Privacy Policy

• Birth details: the name, date of birth, time of birth and place of birth you enter to generate a kundli.
• Email address, if you sign in with Google, so we can link kundlis to your account and show you your dashboard.
• Name and phone number you give at your first paid generation, used to identify your purchases, to set the right price for your country and to contact you about an order.
• Purchase records: which reports you generated, your token balance and library storage slots, so you receive what you paid for.
• Payment & billing information, if you buy a paid report or service, our payment processor collects the information needed to complete the transaction (e.g. name, email, billing address, and the amount paid). We receive only a transaction reference, status and the last few digits / card network, we never receive or store your full card number, CVV or UPI PIN.
• Basic technical logs: routine server logs (timestamps, request path, IP address) kept by our hosting provider for a short window to keep the service secure and prevent abuse. We do not use these to profile you.

We do not collect your contacts, browsing history, precise location, photos, or messages. We do not use tracking pixels or third-party advertising analytics.

• To compute your Vastu kundli, Astro Vastu preferences and Numero Vastu.
• To let you save kundlis and return to them from any device.
• To process payments, deliver paid products and issue invoices / receipts.
• To detect and prevent duplicate charts, fraud and abuse.
• To respond to any support, correction or deletion request you send us.
• To comply with tax, accounting and other legal obligations.

Under the DPDP Act we rely on your consent (§6), given when you tick the consent box on the kundli form. For users in the EEA / UK, our GDPR legal bases are: consent (Art. 6(1)(a)) for generating and storing charts; performance of a contract (Art. 6(1)(b)) to deliver a paid product you ordered; legal obligation (Art. 6(1)(c)) to keep invoices and tax records; and legitimate interests (Art. 6(1)(f)) to keep the service secure and prevent abuse.

Personal data is stored on secure servers operated by our hosting provider (Supabase), with TLS encryption in transit and encryption at rest. Access is restricted to the small team operating this service. We apply reasonable technical and organisational security safeguards as required by §8 of the DPDP Act and Art. 32 of the GDPR.

We do not sell your data, rent it, share it with advertisers, or use it to train AI models.

Paid products are processed through a third-party PCI-DSS compliant payment gateway (for example Razorpay and/or Stripe). When you pay, your card / UPI / bank details are entered on the gateway's secure systems, not on our servers, and are handled under the gateway's own privacy policy. We receive only what we need to recognise your order (transaction ID, status, amount, and your billing name and email).

We retain invoice and transaction records for the period required by applicable tax and accounting law (generally up to 8 years in India), even if you later delete your account, because we are legally required to keep them.

We share the minimum data necessary with these processors:

• Supabase, database, authentication and hosting (stores your account, kundlis and logs).
• Google Sign-In, to authenticate you; we receive your name and email from Google when you choose to sign in.
• Payment gateway (e.g. Razorpay / Stripe), to process payments for paid products.
• Open-Meteo geocoding, to convert the place of birth you type into coordinates and timezone. Only the place name is sent; it is not linked to your identity.

Each processor acts under contract and may only use the data to provide its service to us.

We use only strictly necessary cookies and browser local storage, for example to keep you signed in and to remember your theme and language preference. We do not use advertising or cross-site tracking cookies, so no cookie-consent banner for marketing is required.

We keep a copy of your kundlis in our records, including after you remove a kundli from your account or delete your account. You can ask us to erase them completely at any time (see Section 10). If you do not use the service for a prolonged period we may reach out before deleting inactive data. Billing and tax records are kept for the legally required period (see Section 4). You can request deletion of your data at any time (see Section 10).

Our servers may be located outside India. Where personal data is transferred across borders we do so only to jurisdictions not restricted by the Government of India under §16 of the DPDP Act, and (for data originating in the EEA / UK) under appropriate safeguards such as the European Commission's Standard Contractual Clauses.

EEA / UK (GDPR) residents additionally have the rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.

California (CCPA/CPRA) residents have the right to know what personal information is collected, to request its deletion, to correct it, and to opt out of its "sale" or "sharing". We do not sell or share your personal information, and we will not discriminate against you for exercising your rights.

• Right to information (§11): request a summary of the personal data we hold about you and how it is processed.
• Right to correction and erasure (§12): correct inaccurate data or ask us to delete your data.
• Right to withdraw consent (§6(4)): withdraw your consent at any time. Withdrawal stops future processing; it does not affect processing done before, or data we must keep by law.
• Right to grievance redressal (§13): raise a complaint with our Grievance Officer. If unresolved, escalate to the Data Protection Board of India.
• Right to nominate (§14): nominate another individual who may exercise your rights in the event of your death or incapacity.

Write to wedoastro@gmail.com with your request, including the email address associated with your account so we can verify your identity. We will respond within 30 days.

You can also remove individual kundlis from your library at any time (with a 5-second undo), and sign out or delete your entire account from Settings. Removing a kundli or deleting your account takes it out of your account, while a copy stays in our records; to have that copy erased, write to us as above.

Under §9 of the DPDP Act, personal data of anyone under 18 may only be processed with verifiable parental or lawful-guardian consent (under the GDPR the threshold is 16, or lower where a member state allows). By ticking the consent box you confirm you are of the required age, or that you are entering a minor's birth details with the consent of their parent or guardian for a Vastu / astrology reading. We do not knowingly take payments from, profile, track, or serve advertising to children.

In the event of a personal-data breach we will notify the Data Protection Board of India and, where required, affected users and (for GDPR data) the relevant supervisory authority within the timelines specified by the applicable law.

We may update this policy from time to time. Material changes will be surfaced via the consent notice on the kundli form so you can review before continuing. The latest version will always live at this URL with an updated effective date.

In accordance with the DPDP Act and the Information Technology Rules, our Grievance Officer can be reached for any privacy query, correction, deletion or complaint:

Grievance Officer, We Do Astro
Email: wedoastro@gmail.com

We respond within 30 days. If you remain dissatisfied you may escalate to the Data Protection Board of India under §27 of the DPDP Act, or to your local supervisory authority (for GDPR users).