Privacy Policy

Welcome to Jyotishya ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application (collectively, the "Service").

This Privacy Policy is designed to comply with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as well as the General Data Protection Regulation (GDPR) for users in the European Economic Area.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

We use your information for the following purposes:

• Service Delivery: Generate birth charts, calculate astrological predictions, provide daily horoscopes
• Personalization: Customize AI interpretations based on your birth details and preferences
• Account Management: Create and manage your account, authenticate users, handle subscriptions
• Payment Processing: Process payments, prevent fraud, issue refunds via Razorpay
• Communication: Send transactional emails (welcome, subscription confirmations, booking updates)
• Improvement: Analyze usage patterns to improve features, fix bugs, optimize performance
• Legal Compliance: Comply with applicable laws, respond to legal requests, enforce our Terms of Service
• Security: Monitor for suspicious activity, prevent unauthorized access, protect user data

We share your information with the following trusted third-party service providers:

We will NEVER:

• Sell your personal information to third parties
• Share your birth chart data with advertisers
• Use your data for purposes other than those stated in this policy
• Transfer your data outside of secure, compliant service providers

Under Indian law (IT Act 2000) and GDPR (for EU users), you have the following rights:

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted using TLS 1.3 encryption (HTTPS)
• Encryption at Rest: Database encrypted using AES-256 (Supabase)
• Authentication: Passwords hashed using bcrypt, support for OAuth 2.0
• Access Controls: Role-based access control (RBAC) for admin functions
• Regular Audits: Quarterly security reviews, vulnerability scanning
• Incident Response: 24-hour breach notification policy via email

Our Service is NOT intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@jyotirvidya.app.

If we discover that we have collected data from a child under 18 without parental consent, we will delete such information within 48 hours.

We retain your data for the following periods:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: 30-day grace period, then permanently deleted
• Payment Records: 7 years (as required by Indian tax law)
• Usage Logs: 90 days, then anonymized or deleted
• Marketing Emails: Deleted immediately upon unsubscribe

Your data may be transferred to and processed in countries other than India, including the United States (Vercel, OpenAI) and Europe (Supabase). These countries may have different data protection laws than India.

We ensure that all data transfers comply with applicable laws through:

• Standard Contractual Clauses (SCCs) with third-party processors
• Privacy Shield certification (where applicable)
• Adequate data protection safeguards as per GDPR Article 46

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

Notification of Changes:

• Material changes: Email notification + prominent notice on homepage for 30 days
• Minor changes: Updated "Last Updated" date at the top of this page

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

In accordance with the Information Technology Act, 2000 and rules made thereunder, if you have any grievances regarding the processing of your personal data, please contact our Grievance Officer: