Privacy Policy & Data Protection

Effective Date: July 30, 2026 | Platform: AstroSova AI

---

1. Overview & Scope

This Privacy Policy explains how AstroSova AI ("We", "Us", "Our") collects, uses, stores, shares, and protects your information when you visit our website, mobile interface, use our AI Kundli engine, Palmistry AI analyzer, Tarot tools, purchase store products, or consult with verified astrologers via chat, audio, or live video calls.

2. Data We Collect

To provide accurate astronomical, astrological, and consultation services, we collect the following categories of information:

A. Personal Identity & Birth Information

• User Identity: Full Name, Gender, Email Address, Phone Number, Profile Photo, Marital Status.
• Vedic Birth Details: Date of Birth, Time of Birth, and Place of Birth (including precise Latitude and Longitude coordinates required to plot astrological Kundli charts, Lagna, Navamsha, and Dasha periods).
• Saved Profiles: Birth details of family members or friends added by you for compatibility matching or horoscope creation.

B. Bio-Images & Media Files

• Palmistry Images: High-resolution photos of left and right palms uploaded by users for AI feature detection (Life line, Heart line, Head line analysis). Palm images are stored in secure private storage buckets.
• Voice Notes & Audio Attachments: Voice audio clips transmitted during consultations or customer support chats.

C. Communications & Session Logs

• Live Consultation Logs: Duration, timestamp, text chat logs, and metadata of real-time audio/video sessions conducted via RTC media channels (Agora.io).
• Live Stream Interactions: Comments, questions, Super Chats, and digital gifts sent during astrologer live broadcasts.

D. Transaction & Billing Data

• Prepaid Wallet History: Recharge amounts, invoice numbers, promo codes used, and wallet transaction timestamps.
• Payment Information: Transaction IDs generated by PCI-DSS compliant third-party payment gateways (e.g., Razorpay, Paytm, Cashfree, Stripe). Note: AstroSova AI does NOT store raw credit/debit card numbers, CVVs, or UPI PINs.

E. Astrologer Partner Information

• KYC & Onboarding Documents: Government identity cards (Aadhaar, PAN card), proof of astrological qualifications/experience, bank account number & IFSC code for payout settlements.

F. Technical & Device Information

• IP Address, browser type, device hardware specs, Operating System, Firebase Cloud Messaging (FCM) push tokens, app crash logs, and session cookies.

3. How We Use Your Data

We process your data exclusively for lawful purposes connected to platform functionality:

• To compute accurate Vedic Kundli charts, planetary transits (Gochar), Vimshottari Dasha, and Ashtakvarga scores.
• To execute AI model inferences for Palmistry line detection and custom astrological problem analysis.
• To connect users with independent astrologer partners for real-time chat, audio calls, and video streams.
• To manage prepaid wallet transactions, billing per minute, Super Chat gifts, and astrologer revenue payouts.
• To dispatch physical store products (gemstones, rudraksha, yantras) to your delivery address.
• To enforce account security, prevent fraudulent transactions, and comply with tax laws (e.g., TDS filings).

4. Third-Party Service Processors

We do NOT sell, rent, or trade your personal information. Data is shared strictly on a need-to-know basis with trusted technology partners:

• Real-time Audio/Video SDK: Agora.io (for encrypted low-latency consultation streaming).
• Payment Gateways: Razorpay, Cashfree, Paytm, Stripe (for secure billing & wallet top-ups).
• Database & Cloud Hosting: Secure cloud servers with 256-bit SSL encryption and automated backup infrastructure.
• Notification Services: Firebase FCM (for consultation alerts and transit notifications).
• Statutory Disclosures: Information may be disclosed if required by law, subpoena, court order, or government law enforcement request under Indian jurisdiction.

5. Data Security & Storage

We implement robust technical and organizational security measures:

• HTTPS / TLS 1.3 encryption for all data in transit.
• Bcrypt salt-hashing for user authentication credentials.
• Strict access-control protocols to limit employee access to personal data.
• Isolated media storage for uploaded Palmistry photos and KYC documents.

6. Data Retention & Account Deletion (Your Rights)

Under the DPDP Act 2023, you hold full authority over your data:

• Right to Access & Correct: You may view or update your profile details and birth chart parameters at any time via your account settings.
• Right to Erasure (Account Deletion): You can request permanent account deletion by contacting privacy@astrosova.ai. Upon verification, all non-statutory data (birth charts, uploaded palm images, saved chat history) will be permanently purged within 30 days.
• Statutory Exception: Accounting and transaction logs are retained for 7 years to comply with Indian tax regulations (Income Tax Act & GST Rules).

7. Cookies & Local Storage

We use session cookies and browser LocalStorage to maintain user login state, wallet session tokens, and interface preferences. You can configure your browser to block cookies, but certain interactive features (like active call sessions) may fail to operate properly.

8. Children's Privacy

AstroSova AI is intended for individuals aged 18 and older. We do not knowingly collect personal data from minors without direct parental or legal guardian supervision.

9. Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and DPDP Rules, 2023, the details of the Grievance Redressal Officer are as follows:

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in legal mandates or service features. The latest version will always be accessible on this page with an updated effective date.