Nakshanjali

2. Privacy Policy

Effective date: 23 September 2026

2.1 Introduction

This Privacy Policy explains how Nitanya Digital Ventures ("we," "us," or "our") collects, uses, stores, and protects your personal data when you use Nakshanjali (the "Service").

We treat privacy as a promise, not a compliance checkbox. Your birth details are personal in a way most data is not, and we hold them with care.

This Policy is issued under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2.2 What data we collect

Data you provide directly:

  • Name (optional)
  • Date of birth
  • Time of birth (or approximate time slot if you don't know the exact time)
  • Place of birth
  • Gender (optional)
  • Occupation (optional)
  • Marital status (optional)
  • Email address (from Google sign-in)
  • Phone number (only if and when we introduce phone-based sign-in)

Data collected automatically:

  • Device information (type, operating system, browser)
  • IP address
  • Approximate location derived from IP
  • Usage data (which pages you visited, when, for how long)
  • Cookies and similar technologies (see Section 2.9)

Chat data: When you ask a question in chat, we store the question exactly as sent, the answer we give, and the information assembled from your chart and interpretation material to produce that answer. This includes the prompt sent to our AI provider.

Payment data: When you make a payment, Razorpay collects and processes your card, UPI, or bank details. We do not store your full payment details on our servers. We only receive a transaction reference and confirmation from Razorpay.

2.3 Why we collect it

We use your data to:

  • Generate your birth chart and readings.
  • Personalise the Service based on your chart and optional life context (for example, framing career or relationship readings appropriately).
  • Store chat questions, answers, and the assembled reading information for service delivery, safety, and internal quality review. This internal review is not model training.
  • Process payments and provide reports you have purchased.
  • Send you service-related communications (order confirmations, account notices).
  • Improve the Service based on aggregated, anonymised usage patterns.
  • Comply with our legal obligations under Indian law.
  • Detect and prevent fraud, abuse, and violations of our Terms.

We will not use your birth details to send you unsolicited marketing. Any marketing communication will be based on explicit consent and you can withdraw that consent at any time.

2.4 Legal basis for processing

We rely on the following legal bases under the DPDP Act:

  • Consent — for birth details, marketing communications, and any optional data.
  • Contract performance — for account management, payment processing, and delivering readings you have paid for.
  • Legal obligation — for compliance with Indian law, including tax and consumer protection requirements.
  • Legitimate use — for fraud prevention and security.

2.5 Who we share it with

We do not sell your data. We share it only with:

  • Service providers who help us run Nakshanjali:
  • Supabase (authentication, database, hosted in the region we select)
  • Vercel (application hosting)
  • Cloudflare (content delivery for public content. If phone sign-in is enabled, its optional Turnstile check is used only for that sign-in flow; Ask questions are not sent through a Turnstile challenge.)
  • Google LLC (Gemini API) — processor of the question and relevant chart facts used to generate the requested answer. When the Gemini API project is on Google's Paid Services, Google does not use prompts or responses to improve its products. Google may retain prompts, contextual information, and outputs for up to 55 days for abuse monitoring and safety. This monitoring data is not used to train or fine-tune models, except models specifically used for policy enforcement. Google OAuth separately handles sign-in.
  • Razorpay (payment processing)
  • Sentry (error monitoring, with data stored in the United States, Iowa)
  • PostHog (limited product analytics, with data stored in the United States)
  • Any provider we may add in future for email or SMS, listed here when added
  • Legal authorities — when required by a valid legal order, or to protect the safety or rights of Nakshanjali or others.
  • In a business transfer — if we are ever acquired or merge with another entity, your data may be transferred as part of that transaction. You will be notified before any such transfer takes effect and given the opportunity to delete your data.

Each of our processors is contractually bound to protect your data and to use it only for the purposes we specify.

We do not send birth details, questions, answers, names, email addresses, or payment details to Sentry or PostHog. They receive only the limited technical information needed for error monitoring and the product events listed in our systems.

2.6 International data transfers

Some of our service providers, including Supabase and Vercel, may store or process your data on servers located outside India. Where this happens, we take appropriate steps to ensure your data receives protection equivalent to what it would receive in India, in line with the DPDP Act.

Google's direct Gemini API does not provide a user-selected processing region. Reading requests therefore use Google's provider-default processing environment, with no India-region guarantee.

