गोपनीयता नीति

Privacy Policy — PanditSathi (पंडितसाथी)

Last Updated: October 5, 2026

This Privacy Policy explains how PanditSathi collects, uses, stores, and protects your personal data in compliance with India's Digital Personal Data Protection (DPDP) Act, 2023, Information Technology Act, 2000, and international privacy standards.

1. PERSONAL DATA WE COLLECT
We collect only the minimum data necessary to provide authentic spiritual services, Vedic calculations, and secure access:
- Identity & Contact Data: Name, Mobile Phone Number, and Email Address.
- Birth & Astrological Data: Date of Birth, Time of Birth, Place of Birth, and Geographic Coordinates (Latitude/Longitude) entered for Janam Kundali generation.
- Authentication Data: Encrypted password digests, OTP verification logs, and OAuth provider IDs (Google).
- Payment & Transaction Data: Razorpay payment IDs, order amounts, and transaction status. We do NOT collect or store credit card numbers, CVVs, or banking PINs.
- Consultation Chat Records: Text messages exchanged during live astrologer consultation sessions, encrypted in transit and securely stored in your private account.
- Technical & Analytics Data: First-party analytics events (Ahoy), browser type, and operating system for security and error monitoring.

2. PURPOSE & LEGAL BASIS FOR PROCESSING
We process your personal data under the DPDP Act, 2023 based on your explicit informed consent and service delivery:
- Janam Kundali Calculation: Computing high-precision astronomical planetary positions, Lagna charts, Navamsha (D9), and Vimshottari Dashas.
- Digital Order Fulfillment: Generating downloadable archival PDF reports and facilitating live 1-on-1 astrologer consultation chat sessions.
- Pandit Coordination: Dispatching verified pandit contact information to your email and SMS upon request.
- Platform Security: Enforcing rate limits, preventing automated scraping, and protecting user privacy.

3. BIRTH DATA CONFIDENTIALITY & ZERO RESALE
- Strict Non-Disclosure: Your birth date, birth time, and birth chart are treated as private personal data. PanditSathi does NOT sell, rent, trade, or share your birth profile with third-party advertisers or data brokers.
- PII Isolation: Personal birth profiles are linked securely to your authenticated account and are accessible only by you.

4. DATA SHARING & TRUSTED TECHNICAL PARTNERS
We partner only with verified, secure technology providers essential for platform operations:
- Payment Gateway (Razorpay): PCI-DSS compliant processing for UPI, cards, and netbanking transactions.
- Transactional Email & SMS (Postmark / AWS SES / MSG91): For OTP delivery and purchase receipts via TLS encryption.
- Law Enforcement: Only when strictly mandated by a valid judicial warrant or Indian law.

5. DATA RETENTION & YOUR RIGHTS UNDER DPDP ACT, 2023
As a Data Principal under Indian law, you have the right to:
- Access: View all birth charts, consultation history, and profile data in your account.
- Rectification: Update or correct your personal details at any time.
- Erasure: Request permanent deletion of your account, birth profiles, and consultation messages by emailing support@panditsathi.com.
- Consent Withdrawal: You may withdraw consent for optional communications at any time.

6. DATA SECURITY
We implement enterprise-grade security including HTTPS/TLS encryption in transit, BCrypt salted password hashing, Content Security Policy (CSP) enforcement, and strict database access controls.

7. DATA PROTECTION OFFICER & GRIEVANCE REDRESSAL
If you have questions, concerns, or requests regarding this Privacy Policy or data processing:
Grievance Officer & Data Protection Desk
PanditSathi Technologies
Email: support@panditsathi.com
Phone: +91 98765 43210