Privacy Policy

1.Information We Collect & Store

• Authentication Credentials: Mobile phone numbers verified through Firebase Authentication SMS OTP, or verified Google profile metadata (email and display name) for passwordless, secure sign-in.
• Stored Profile Fields: In PostgreSQL, we securely persist your profile details (phone number, email address, display name) and seeker birth profile data (date of birth, time of birth, birth city/place, geographic coordinates [latitude, longitude], and timezone) used solely to calculate personalized Vedic astrology charts.
• Session Cookie Lifecycle: Authenticated sessions utilize secure, HttpOnly, SameSite=Lax shashtra_session cookies with a 5-day lifecycle. When you sign out, session cookies are immediately revoked on the server and wiped from the browser.
• Palm Photographs (Optional Premium Feature): Hand imagery captured strictly for computer vision line and mount inspection during the premium reading experience. Palm photos are strictly a premium feature and are never requested during basic onboarding.
• Transaction Identifiers: Merchant Order IDs and payment tokens returned by verified gateways (Cashfree Sandbox). We never access, capture, or store credit card numbers, bank passwords, or UPI PIN credentials.

2.AI Vision Processing & Sandbox Architecture

In strict compliance with statutory consumer transparency norms, we disclose that during Phase 2 development and sandbox operations, palm photo analysis is simulated ephemerally using deterministic local vision algorithms or sandbox stubs; no seeker biometric palm data is transferred to unvetted external AI cloud models.

3.Data Minimization & Technical Safeguards

We believe in sacred privacy. Uploaded palm photos are processed in temporary memory buffers and discarded after report synthesis; we do not construct permanent biometric profiles. Seeker account details and birth profiles (date of birth, time of birth, birth city, geographic coordinates, and timezone) are securely persisted in your private PostgreSQL account database solely to calculate and render your ongoing Vedic horoscope and Kundli charts across logins. We never sell, rent, or monetize your personal coordinates with third-party advertisers. All stored records are protected using parameterized database queries to prevent injection vulnerabilities and strict server-side access controls to prevent Insecure Direct Object Reference (IDOR) risks.

4.Your Rights & Data Erasure

Under the Digital Personal Data Protection (DPDP) Act 2023, you hold the right to review, update, or demand immediate deletion of any residual consultation metadata. To submit a data inquiry or erasure request, contact our Data Grievance Officer at privacy@shastradisha.com.