2.7 How we store and protect it

Your data is:

  • Encrypted in transit using TLS.
  • Stored in secured databases with access controls.
  • Accessed by our team only when necessary — for support, debugging, or legal compliance.

No system is perfectly secure. We commit to reasonable security practices proportionate to the sensitivity of the data we handle. In the event of a personal data breach that is likely to result in significant harm to you, we will notify you and the Data Protection Board of India as required by law.

2.8 How long we keep it

Working chat records, including question logs, answers, and other operational records, are kept for 24 months and then deleted automatically. For free-question abuse prevention, the application stores a keyed hash of the trusted request IP with the account identifier for 24 hours; the abuse table does not store the raw IP and expired rows are purged at least every 15 minutes. We do not keep a model-training copy of your questions or chart. Payment, purchase, wallet ledger, and invoice records are kept for 72 months from the end of the financial year, as required for Indian tax records. These financial records are detached from your account if you delete it.

If you delete your account, use Settings → Delete my account. This removes your profile, birth details, chart, questions, answers, and report files. Financial records that we must keep no longer contain a reference to your account.

Anonymised, aggregated data that cannot identify you may be retained indefinitely for analytics and product improvement.

2.9 Cookies

We use cookies and similar technologies for:

  • Essential functions — keeping you signed in, remembering your preferences.
  • Analytics — understanding how the Service is used, in an aggregated form.
  • Consent management — remembering your cookie preferences.

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

2.10 Your rights

Under the DPDP Act, you have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Erase your data (subject to legal retention requirements).
  • Withdraw consent at any time. Withdrawal does not affect the lawfulness of processing done before withdrawal.
  • Grievance redressal — raise a complaint with our Grievance Officer (Section 2.13) or with the Data Protection Board of India.
  • Nominate another person to exercise your rights in the event of your death or incapacity.

To exercise these rights, email support@nakshanjali.app from your account email and identify the right you want to use. For access, tell us which categories of personal data or processing information you need. For correction, identify the field and corrected value (or update it in Settings where available). For erasure, use Settings → Delete my account or request erasure by email; statutory financial records may be retained in de-identified form where required. To nominate someone, email the nominee's name and contact details and we will explain the verification steps. We will acknowledge complaints within 48 hours and resolve them within 30 days.

अपने अधिकारों का उपयोग कैसे करें

इन अधिकारों का उपयोग करने के लिए अपने खाते वाले ईमेल से support@nakshanjali.app पर लिखें और बताएं कि आप कौन-सा अधिकार इस्तेमाल करना चाहते हैं। डेटा तक पहुँच के लिए मांगी गई जानकारी या प्रक्रिया की श्रेणियाँ बताएं। सुधार के लिए फ़ील्ड और सही जानकारी बताएं; जहाँ उपलब्ध हो, Settings में भी बदलाव करें। डेटा मिटाने के लिए Settings → Delete my account चुनें या ईमेल से अनुरोध करें; कानूनन आवश्यक वित्तीय रिकॉर्ड पहचान हटाकर रखे जा सकते हैं। नामांकन के लिए नामांकित व्यक्ति का नाम और संपर्क जानकारी भेजें; हम पहचान सत्यापन के चरण बताएँगे। शिकायत की पुष्टि 48 घंटे के भीतर और समाधान 30 दिनों के भीतर किया जाएगा।

2.11 Children

The Service is not intended for anyone under the age of 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us and we will delete it.

2.12 Third-party links and services

The Service may contain links to third-party websites, including educational and reference content. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

2.13 Grievance Officer

In accordance with the IT Rules 2021 and the DPDP Act, we have appointed a Grievance Officer to address your concerns:

  • Name: Puneet Sanwal
  • Title: Grievance Officer
  • Email: support@nakshanjali.app
  • Business address: D-003, 81 High Street, Sector 81, Faridabad, Haryana 121002

We will acknowledge complaints within 48 hours and resolve them within 30 days.

शिकायत अधिकारी

  • नाम: Puneet Sanwal
  • पद: Grievance Officer (शिकायत अधिकारी)
  • ईमेल: support@nakshanjali.app
  • व्यावसायिक पता: D-003, 81 High Street, Sector 81, Faridabad, Haryana 121002

शिकायत की पुष्टि 48 घंटे के भीतर और समाधान 30 दिनों के भीतर किया जाएगा।

2.14 Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or an in-app notice at least seven days before the changes take effect.

2.15 Contact

For any question about your privacy or this Policy, please contact us at support@nakshanjali.app.