Privacy Policy

1. Introduction

AstroSaathi AI ("Company", "we", "us", or "our") operates the AstroSaathi AI platform. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our mobile application.

This policy constitutes an electronic record in terms of the Information Technology Act, 2000 and rules thereunder, and is compliant with the Digital Personal Data Protection (DPDP) Act, 2023.

2. Information We Collect

A. Information You Provide Voluntarily

• Account Data: Name, email address, phone number, and password encryptions.
• Astrological Data: Exact date of birth, time of birth, and place of birth. This is "Sensitive Personal Data" essential for rendering our services.
• Profile Data: Gender, relationship status, and personal preferences/interests you input for better guidance.
• Payment Data: Transaction history. Note: We do NOT store complete credit card numbers; these are handled by our payment processors (e.g., Stripe, Razorpay).

B. Information Collected Automatically

• Device Data: IP address, device type, operating system, unique device identifiers (IMEI/UUID).
• Usage Data: Pages viewed, time spent, click patterns, and feature usage statistics.
• AI Interaction Data: Anonymized queries and chat logs used to refine our Large Language Models (LLMs). Personal identifiers are stripped from this data before training usage.
• Location Data: Coarse location derived from IP address for timezone management and regional context.

3. Legal Basis for Processing

We process your data based on the following legal grounds:

• Consent: Explicit consent provided by you for processing your birth data to generate astrological reports.
• Contractual Necessity: To fulfill our obligations to provide the services you have subscribed to.
• Legitimate Interests: To improve our AI models, detect fraud, and ensure network security.
• Legal Compliance: To comply with applicable laws and regulations in India and other jurisdictions.

4. How We Use Sections of Your Data

5. Data Sharing & Disclosure

We may share information with:

• Service Providers: Cloud hosting (e.g., AWS/GCP), database providers (e.g., MongoDB Atlas), and analytics services (e.g., Google Analytics) under strict data processing agreements.
• Legal Authorities: If required by law, court order, or government regulation.
• Business Transfers: In connection with any merger, sale of company assets, or acquisition.

We do strictly NOT sell your personal data to third-party advertisers.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy.

• Active Accounts: Indefinitely, to allow you to access your history.
• Deleted Accounts: We delete or anonymize your personal data within 90 days of account deletion request, except where retention is required by law (e.g., tax records).

7. Your Rights (DPDP Act)

As a Data Principal, you have the right to:

• Access a summary of your personal data processed by us.
• Correct, complete, or update your personal data.
• Request erasure of your data ("Right to be Forgotten").
• Nominate a representative to exercise your rights in case of death or incapacity.
• Register a grievance with us or the Data Protection Board of India.

8. International Transfers

Your information, including Personal Data, may be transferred to computer systems located outside of your state, province, or country. By consenting to this policy, you agree to such transfer, subject to appropriate safeguards ensuring the security of your data.

9. Contact & Grievance Officer