Privacy Policy

1. Introduction

Astronaad (“Astronaad”, “we”, “us”) is committed to protecting your privacy. This Privacy Policy explains what data we collect, why we collect it, and how we use it. By using Astronaad, you consent to the practices described in this Policy.

2. Data We Collect

2.1 Information You Provide

• Account data: Name and email address. Sign-in is passwordless (Google or a one-time email code) — we never ask for or store a password.
• Mobile number: Collected after sign-in as a contact detail, a secondary fraud-prevention signal, and a channel for service and promotional communications (see Section 5).
• Birth details: Date of birth, time of birth, place of birth — used solely to generate astrological charts and personalized readings.
• Payment information: Recharge amounts processed through Razorpay. We do not store raw card or banking details; these are handled by our payment gateway.
• Consultation content: Chat messages, call logs (duration), and session metadata for billing and service quality.

2.2 Automatically Collected Data

• Device type, browser, and operating system
• IP address and approximate location
• Pages visited and features used (analytics)
• Session duration and referral source
• Error logs for debugging

3. How We Use Your Data

• Providing, operating, and improving Astronaad services
• Generating personalized astrological content using your birth details
• Processing wallet recharges and tracking consultation billing
• Verifying cashback eligibility and enforcing the one-cashback-per-payment-method rule (fraud prevention)
• Sending transactional emails (login codes, receipts, session summaries)
• Sending promotional communications — offers, discounts, cashback campaigns and new features — by email, push, SMS, WhatsApp or phone call (opt out anytime in your account settings)
• Complying with legal obligations
• Investigating fraud, abuse, or violations of our Terms

4. Data Storage & Security

Your data is stored in a Supabase-managed PostgreSQL database hosted on secure cloud infrastructure. We implement industry-standard security measures including:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for data at rest
• Passwordless sign-in — login codes hashed (SHA-256) and short-lived
• Row-level security policies in the database
• JWT-based session management with short expiry
• Regular security audits and penetration testing

Despite these measures, no system is 100% secure. Astronaad uses passwordless sign-in (Google or a one-time email code), which removes password-reuse risk.

5. Phone Number — Special Notice

Your mobile number is collected after sign-in and used as follows:

• Account & service messages — security, bookings, payments and cashback updates.
• Promotional communications — offers, discounts, cashback campaigns, new features and personalised astrology updates. By providing your number you consent to receive these from Astronaad (and the providers that deliver its messages) via phone call, SMS, WhatsApp, RCS, email and push, now or in future, notwithstanding any DND / NCPR registration. We never sell or rent your number to third parties. You can opt out of promotional messages anytime in your account settings or via the unsubscribe / STOP option in any message.
• A secondary fraud-prevention signal (sign-in itself is passwordless — Google or a one-time email code).
• The 100% first-recharge cashback is granted once per payment method (and per account), enforced at the payment step — not by phone number.
• We retain limited fraud-prevention data after account deletion for up to 3 years, in compliance with our legal obligations.

6. Data Sharing & Third Parties

We do not sell your personal data to third parties. We share data only in the following circumstances:

• Astrologers: When you book a consultation, the astrologer receives your name and may see your birth details if you choose to share them for the session.
• Payment processors: Razorpay processes your recharge payments. We share the minimum necessary data with them.
• Analytics: Anonymized usage data with analytics providers (e.g., Google Analytics with IP anonymization).
• Legal: When required by law, court order, or government authority.
• Business transfer: In the event of a merger, acquisition, or sale of assets, with appropriate confidentiality protections.

7. Cookies

We use cookies and similar technologies for:

• Authentication sessions (essential — cannot be disabled)
• User preferences (theme, language)
• Analytics and performance monitoring
• Marketing and retargeting (can be disabled in browser settings)

8. Your Rights

Under applicable Indian data protection laws and GDPR (for EU users), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data, including updating your phone number.
• Deletion: Request deletion of your account and associated data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Opt-out: Unsubscribe from marketing communications at any time.

To exercise these rights, email support@astronaad.com.

9. Children's Privacy

Astronaad is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has provided us personal data, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or in-app notification. The “Last updated” date at the top reflects the most recent revision.