Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy explains how AstroVeena (operated by Rahul Dilip Malwade) (“AstroVeena”, “we”, “our” or “us”) collects, uses, shares and protects personal data when you use astroveena.com and our account and ordering site app.astroveena.com (together, the “Services”): our free Vedic astrology tools (such as Janam Kundli, Kundli Matching, Panchang, horoscopes and numerology), the AI Astrologer, free PDF reports, your account, our newsletter, and paid services such as the Premium Jyotish Report.

For the purposes of India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for your personal data, and where the EU or UK General Data Protection Regulation (“GDPR”) applies we are the controller. We also aim to respect the rights given by other privacy laws, such as the California Consumer Privacy Act (CCPA/CPRA), where they apply to you.

2. Information we collect

3. Details about other people

Astrology often involves other people: a partner for matching, or a family member's report. When you enter someone else's birth details, you confirm that you have their permission to share them with us for that purpose. You must be 18 or older to create an account or place an order; a report about a person under 18 may be ordered only by their parent or legal guardian.

4. How we use your information and our legal bases

Premium Jyotish Reports are prepared by our Jyotish team, not generated automatically. We do not make decisions about you with legal or similarly significant effects by automated means alone.

5. Who we share it with (service providers)

We do not sell personal data. We share it only with the service providers below, who process it on our instructions to run the Services, and with authorities where the law requires.

We send AI providers only what is needed to answer a question, through their business APIs. Their handling of that data is governed by their API terms, which we review before use. We may also disclose information if required by law, to protect our rights or users' safety, or as part of a merger or sale of our business, in which case this policy continues to apply to your data.

6. Cookies, local storage and analytics

When you first visit astroveena.com, a banner asks for your choice. Until you choose “Accept All”, analytics and advertising storage is switched off using Google Consent Mode. “Essential Only” keeps it off. You can change your choice at any time with the Cookie Settings link in the footer, or by clearing your browser's site data.

When you have not given consent, Google tags may still send limited, cookieless signals (for example, that a page was viewed), without storing or reading analytics or advertising identifiers on your device, as Consent Mode allows. Google Analytics 4 does not log or store IP addresses, we do not send your birth details, questions or report content to Google Analytics, and we do not use analytics data to identify you. You can also install the Google Analytics opt-out add-on and learn how Google uses data at policies.google.com/technologies/partner-sites.

Local storage. When you generate a Kundli or use the AI Astrologer, your browser keeps a copy on your device so it survives a refresh. It is stored under a key tied to the signed-in account, and a copy belonging to another account or a signed-out session is removed when someone signs in, signs out or switches accounts. It is not sent to us unless you use a feature that needs it.

7. International transfers

Our main database is in India. Some providers process data in other countries, including Singapore, Japan and the USA, as listed in section 5. Where we transfer data outside India, or outside the EU/UK for users there, we rely on the safeguards the law requires, such as contractual commitments from our providers (including Standard Contractual Clauses where applicable), and we do not transfer data to any country the Government of India has restricted under the DPDP Act.

8. How we protect your data

• All traffic uses HTTPS (TLS), and our providers encrypt stored data.
• Database rules ensure you can see only your own saved charts, orders and reports. Reports are stored privately and downloaded through short-lived links.
• Only authorised team members can see order details, and only when preparing or supporting an order. They sign in with two-factor authentication, and staff actions on orders are logged.
• Payment events from Razorpay are verified by signature before we act on them.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

9. How long we keep it

• Guest calculations: not stored; discarded once the result is returned.
• Account data, saved charts, AI conversations, orders and reports: kept while your account is open, so you can download your reports again. You can delete individual charts and conversations at any time.
• Unpaid order drafts: removed automatically after a short period.
• Payment, refund, invoice and consent records: kept for as long as tax, accounting and payment laws require, even after you close your account, but without your birth details, questions or report.
• Server logs: kept for a short period for security and troubleshooting.
• Newsletter: until you unsubscribe.

10. Deleting your account

You can download your data or delete your account from the Account page at app.astroveena.com, or by emailing us. Before deletion we finish or refund any order still in progress and offer you a copy of your reports. Deletion removes your profile, saved charts, conversations, order details and reports, and asks our CRM provider to delete its copy. We keep only the payment records described in section 9. Copies in encrypted backups are overwritten in the normal backup cycle, and we cannot remove emails already delivered to your inbox.

11. Your rights

Depending on where you live, you have the right to:

• Access a summary of the personal data we hold about you and how it is used, and get a copy (portability);
• Correct inaccurate or incomplete data, and update it;
• Erase your data, subject to the records we must keep by law;
• Withdraw consent at any time, for example to analytics cookies or the newsletter, without affecting processing already done;
• Object to or restrict certain processing (GDPR);
• Nominate another person to exercise your rights if you die or become incapacitated (DPDP Act);
• Complain to us (section 13) and, if you are not satisfied, to the Data Protection Board of India or your local data protection authority.

We do not sell or “share” personal information for cross-context behavioural advertising as defined by the CCPA. To exercise any right, email support@astroveena.com. We may need to verify your identity, and we respond within 30 days at no charge.

12. Children

The Services are meant for people aged 18 and over. We do not knowingly collect personal data from children. A parent or legal guardian may enter a child's birth details to calculate a chart or order a report, and in doing so gives consent on the child's behalf. We do not track children or target advertising at them. If you believe a child has given us personal data, contact us and we will delete it.

13. Contact and grievance officer

For questions, requests or complaints about your personal data, contact our Grievance Officer:

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

14. Changes to this policy

We will update this policy when our practices change, and change the “Last updated” date above. If a change is significant, we will tell you by email or with a notice on the site before it takes effect.