Privacy Policy

This Privacy Policy explains what personal information Kalatom Labs (operator of Astro Aata Hai, astroaatahai.com) collects when you use the service, how it's used, and the rights you have over it. It is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP) and the Information Technology Rules, 2021.

1. Who we are

Kalatom Labs operates the Astro Aata Hai service. Nitin Goswami is the person in charge for data-protection and grievance matters. You can reach us at admin@kalatomlabs.com.

2. What we collect

You give us directly

• Birth details — date, time (if known), and place of birth. Used to compute your kundali.
• Optional profile display name and, for family charts, an optional relationship label.
• Chat messages you send to the AI Jyotishi.
• Notes you save.
• Feedback — voluntary submissions via the Beej Mantra widget.

Collected when you sign in with Google

• Your Google email address, name, and profile picture URL — used to identify your account across devices.
• We do not receive your Google password. Google's OAuth flow gives us only the tokens you consent to.

Automatic

• Session identifier — a random ID we mint to attach your chart and chat history to your device.
• Aggregate visit counter — a single integer incremented on landing-page visits. No IP, user-agent, or fingerprint is recorded.
• Vercel Analytics + Speed Insights — anonymised, privacy-preserving pageview + performance metrics from our hosting provider. No cross-site tracking, no cookies for analytics.

3. Why we collect it (purpose limitation)

• Compute and render your birth chart with Swiss Ephemeris.
• Generate personalised readings tied to your specific placements.
• Preserve chat history so conversations continue across devices when signed in.
• Diagnose bugs and improve product quality.

4. Who we share it with

We do not sell your data. Ever. We share only with the vendors that keep the service running:

• Anthropic — chat messages are sent to Anthropic's Claude API to generate the reading. Anthropic's privacy terms apply to that processing.
• Google — only for the sign-in flow, if you choose to sign in.
• Vercel + Railway — our hosting providers. They see request metadata as any hosting provider would.

5. How long we keep it

• Birth details, notes, chat history — kept until you delete them.
• JWT session token — 30 days, then it expires and you sign in again.
• Anonymous device sessions — persist until the device localStorage is cleared or Delete-Everything is used.
• Feedback submissions — retained for product-improvement analysis.

6. Your rights (Data Principal rights under DPDP)

• Access — request a copy of your data.
• Correction — fix inaccurate data (birth-details editing is built into the Me tab).
• Erasure — one-tap Delete Everything on the Me tab wipes your local data + signs you out.
• Withdraw consent — for Google Sign-In, revoke access via your Google Account permissions.
• Grievance — see our Grievance Officer page.

To exercise any of the above, email admin@kalatomlabs.com. We will respond within 15 days per DPDP requirements.

7. Cookies & local storage

We use browser localStorage (not cookies) to store your session token and cache your local profiles/notes. This is functional and cannot be disabled without breaking the app. Analytics from Vercel are cookieless.

8. Security

See our Data Security page for the technical measures in place.

9. Children

Astro Aata Hai is not directed at children under 18. We do not knowingly collect data from minors. If you believe we have, please email us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The effective date at the top always reflects the latest revision. Material changes will be notified via the site.

11. Contact

Nitin Goswami, Data Protection point-of-contact
admin@kalatomlabs.com