Privacy Policy

This Privacy Policy is published in accordance with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

Data you provide directly:

• Full name, email address, and phone number (registration)
• Birth date, birth time, and birth place (required for kundali generation)
• Password (stored as a cryptographic hash — never in plain text)
• Communications you send us via email or WhatsApp

Data collected automatically:

• Browsing behaviour (pages visited, features used, click patterns, session duration)
• Device information (device type, operating system, browser type and version)
• IP address and approximate geographic location
• Session identifiers and authentication tokens (httpOnly cookies)
• Transaction data (plan type, payment status — not full card details)
• Digital Guru chat logs (for safety monitoring and quality improvement)

This data is used exclusively for:

• Generating your Vedic astrological birth chart (kundali)
• Producing all derivative analyses (dashas, yogas, doshas, numerology, etc.)
• Enabling Kundali Matching when you voluntarily initiate it

Birth data is never shared with third parties for profiling, advertising, or commercial purposes outside the VastuCart ecosystem.

By submitting another person's birth data on this Platform, you represent and warrant that:

• You have obtained explicit, informed consent from that individual to collect and process their birth data on this Platform.
• You will not use this feature to collect data on any person without their knowledge.
• You accept full legal responsibility for any DPDP Act violation arising from the unauthorised collection of a third party's data.

VastuCart is not liable for any data collected by users about third parties. A confirmation declaration is also required at the point of data entry on the matching screen.

• Service delivery: Generating kundali charts, reports, predictions, and all platform features.
• Account management: Creating and maintaining your account, authenticating logins, managing subscriptions.
• Transactional communications: Sending account confirmations, subscription receipts, and service alerts.
• Personalisation: Tailoring content, recommendations, and features to your profile.
• Safety & quality: Monitoring Digital Guru chat logs for harmful content, reviewing flagged interactions.
• Analytics: Understanding how the Platform is used to improve performance and features.
• Fraud prevention: Detecting and preventing fraudulent transactions and misuse.
• Legal compliance: Meeting obligations under applicable Indian laws.

If you have opted in to marketing communications at the time of registration (pre-ticked checkbox — you may untick at any time), VastuCart may send you:

• Astrology tips, lunar updates, and seasonal guidance
• New feature announcements and platform updates
• Offers, promotions, and subscription upgrade suggestions
• Festival greetings and wellness content

Your consent is recorded with a timestamp and version at the time of signup. You may withdraw marketing consent at any time by:

• Using the unsubscribe link in any marketing email
• Updating your preferences in Account Settings → Notifications
• Emailing us at [email protected]

Withdrawal of marketing consent does not affect transactional communications (receipts, account alerts), which are sent regardless of marketing preference.

VastuCart operates multiple digital properties. Your data may be shared and used across the following for a seamless, personalised experience:

• kundali.vastucart.in
• store.vastucart.in
• vastucart.in
• panchang.vastucart.in

This cross-ecosystem use is conducted solely to improve your experience. VastuCart does not sell, rent, or exchange your personal data with third parties outside the VastuCart ecosystem for commercial purposes.

We do not sell your personal data. We share data only with the following, strictly on a need-to-know basis:

• Payment processors (Razorpay): Transaction data necessary to process payments. Card data handled exclusively by Razorpay — we never store full card details.
• Analytics providers: Anonymised or pseudonymised usage data shared with analytics tools (see Section 9).
• Email/marketing platforms (Mautic): Your name and email for transactional and marketing communications, subject to your consent preferences.
• AI model providers: Digital Guru chat content may be processed by third-party AI providers. Chats are not linked to your full identity in AI processing pipelines.
• Legal & regulatory authorities: Where required by law, court order, or government authority.
• Business transfer: If VastuCart is acquired or merged, your data may transfer to the successor entity, subject to the same protections.

We use the following cookies and tracking technologies. You consent to these by using the Platform. You may manage non-essential cookies through your browser settings.

We may add similar analytics, marketing, or operational tools in the future. This Privacy Policy will be updated accordingly, and the “Last Updated” date at the top will reflect any such changes.

• All data in transit is encrypted via SSL/TLS.
• Passwords are stored as bcrypt hashes — never in plain text.
• Authentication tokens are stored in httpOnly, Secure, SameSite cookies.
• Access to production data is restricted to authorised personnel only.
• In the event of a personal data breach likely to cause harm, we will notify affected users as required under the DPDP Act, 2023.

Despite best efforts, no internet transmission is 100% secure. You acknowledge this inherent risk. In the event of a breach caused by factors beyond VastuCart's reasonable control, liability is limited to notification obligations under applicable law.

• Active account: For as long as your account is active.
• After account deletion: Personal data is anonymised or deleted within 90 days of account deletion, except where retention is required by law (e.g. transaction records for GST/tax compliance — retained for 8 years as required under Indian law).
• Transaction records: 8 years (GST/tax compliance requirement)
• Digital Guru chat logs: 2 years from conversation date for safety and quality monitoring

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request information about what personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Grievance Redressal: File a complaint with our Grievance Officer.
• Right to Withdraw Consent: Withdraw consent for non-essential processing at any time. Note: withdrawal may affect certain features.
• Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any right, contact our Grievance Officer at [email protected]. We will respond within 30 days.

This Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has registered or provided data without parental consent, we will delete that data promptly. If you believe a minor has accessed this Platform, please notify us immediately at [email protected].

VastuCart reserves the right to update or modify this Privacy Policy at any time without prior notice. The updated Policy is effective immediately upon posting at kundali.vastucart.in/privacy. Your continued use of the Platform after any modification constitutes acceptance of the revised Policy. It is your responsibility to review this Policy periodically.

For privacy-related queries, data access requests, or to exercise your rights under the DPDP Act, 2023: