Privacy Policy

Last updated: 25 September 2026. This policy describes how GrahaVani processes personal data. It is written for operational clarity; for jurisdiction-specific advice, consult qualified counsel.

1. Who we are

GrahaVani provides digital birth-chart computation and reflective reading access via a web application. Controller contact: Contact page. Postal address, when published, appears on the Contact page.

2. Data we process

• Account data — identifiers and profile fields from our authentication provider (e.g. email, user id), and access flags we store for entitlements.
• Birth details you submit — date, time, place/coordinates, and related inputs needed to compute a chart and generate readings.
• Reading & chart memory — saved charts, reading text, and the questions you ask during a sitting (used only to keep follow-up questions in that same sitting coherent — a new chat starts with no prior questions). Associated with your account when signed in and when storage is enabled. All removable via the self-serve deletion in section 9.
• Payment metadata — order ids, payment ids, amounts, and status from our payment partner. We do not store full card numbers, CVV, or UPI PINs.
• Support messages — name, email, topic, and message body you send via Contact/Support forms, plus basic technical metadata (e.g. time, approximate IP) for abuse prevention.
• Technical logs — device/browser signals, IP address, timestamps, and error logs needed to operate, secure, and debug the service.

3. Purposes and legal bases

We process data to:

• Provide the service you request (chart compute, readings, credits) — contract / service delivery.
• Authenticate you and protect accounts — legitimate interests / security.
• Process payments and prevent fraud — contract and legal obligations.
• Respond to support and privacy requests — contract / legal obligations.
• Maintain security, prevent abuse, and improve reliability — legitimate interests.
• Comply with law, regulators, or valid legal process — legal obligation.

4. AI processing

Readings may be generated using third-party AI model providers. Chart JSON and prompts necessary to produce a reading may be transmitted to those providers under their terms and our agreements. Do not submit sensitive health, government ID, or others’ personal data in free-text questions unless you accept that it may be processed to answer you.

Feedback & improvement: if you answer the optional post-reading feedback questions, your answers (not your chart contents) may be used to improve reading quality and prompt design. The feedback sheet is always skippable, and you can delete submitted feedback via the self-serve controls in section 9.

Translation: when you choose to read a reading in the other language, the reading text (not your birth details) is translated — on your own device where your browser supports it (no data leaves the device), otherwise by Google Cloud Translation, and failing that by the same AI provider that writes readings. Switching the site’s language alone sends nothing anywhere.

5. Sharing

We share data only as needed with:

• Authentication provider (account sign-in).
• Payment processor (checkout and settlement).
• Hosting, database, and infrastructure providers.
• AI providers used to generate readings you request.
• Google Cloud Translation, for reading text you ask to translate.
• Professional advisers or authorities when legally required.

We do not sell your personal data.

6. Retention

We retain account, chart, reading, payment metadata, and support records for as long as needed to provide the service, meet legal/accounting requirements, resolve disputes, and enforce policies. You may request deletion of account-associated data subject to lawful retention needs (e.g. payment records).

7. Security

We use industry-standard safeguards appropriate to a web SaaS (encrypted transport, access controls, least-privilege keys, security response headers, and rate limiting). No method of transmission or storage is 100% secure. If we become aware of a personal-data breach likely to cause harm, we will act in line with applicable breach-notification law and, where required, notify affected users and the relevant authority (including, under the Indian DPDP Act, the Data Protection Board).

8. International transfers

Service providers may process data in India and other countries. Where required, we rely on appropriate contractual or legal transfer mechanisms offered by those providers.

9. Your rights — self-serve export & deletion

You can export or delete your server-side data (saved charts, readings, feedback) yourself, right here, while signed in. Payment/ledger records are retained for accounting and dispute obligations; your credit balance is unaffected by data deletion. Full account (sign-in) deletion and anything not covered by the buttons below: contact Contact page — we may need to verify your identity before acting.

Sign in to export or delete the data stored for your account.

Depending on your location, you may also have rights to access, correct, restrict, or object to certain processing, and to withdraw consent where processing is consent-based.

9a. Grievance / data-protection contact

For privacy complaints or to exercise your rights under the Indian DPDP Act, GDPR, or other applicable law, contact our grievance/redressal point: Contact page. We aim to acknowledge requests promptly and respond within the timelines required by applicable law. If unresolved, you may escalate to the relevant supervisory authority (in India, the Data Protection Board).

10. Children

The service is not directed to children under 18. If you believe a minor’s data was submitted, contact us to request deletion.

11. Cookies and similar tech

We use essential cookies/storage for authentication, preferences (e.g. theme), and security. Analytics cookies, if added later, will be described here or via an updated notice.

12. Changes

We may update this policy. Material changes will be reflected by updating the “Last updated” date and, where appropriate, additional notice in the product.

13. Contact

Privacy requests: Contact page. Also see Support.