Legal

Privacy Policy

Last updated: 2026-06-07

Your birth data is your karma, not our database. This policy explains exactly what we collect, why we need it, who else sees it, and how to remove yours.

1. Who we are

Aditya Drishti(“we”, “us”) is a Vedic Jyotish AI service operated from India. Contact: support@adityadrishti.com.

2. What we collect

Account data: email address, name, password hash, phone (optional, for OTP).
Birth data: date of birth, time of birth, place of birth (latitude/longitude), and ayanamsha preference for each chart you save. This is the minimum needed to compute a Vedic chart.
Conversation data: questions you ask the AI and its responses, kept so the AI remembers context across sessions and so you can review past readings.
Payment metadata: plan, billing date, transaction IDs. We never see your card number— Razorpay handles that.
Anonymous analytics: pages viewed, button clicks, errors — only if you accepted the consent banner. No fingerprinting, no cross-site tracking, no session recording.
Technical logs: IP address, user agent, timestamps — retained briefly for security and abuse prevention.

3. What we do not collect

Card numbers, CVVs, or bank credentials.
Government IDs (Aadhaar, PAN, etc.). We never ask.
Social media profiles, contacts, or phone microphones — the site has no such permissions.
Location beyond what you type into the birth-place field.

4. Third-party processors

Building a Vedic AI requires sharing some data with specialized services. We use the minimum number of vendors, and only ones with strong privacy commitments:

LLM providers (OpenAI, Anthropic, Groq): when you chat with the AI, your message and a compact summary of your chart are sent to the chosen provider to generate the response. Providers operate under enterprise data-processing agreements that prohibit using the data to train their models.
Razorpay (payments): processes subscriptions. Receives plan + customer email; never shares card details with us.
Cloudflare: CDN and DDoS protection. Sees IP + request headers.
PostHog: product analytics. Only loaded after you accept the banner; logs page views and button clicks.
Email (SMTP): transactional emails (OTP, password reset, receipts) sent via our SMTP provider.
Hosting (Hostinger): servers in Mumbai. Stores the database and application logs.

We do not sell, rent, or barter your data with anyone. Ever.

5. How we use what we collect

Run the chart engine and AI guidance you signed up for.
Send essential transactional emails (login, receipts).
Improve the product (debugging crashes, understanding flows).
Comply with legal requests where we're legally required to.

We do not use your data to send marketing emails by default. If we ever do (e.g. a newsletter), it'll be explicit opt-in — never auto-enrolled.

6. How long we keep your data

Account + charts + conversations: for as long as your account is active.
After deletion: we remove your personal data within 30 days. Aggregated analytics (no identifiers) may persist.
Payment records: retained as long as required by Indian tax law (currently 8 years).
Technical logs: 90 days maximum.

7. Your rights

Under India's DPDP Act 2023 and the EU GDPR, you have the right to:

Access a copy of your data.
Correct inaccurate information.
Delete your account and associated data.
Export your data in a portable format.
Withdraw consent for analytics at any time (clear cookies or contact us).
Object to processing.

To exercise any of these, email support@adityadrishti.com. We respond within 30 days.

8. Security

All connections are encrypted with TLS. Passwords are bcrypt-hashed. The database lives on a hardened Linux server with firewall, fail2ban, and key-only SSH. No system is perfectly secure — if a breach occurs, we'll notify affected users within 72 hours.

9. Children

The service is for users aged 18 and over. We do not knowingly collect data from children. If you believe a minor has registered, email us and we'll delete the account.

10. Cross-border transfers

Servers are in India. LLM providers may process data in the US or EU. By using the service, you consent to this transfer under standard contractual clauses with each processor.

11. Changes to this policy

We'll update the “Last updated” date and email account holders if changes are material (e.g. new data category, new processor). Continued use after the effective date constitutes acceptance.

12. Contact us

For privacy questions, data requests, or concerns: support@adityadrishti.com.