Legal
Privacy Policy
Last updated 23 August 2026
What we collect
When you use this website or book a reading, we collect the following categories of personal data:
- Identity and contact data: your full name, email address, and phone number.
- Birth data: date, time, and place of birth. For Kundli Match Making services, we also collect the same details for your partner, with that person's consent.
- Payment data: billing amounts and transaction reference numbers. Card numbers, CVV codes, and bank account details are handled exclusively by Razorpay and are never transmitted to or stored on our systems.
- Technical data: browser type and IP address at the moment of form submission. This data is used solely for fraud prevention and is deleted after 90 days.
- Calculator usage data: anonymised page-view and calculator-usage events, collected via a first-party event log with no personal data attached.
- Chat and consultation data: the text of your questions to Tara, our AI assistant, together with the chart context needed to answer them. If you are signed in, your conversations are kept so Tara and our team can build on what you have already discussed rather than starting over each time.
We do not collect data from minors. Our services are directed at persons aged 18 and above.
Why we collect it
- Chart computation: birth date, time, and place are essential inputs to compute a Vedic birth chart. Without them the service cannot be delivered.
- Service delivery: we use your contact details to send you your reading and to communicate about your booking.
- Continuity of guidance: the personal matters you raise with Tara, or with Abhishek Soni directly, are often ongoing: a health worry, a family question, a career decision. We keep your prior conversations and the guidance already given so future answers build on that context instead of ignoring it. This is the whole purpose of keeping the data, so we say it plainly rather than folding it into "service delivery".
- Billing: we use your name and email to issue a tax invoice and process payment via Razorpay.
- Tax compliance: invoices and related records are retained for six years as required by section 36 of the Central Goods and Services Tax Act, 2017 (CGST Act).
- Fraud prevention: IP address and browser type are logged at intake to detect and block fraudulent submissions.
How we use it
Your data is used only by Abhishek Soni and his team to deliver and improve your reading and your guidance. We do not sell your data to anyone, we do not share it with third parties for their own marketing, and we do not use it for advertising of any kind, ours or anyone else's, on any platform.
To generate a chart-grounded answer, Tara sends your question and the relevant chart context to our AI provider (see Sub-processors below). We configure that account so your conversations are not used to train the provider's models. We do not independently verify the provider's infrastructure, and we will correct this statement immediately if that ever changes.
We will not use your data for any purpose materially different from the one for which it was collected without obtaining fresh consent from you.
Where it goes - sub-processors
We engage the following sub-processors who may receive limited personal data as necessary to deliver the service:
- Frappe-hosted CRMat api.abhisheksoni.in - receives your name, email, phone, and birth data to store your reading record and manage correspondence. Hosted on Indian servers.
- Razorpay Payments Private Limited - receives your name, email, phone, and the transaction amount to process payment and issue a payment receipt. Razorpay's own privacy policy governs their handling of payment data.
- Resend - receives your email address and reading content when we send a transactional email. Used as a fallback when WhatsApp delivery fails.
- WhatsApp Business API via frappe_whatsapp - receives your phone number and reading content to deliver your reading over WhatsApp, which is the primary delivery channel.
- Google Analytics 4 (Google LLC) - receives, only if you allow it, a record that a page on this site was viewed and which one: the page address with identifiers removed, the page title, and the coarse device and country Google derives from the connection. It never receives your name, email, phone, birth details or anything you typed. If you have not allowed it, or have said no, Google receives a signal with no identifier attached and nothing is stored on your device. You choose on your first visit and can change it any time on the Preferences page.
- Anthropic - receives your question to Tara, together with the chart context needed to answer it, to generate the reply. Anthropic's own privacy policy governs their handling of this data; our account with them is configured so this data is not used to train their models.
No data is transferred outside India except as strictly required by Resend's infrastructure and by Anthropic's infrastructure when you use Tara. All processors are bound by data processing agreements.
How long we keep it
- Chart and reading data: retained for the lifetime of your relationship with us, and indefinitely unless you request erasure. Readings are not regeneratable identically across engine versions; deletion of the stored output would be permanent.
- Chat conversations with Tara: retained for continuity of guidance, for as long as your account exists. You can remove a conversation from your own view at any time from within the app; this does not delete it from our records, because we may still need it to serve you well or to review the quality of the guidance given. If you want a conversation erased outright rather than hidden, request that under Your Rights below.
