Legal
Privacy Policy
Last updated 9 October 2026
What we collect
When you use this website or book a reading, we collect the following categories of personal data:
- Identity and contact data: your full name, email address, and phone number.
- Birth data: date, time, and place of birth. For Kundli Match Making services, we also collect the same details for your partner, with that person's consent.
- Payment data: billing amounts and transaction reference numbers. Card numbers, CVV codes, and bank account details are handled exclusively by Razorpay and are never transmitted to or stored on our systems.
- Technical data: the IP address and browser your device reports. They are recorded in our sign-in security log, on your account as the address of your latest sign-in, and on the record of any consent you give or withdraw; if you turn on notifications, the browser (not the IP address) is kept with that subscription. They are deleted, or cleared from the record, after 90 days.
- Free chart and calculator inputs: what you enter in the free tools, such as a date, time and place of birth. The free chart preview is kept on our server for up to 24 hours so Tara can answer questions about it, then deleted. The details you enter in a free calculator (moon sign, Sade Sati, numerology, panchang, Guna Milan) are kept in that result's share link for up to 90 days, then deleted.
- Calculator usage data: anonymised page-view and calculator-usage events, collected via a first-party event log with no personal data attached.
- Chat and consultation data: the text of your questions to Tara, our AI assistant, together with the chart context needed to answer them. If you are signed in, your conversations are kept so Tara and our team can build on what you have already discussed rather than starting over each time.
We do not collect data from minors. Our services are directed at persons aged 18 and above.
Why we collect it
- Chart computation: birth date, time, and place are essential inputs to compute a Vedic birth chart. Without them the service cannot be delivered.
- Service delivery: we use your contact details to send you your reading and to communicate about your booking.
- Continuity of guidance: the personal matters you raise with Tara, or with Abhishek Soni directly, are often ongoing: a health worry, a family question, a career decision. We keep your prior conversations and the guidance already given so future answers build on that context instead of ignoring it. This is the whole purpose of keeping the data, so we say it plainly rather than folding it into "service delivery".
- Billing: we use your name and email to issue a tax invoice and process payment via Razorpay.
- Tax compliance: invoices and related records are retained for six years as required by section 36 of the Central Goods and Services Tax Act, 2017 (CGST Act).
- Security and evidence: the IP address and browser recorded at sign-in help us spot misuse of an account, and those recorded with a consent show when and how it was given or withdrawn.
How we use it
Your data is used only by Abhishek Soni and his team to deliver and improve your reading and your guidance. We do not sell your data to anyone, we do not share it with third parties for their own marketing, and we do not use it for advertising of any kind, ours or anyone else's, on any platform.
To generate a chart-grounded answer, Tara sends your question and the relevant chart context to our AI provider (see Sub-processors below). We configure that account so your conversations are not used to train the provider's models. We do not independently verify the provider's infrastructure, and we will correct this statement immediately if that ever changes.
We will not use your data for any purpose materially different from the one for which it was collected without obtaining fresh consent from you.
Where it goes - sub-processors
We engage the following sub-processors who may receive limited personal data as necessary to deliver the service:
- Frappe-hosted CRMat api.abhisheksoni.in - receives your name, email, phone, and birth data to store your reading record and manage correspondence. Hosted on Indian servers.
- Razorpay Payments Private Limited - receives your name, email, phone, and the transaction amount to process payment and issue a payment receipt. Razorpay's own privacy policy governs their handling of payment data.
- Resend - receives your email address and reading content when we send a transactional email, which is how readings are delivered.
- WhatsApp Business API via frappe_whatsapp (Meta Platforms) - receives your phone number and the content of the WhatsApp messages we exchange with you: the link to your reading, sign-in codes, payment links and receipts, booking, session and reminder notices, check-ins and follow-ups about a reading or remedy you were given, our replies and the messages you send us, and, only if you have opted in to them, astrology updates such as the daily panchang. Unless you have turned WhatsApp messages off, the link to your reading is sent this way alongside the email.
- Google Analytics 4 (Google LLC) - receives, only if you allow it, a record that a page on this site was viewed and which one: the page address with identifiers removed, the page title, and the coarse device and country Google derives from the connection. It never receives your name, email, phone, birth details or anything you typed. If you have not allowed it, or have said no, Google receives a signal with no identifier attached and nothing is stored on your device. You choose on your first visit and can change it any time on the Preferences page.
- Anthropic - receives your question to Tara, together with the chart context needed to answer it, to generate the reply. Anthropic's own privacy policy governs their handling of this data; our account with them is configured so this data is not used to train their models.
No data is transferred outside India except as strictly required by Resend's infrastructure and by Anthropic's infrastructure when you use Tara. All processors are bound by data processing agreements.
How long we keep it
- Chart and reading data: retained for the lifetime of your relationship with us, and indefinitely unless you request erasure. Readings are not regeneratable identically across engine versions; deletion of the stored output would be permanent.
- Chat conversations with Tara: retained for continuity of guidance, for as long as your account exists. You can remove a conversation from your own view at any time from within the app; this does not delete it from our records, because we may still need it to serve you well or to review the quality of the guidance given. If you want a conversation erased outright rather than hidden, request that under Your Rights below.
