Privacy policy
Last updated: 4 November 2026
This policy explains what personal data Astrovidia (“we”) collects, why, and what rights you have. It is written to meet India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and, for visitors in the EU and UK, the GDPR.
Who is responsible
Astrovidia is the data fiduciary (controller) for the data described here. Contact us at support@astrovidia.com, or our Grievance Officer through the Contact page.
What we collect and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Email address | To log you in with a one-time code and send you receipts | Contract / consent |
| Birth details you enter (name, date, time, place of birth) | To calculate your charts and write your reports | Your explicit consent, given when you create an account |
| Order details (product, amount, payment status) | To deliver what you bought and keep tax records | Contract and legal obligation |
| Marketing preference | To email you about new features, only if you said yes | Consent |
| Technical data (IP address, browser, pages visited) | Security, abuse prevention and aggregate, cookie-free analytics | Legitimate interest |
You can use the free chart tools without an account. Birth details entered without logging in are used only to calculate the chart in that request and are not stored.
We do not sell your data, and we do not use it for advertising.
Birth details of other people
When you enter someone else’s birth details, for example for Kundli matching or a newborn report, please only do so with their permission or, for a child, as their parent or guardian.
Who processes data for us
| Provider | What they do | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, AI text generation, email delivery, bot protection (Turnstile), analytics | Global network |
| Razorpay Software Pvt. Ltd. | Payment processing. We never see or store your card or UPI details | India |
These providers process data only on our instructions. Data may be processed outside your country. For transfers out of the EU/UK we rely on the providers’ Standard Contractual Clauses.
How long we keep data
- Account, birth details and reports: until you delete your account.
- Login codes: expire after 10 minutes and are deleted regularly.
- Login sessions: 30 days, or until you log out.
- Order and invoice records: 8 years, as Indian tax law (GST) requires. If you delete your account, these records are kept without your name or email.
Your rights
You can, at any time:
- Access and download your data: My account → Download my data.
- Correct your data: email us and we will fix it.
- Delete your account and data: My account → Delete account. This is immediate and permanent.
- Withdraw consent to marketing emails in your account or with the unsubscribe link in any email. Withdrawing consent to store birth details means deleting them.
- Nominate another person to exercise your rights if you die or become unable to (DPDP Act s.14), by emailing us.
- Complain to our Grievance Officer (see Contact), and if unresolved, to the Data Protection Board of India or, in the EU/UK, your local data protection authority.
Children
Accounts are for people aged 18 or over. We do not knowingly create accounts for children. A parent or guardian may enter a child’s birth details for a report.
Security
Connections are encrypted (HTTPS). Login codes and session tokens are stored only as one-way hashes. Access to production data is limited to people who need it. If a breach affects your data, we will inform you and the Data Protection Board as the law requires.
Cookies
We use one essential cookie to keep you logged in. See the Cookie policy.
Changes
If we change this policy in a meaningful way, we will show a notice on the site and, where the law requires it, ask for your consent again.