Nakshanjali

2. Privacy Policy

Effective date: [Effective Date]

2.1 Introduction

This Privacy Policy explains how [Business Legal Name] ("we," "us," or "our") collects, uses, stores, and protects your personal data when you use Nakshanjali (the "Service").

We treat privacy as a promise, not a compliance checkbox. Your birth details are personal in a way most data is not, and we hold them with care.

This Policy is issued under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2.2 What data we collect

Data you provide directly:

  • Name (optional)
  • Date of birth
  • Time of birth (or approximate time slot if you don't know the exact time)
  • Place of birth
  • Gender (optional)
  • Email address (from Google sign-in)
  • Phone number (only if and when we introduce phone-based sign-in)

Data collected automatically:

  • Device information (type, operating system, browser)
  • IP address
  • Approximate location derived from IP
  • Usage data (which pages you visited, when, for how long)
  • Cookies and similar technologies (see Section 2.9)

Payment data: When you make a payment, Razorpay collects and processes your card, UPI, or bank details. We do not store your full payment details on our servers. We only receive a transaction reference and confirmation from Razorpay.

2.3 Why we collect it

We use your data to:

  • Generate your birth chart and readings.
  • Personalise the Service based on your chart (for example, daily horoscope for your Moon sign).
  • Process payments and provide reports you have purchased.
  • Send you service-related communications (order confirmations, account notices).
  • Improve the Service based on aggregated, anonymised usage patterns.
  • Comply with our legal obligations under Indian law.
  • Detect and prevent fraud, abuse, and violations of our Terms.

We will not use your birth details to send you unsolicited marketing. Any marketing communication will be based on explicit consent and you can withdraw that consent at any time.

2.4 Legal basis for processing

We rely on the following legal bases under the DPDP Act:

  • Consent — for birth details, marketing communications, and any optional data.
  • Contract performance — for account management, payment processing, and delivering readings you have paid for.
  • Legal obligation — for compliance with Indian law, including tax and consumer protection requirements.
  • Legitimate use — for fraud prevention and security.

2.5 Who we share it with

We do not sell your data. We share it only with:

  • Service providers who help us run Nakshanjali:
  • Supabase (authentication, database, hosted in the region we select)
  • Vercel (application hosting)
  • Cloudflare (content delivery and hosting for public content)
  • Google (only for sign-in via Google OAuth)
  • Razorpay (payment processing)
  • Any provider we may add in future for email or SMS, listed here when added
  • Legal authorities — when required by a valid legal order, or to protect the safety or rights of Nakshanjali or others.
  • In a business transfer — if we are ever acquired or merge with another entity, your data may be transferred as part of that transaction. You will be notified before any such transfer takes effect and given the opportunity to delete your data.

Each of our processors is contractually bound to protect your data and to use it only for the purposes we specify.

2.6 International data transfers

Some of our service providers, including Supabase and Vercel, may store or process your data on servers located outside India. Where this happens, we take appropriate steps to ensure your data receives protection equivalent to what it would receive in India, in line with the DPDP Act.

2.7 How we store and protect it

Your data is:

  • Encrypted in transit using TLS.
  • Stored in secured databases with access controls.
  • Accessed by our team only when necessary — for support, debugging, or legal compliance.

No system is perfectly secure. We commit to reasonable security practices proportionate to the sensitivity of the data we handle. In the event of a personal data breach that is likely to result in significant harm to you, we will notify you and the Data Protection Board of India as required by law.

2.8 How long we keep it

We keep your data for as long as your account is active. If you delete your account, we will delete your personal data within thirty days, except where we are required to keep it longer for legal reasons (for example, tax records — kept for the period required by Indian tax law).

Anonymised, aggregated data that cannot identify you may be retained indefinitely for analytics and product improvement.

2.9 Cookies

We use cookies and similar technologies for:

  • Essential functions — keeping you signed in, remembering your preferences.
  • Analytics — understanding how the Service is used, in an aggregated form.
  • Consent management — remembering your cookie preferences.

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

2.10 Your rights

Under the DPDP Act, you have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Erase your data (subject to legal retention requirements).
  • Withdraw consent at any time. Withdrawal does not affect the lawfulness of processing done before withdrawal.
  • Grievance redressal — raise a complaint with our Grievance Officer (Section 2.13) or with the Data Protection Board of India.
  • Nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email nakshanjali.official@gmail.com. We will respond within thirty days.

2.11 Children

The Service is not intended for anyone under the age of 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us and we will delete it.

2.12 Third-party links and services

The Service may contain links to third-party websites, including educational and reference content. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

2.13 Grievance Officer

In accordance with the IT Rules 2021 and the DPDP Act, we have appointed a Grievance Officer to address your concerns:

  • Name: Puneet Sanwal
  • Email: nakshanjali.official@gmail.com
  • Address: [Registered Address]

We will acknowledge your grievance within twenty-four hours and resolve it within fifteen days.

2.14 Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or an in-app notice at least seven days before the changes take effect.

2.15 Contact

For any question about your privacy or this Policy, please contact us at nakshanjali.official@gmail.com.