Privacy Policy
Last updated: September 2026
1. Data Fiduciary
Nakshatra ("we", "our", or "us") is an Udyam-registered proprietary micro enterprise operating Tarashastra, the consumer brand for our astrology products and services. For the purposes of the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000, the Data Fiduciary is:
Registered enterprise: Nakshatra
Consumer brand: Tarashastra
Grievance Officer: Aashutosh Bhattad
Email: creator@tarashastra.com
Location: India
2. Lawful Basis for Processing
We process your personal data based on your explicit consent (DPDPA Section 6). Before collecting any data, we present a clear notice and obtain your agreement. You may withdraw consent at any time (see Section 8).
3. Data We Collect
We collect the following categories of personal data, each for a specific purpose:
| Data Category | Specific Data | Purpose |
|---|---|---|
| Identity | Name (as provided by you) | Personalize astrology readings |
| Contact | Phone number (WhatsApp) or Telegram user ID | Deliver messages and identify your account |
| Consultation Booking | Email address, requested session time, timezone, and selected duration | Match your saved chart, process a consultation payment, and confirm the session |
| Birth Details | Date of birth, time of birth, place of birth, geographic coordinates | Calculate your Vedic birth chart (kundali) |
| LifeBook Order | Provided birth details, timezone, email or phone contact, report language, consent time, order reference, payment and delivery status, generated report, and a private access credential | Prepare your personalised PDF, verify payment, resume interrupted generation, and provide your private download and email delivery where offered at checkout |
| Conversation History | Questions you ask and AI-generated responses | Provide context-aware readings; remember past discussions |
| Subscription & Usage | Credit balance, plan type, message counts, usage dates | Manage your subscription and enforce usage limits |
| Payment Records | Transaction IDs, amount paid, payment status, currency | Process payments and prevent fraud. We do NOT store card/UPI details — Razorpay handles payment instruments directly. |
| Referral Data | Referral code, referred-by code | Manage referral rewards |
| Language Preference | English or Hindi | Communicate in your preferred language |
We do not collect: Aadhaar number, PAN, health data, biometric data, caste, religion, sexual orientation, or political opinion.
4. Third-Party Data Processors
Your data is shared with the following third-party services solely for providing the astrology service:
| Service | Provider | Data Shared | Purpose | Server Location |
|---|---|---|---|---|
| AI Model Processing | DeepSeek; Google Gemini through Vertex AI; Anthropic Claude; OpenRouter routing to Gemini models | Birth details, questions, and relevant conversation or chart context, depending on service availability and configuration | Generate and maintain continuity of astrology readings | Global |
| Database | Supabase (PostgreSQL) | All stored data listed in Section 3 | Persistent data storage | Cloud-hosted |
| LifeBook generation and file storage | Hostinger | Report inputs, generated text and PDFs, and operational request information | Run the report service and deliver private downloads | Cloud-hosted |
| Payments | Razorpay Software Pvt Ltd | Transaction details, user identifier | Payment processing (PCI-DSS compliant) | India |
| Messaging | Meta Platforms (WhatsApp) | Phone number, messages | Message delivery on WhatsApp | Global (Meta servers) |
| Messaging | Telegram FZ-LLC | Telegram user ID, messages | Message delivery on Telegram | Global |
| Geocoding | Google Maps (Google LLC) | Birth city name | Convert city name to geographic coordinates | Global (Google Cloud) |
We do not sell your data to any third party. Data is shared only as described above.
LifeBook birthplace search uses an offline GeoNames city dataset. Personal LifeBooks are not added to the public website. The downloadable celebrity sample uses cited public birth information and is separate from customer reports. Anyone you share your private receipt link with can access that report, so treat it as a private document link.
5. Cross-Border Data Transfer
Some of our data processors operate outside India. By consenting to this policy, you acknowledge that your data may be transferred to and processed in jurisdictions outside India, including through DeepSeek, Google, Anthropic, OpenRouter, Meta, and other service providers described above. These transfers are necessary to provide the service.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Conversation history | 180 days from the date of conversation, then automatically deleted |
| Birth chart & user profile | Until you request deletion or withdraw consent |
| LifeBook birth inputs and generated report | Until you request deletion or withdraw consent; associated payment and consent records are handled separately as described below |
| Subscription data | Until you request deletion or withdraw consent |
| Payment records | 7 years (required by Indian tax and financial regulations) |
| Consultation booking records | 7 years when linked to a payment record |
| Consent records | 7 years (legal audit trail) |
7. Data Security
We implement reasonable security measures as required under the Information Technology (Reasonable Security Practices) Rules, 2011:
- Encrypted database connections (TLS/SSL)
- Parameterized database queries to prevent injection attacks
- Input sanitization and validation on all user inputs
- Webhook signature verification (HMAC SHA-256) for payment and messaging callbacks
- Rate limiting to prevent abuse
- Atomic database operations to prevent race conditions on financial transactions
8. Your Rights
Under the DPDPA 2023 and IT Act 2000, you have the following rights:
| Right | How to Exercise |
|---|---|
| Access your data | Send /mydata in the bot to receive a copy of all your stored data |
| Delete your data | Send /deletedata in the bot to permanently delete all your personal data |
| Withdraw consent | Send /withdrawconsent in the bot. This will delete your data and stop the service. |
| Cancel scheduled deletion | Send /canceldelete in the bot during the 28-day grace period to restore your account |
| Correct your data | Contact our Grievance Officer at creator@tarashastra.com |
| Grievance redressal | Contact our Grievance Officer. We will respond within 72 hours. |
9. Grievance Officer
Where LifeBook email delivery is offered at checkout, Google Workspace processes the provided recipient address and the report or private download link to deliver your order. Delivery email is transactional, not a marketing subscription.
For a LifeBook access, correction, or deletion request, email support@tarashastra.com with your order reference. LifeBook records are separate from your bot account; bot deletion commands do not automatically remove them. We verify requests before disclosing or deleting private report data.
In compliance with the Information Technology Act, 2000 and DPDPA 2023, our Grievance Officer is:
Name: Aashutosh Bhattad
Email: creator@tarashastra.com
Address: India
Response time: Within 72 hours of receipt of complaint
If you are not satisfied with the resolution, you may approach the Data Protection Board of India as established under DPDPA 2023.
10. Children's Data
Our service is intended for users aged 18 and above. We do not knowingly collect data from children under 18. If you believe a minor has provided us with personal data, please contact our Grievance Officer for immediate deletion.
11. AI-Generated Content Disclosure
Automated WhatsApp and Telegram astrology readings are generated by artificial intelligence based on Vedic astrology calculations. A service explicitly described as a live personal consultation is conducted by a human astrologer. Both forms of astrology are for guidance and entertainment purposes only and do not constitute professional advice of any kind.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. If we make material changes, we will notify you through the bot before the changes take effect. Continued use of the service after notification constitutes acceptance. You may withdraw consent if you disagree with any changes.
13. Applicable Law
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Any disputes shall be subject to the jurisdiction of courts in India.