes to This Policy

When we change this Policy in a way that matters, we tell you with a notification on Astronaad. The “Last updated” date at the top shows the latest version.