- Invoices and billing records: retained for six years from the date of the transaction, as required by the CGST Act, section 36.
- Technical data (IP, browser): deleted after 90 days.
- Marketing consent records: retained until you withdraw consent, then archived for three years to demonstrate compliance.
Your rights under the DPDP Act 2023
The Digital Personal Data Protection Act 2023 grants you the following rights in relation to your personal data held by us:
- Access: the right to obtain a summary of the personal data we hold about you and how it is being processed.
- Correction: the right to have inaccurate or incomplete personal data corrected or completed.
- Erasure: the right to have your personal data erased, subject to our legal retention obligations (see above). For a Tara conversation, removing it from your own view is instant and available inside the app; a full erasure request goes through the process below.
- Grievance: the right to have your grievances heard and addressed within 30 days, per section 13 of the DPDP Act.
- Nomination: the right to nominate a person who may exercise your data rights in the event of your death or incapacity.
To exercise any of these rights, submit a request on our Grievance page or email hello@abhisheksoni.in. We will verify your identity and respond within 30 days.
Cookies and tracking
We use one analytics tool, Google Analytics 4, and only with your permission. We embed no advertising pixel and no social media tracking beacon, and we do not use your data for advertising of any kind, ours or anyone else's.
What we ask on your first visit. A bar at the foot of the page asks whether we may count your visit. Until you say yes, nothing at all is sent to Google: the analytics script is not even fetched, no cookie is written, and no identifier is stored on your device. If you say yes, Google Analytics loads, stores a cookie in your browser so repeat visits can be recognised as the same browser (which is what lets us tell one person reading five pages from five people reading one), and starts counting from that moment. If you say no, or say nothing at all, it stays off.
What is sent once you say yes. The page address with identifiers stripped out, the page title, and what Google derives from the connection itself (approximate country, device type). Reading and chart links carry a signed token; that token and every document reference in a URL are removed before anything leaves your browser, so a page address we report can never open your reading. What survives from the address, besides the shape of the page, is the language you are reading in and the campaign label on a link you may have followed from social media.
What we never send. Your name, email, phone number, birth date, birth time, birth place, anything you asked Tara, and the content of any reading.
Changing your mind. The Preferences page carries the same switch as the first-visit bar, and it works in both directions at any time.
We also maintain a first-party event log, on our own servers, that records page views, calculator usage and the steps of a checkout for internal product improvement. No personal data is attached to these events; they are keyed to nothing that identifies you, and they never leave our infrastructure.
Consent
We collect your explicit consent at intake before processing your personal data. You may withdraw consent for marketing communications at any time by replying STOP to any WhatsApp message or email from us.
Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal, nor does it affect processing carried out on other lawful grounds (such as billing or tax compliance).
To request erasure of your data, use the process described under Your Rights above.
Cross-border transfer of data
Our backend CRM and calculation engine are hosted on Indian virtual private servers. Personal data does not leave India, except where Resend's email infrastructure routes a transactional email through servers outside India, and except that your question to Tara and the chart context needed to answer it are sent to Anthropic to generate the reply. We are monitoring the DPDP Act's cross-border transfer rules (section 16) and will update this notice as those rules are notified by the Central Government.
Children
This website and its services are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please notify us immediately at hello@abhisheksoni.in and we will delete it promptly.
Data Protection Officer
For this scale of practice, Abhishek Soni serves as both Grievance Officer and the primary contact for data questions. We will appoint a separate Data Protection Officer if and when the practice meets the threshold for classification as a Significant Data Fiduciary under section 10(1) of the DPDP Act 2023.
Grievance Officer
As required by section 13 of the Digital Personal Data Protection Act 2023:
Grievance Officer
Name: Abhishek Soni
Address: Nagpur, Maharashtra, India
Email: hello@abhisheksoni.in
Response time: within 30 days of receipt of grievance
You may also file a grievance using the our Grievance page.
Changes to this notice
This privacy notice is versioned in our backend system. Material changes - those that affect your rights or the way we use your data - will be notified to you by email and by a banner on this website displayed for at least 30 days before the change takes effect.
Non-material changes (such as corrections of typographical errors or clarifications that do not affect substance) may be made without prior notice. The "Last updated" date at the top of this page always reflects the date of the most recent change.