Privacy Policy

Effective date: 14 September 2026

This Privacy Policy explains how [PLACEHOLDER: Legal entity name, e.g. “Spinzy Digital Private Limited”] (“Jyotishi”, “we”, “us”, or “our”), a company registered in India with its registered office at [PLACEHOLDER: registered address], collects, uses, discloses, and protects personal data when you use the Jyotishi website and application (the “Service”). By using the Service, you agree to the collection and use of information described here.

1. Information we collect

1.1 Account information

Name, email address, and phone number (if provided) when you sign in via Google or another supported method. We do not store passwords ourselves -- authentication is handled by our OAuth provider.

1.2 Birth data (sensitive personal data)

To generate your natal chart, Dasha timeline, Dosha analysis, and daily guidance, we collect your date of birth, time of birth, and place of birth. This is sensitive personal data under India’s Digital Personal Data Protection Act, 2023 and the IT (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011. We collect it only with your explicit consent at onboarding, and it is used solely to compute and cache your astrological charts. It is never sold, and never shared with third parties except the processors listed in Section 3 who need it to perform the calculation.

1.3 Conversation content

Messages you send to the AI Jyotishi, and (if you escalate) to a human astrologer, including any follow-up questions and voice input you choose to transcribe. Session transcripts are stored to give the AI (and, where you escalate, the astrologer) continuity of context, and to generate your pre-session briefs and post-session follow-ups.

1.4 Payment information

Subscription payments are processed by Stripe; per-minute human-session payments and astrologer payouts are processed by Razorpay. We do not store your full card, UPI, or bank account details -- our payment processors handle that data under their own security and compliance programs (PCI-DSS).

1.5 Usage data

Device type, browser, IP-derived approximate location, pages visited, and feature usage, collected via PostHog for product analytics, and error/crash data collected via Sentry.

2. How we use your information

  • To generate and cache your natal chart, transits, Dasha timeline, and Dosha analysis.
  • To power AI Jyotishi conversations, daily readings, and compatibility (synastry) analysis.
  • To connect you with a human astrologer when you choose to escalate, and to prepare that astrologer’s pre-session brief and your post-session follow-up.
  • To process subscription payments, per-minute session billing, and astrologer payouts.
  • To send transactional emails (booking confirmations, receipts, account notices) via Resend.
  • To monitor, debug, and improve the Service, and to detect fraud or abuse.
  • To comply with applicable law and respond to lawful requests from authorities.

3. Who we share data with

We share the minimum data necessary with the following categories of processors, each bound by contract to use it only to provide their service to us:

  • AstrologyAPI.com -- receives your birth date, time, and place to compute ephemeris-based chart, Dasha, and Dosha data. It does not receive your name, email, or payment details.
  • OpenAI -- receives your chat messages and structured chart summaries (never raw birth coordinates) to generate AI readings and responses.
  • Stripe / Razorpay -- receive payment details necessary to process subscriptions, session payments, and astrologer payouts.
  • Verified human astrologers -- receive your chart data and an AI-generated pre-session brief only when you choose to book a session with them.
  • AWS S3 -- stores encrypted session-brief PDFs and transcripts.
  • Resend -- sends transactional email on our behalf.
  • PostHog / Sentry -- receive usage and error telemetry, not birth data or conversation content.

We do not sell your personal data to anyone, for any purpose.

4. Data retention

We retain your account, chart, and conversation data for as long as your account is active, and for a reasonable period after closure to comply with legal, tax, and dispute-resolution obligations. You may request deletion at any time (Section 6); some records (e.g. payment records required for tax law) may be retained for the period mandated by applicable law even after deletion of your account.

5. Security

We use industry-standard safeguards -- encryption in transit (TLS) and at rest for stored birth data and session transcripts, role-based access control, and audit logging. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your rights

Subject to applicable law, you may:

  • Access, correct, or update your personal and birth data from your account settings.
  • Request a copy of the personal data we hold about you.
  • Request deletion of your account and associated data.
  • Withdraw consent for AI processing of your birth data (this will disable chart-dependent features).
  • Opt out of non-essential analytics tracking.

To exercise any of these rights, contact us at [PLACEHOLDER: privacy contact email].

7. Children’s privacy

The Service is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

8. Cookies

We use essential cookies for authentication and session management, and analytics cookies (PostHog) to understand product usage. You can control cookies through your browser settings; disabling essential cookies may prevent sign-in.

9. Grievance officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the grievance officer for the Service is:

[PLACEHOLDER: Grievance officer name]
Email: [PLACEHOLDER: grievance officer email]
Address: [PLACEHOLDER: registered address]

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email. The “Effective date” above reflects the last revision.

11. Contact us

Questions about this policy: [PLACEHOLDER: contact email].