- Invoices and billing records: retained for six years from the date of the transaction, as required by the CGST Act, section 36.
- Technical data (IP, browser): deleted after 90 days. The sign-in security log is deleted after 90 days; the IP address and browser kept on your account, on a consent record, with a notification subscription that has not been renewed, or in our copies of deleted and edited records are cleared after 90 days, and the record itself is kept.
- Free chart preview: kept on our server for up to 24 hours, then deleted.
- Free calculator inputs: kept in the result's share link for up to 90 days, then deleted. After that, the link and the result page it opens show that the link has expired.
- Consent records: each time you give or withdraw a consent, we record what you were shown, when, and on which page, as proof of your choice. These records are kept after you withdraw. Three years after you withdraw a consent, its records are marked archived and kept only as that proof.
Your rights under the DPDP Act 2023
The Digital Personal Data Protection Act 2023 grants you the following rights in relation to your personal data held by us:
- Access: the right to obtain a summary of the personal data we hold about you and how it is being processed.
- Correction: the right to have inaccurate or incomplete personal data corrected or completed.
- Erasure: the right to have your personal data erased, subject to our legal retention obligations (see above). For a Tara conversation, removing it from your own view is instant and available inside the app; a full erasure request goes through the process below. An erasure also deletes your consent records, and the share links of free calculator results you worked out while signed in. A calculator result worked out while signed out is not tied to you, so we cannot find it from your name, email or phone; its share link is deleted within 90 days of being made.
- Grievance: the right to have your grievances heard and addressed within 30 days, per section 13 of the DPDP Act.
- Nomination: the right to nominate a person who may exercise your data rights in the event of your death or incapacity.
To exercise any of these rights, submit a request on our Grievance page or email [email protected]. We will verify your identity and respond within 30 days.
Cookies and tracking
We use one analytics tool, Google Analytics 4, and only with your permission. We embed no advertising pixel and no social media tracking beacon, and we do not use your data for advertising of any kind, ours or anyone else's.
What we ask on your first visit. A bar at the foot of the page asks whether we may count your visit. Until you say yes, nothing at all is sent to Google: the analytics script is not even fetched, no cookie is written, and no identifier is stored on your device. If you say yes, Google Analytics loads, stores a cookie in your browser so repeat visits can be recognised as the same browser (which is what lets us tell one person reading five pages from five people reading one), and starts counting from that moment. If you say no, or say nothing at all, it stays off.
What is sent once you say yes. The page address with identifiers stripped out, the page title, and what Google derives from the connection itself (approximate country, device type). Reading and chart links carry a signed token; that token and every document reference in a URL are removed before anything leaves your browser, so a page address we report can never open your reading. What survives from the address, besides the shape of the page, is the language you are reading in and the campaign label on a link you may have followed from social media.
What we never send. Your name, email, phone number, birth date, birth time, birth place, anything you asked Tara, and the content of any reading.
Changing your mind. The Preferences page carries the same switch as the first-visit bar, and it works in both directions at any time.
We also maintain a first-party event log, on our own servers, that records page views, calculator usage and the steps of a checkout for internal product improvement. No personal data is attached to these events; they are keyed to nothing that identifies you, and they never leave our infrastructure. The one exception is yours to choose: when you are signed in we ask once whether we may remember what you view, to suggest what suits you. Only if you say yes are those events linked to your account, for that purpose alone. You can switch this off on the Preferences page at any time, and the link is then removed from the events already recorded.
Consent
We collect your explicit consent at intake before processing your personal data. You may withdraw consent for marketing communications at any time: reply STOP to a WhatsApp message from us, use the Unsubscribe link in a marketing email, or switch it off on the Preferences page.
Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal, nor does it affect processing carried out on other lawful grounds (such as billing or tax compliance).
To request erasure of your data, use the process described under Your Rights above.
Cross-border transfer of data
Our backend CRM and calculation engine are hosted on Indian virtual private servers. Personal data does not leave India, except where Resend's email infrastructure routes a transactional email through servers outside India, and except that your question to Tara and the chart context needed to answer it are sent to Anthropic to generate the reply. We are monitoring the DPDP Act's cross-border transfer rules (section 16) and will update this notice as those rules are notified by the Central Government.
Children
This website and its services are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please notify us immediately at [email protected] and we will delete it promptly.
Data Protection Officer
For this scale of practice, Abhishek Soni serves as both Grievance Officer and the primary contact for data questions. We will appoint a separate Data Protection Officer if and when the practice meets the threshold for classification as a Significant Data Fiduciary under section 10(1) of the DPDP Act 2023.
Grievance Officer
As required by section 13 of the Digital Personal Data Protection Act 2023:
Grievance Officer
Name: Abhishek Soni
Address: Nagpur, Maharashtra, India
Email: [email protected]
Response time: within 30 days of receipt of grievance
You may also file a grievance using the our Grievance page.
Changes to this notice
This privacy notice is versioned in our backend system. Material changes - those that affect your rights or the way we use your data - will be notified to you by email and by a banner on this website displayed for at least 30 days before the change takes effect.
Non-material changes (such as corrections of typographical errors or clarifications that do not affect substance) may be made without prior notice. The "Last updated" date at the top of this page always reflects the date of the most recent change.