Privacy Policy

AstroKarmaVeda is an online Vedic astrology consultation platform owned and operated by Unnati Infosolutions Pvt. Ltd., having its registered office at V282, 2nd Floor, Rajouri Garden, New Delhi – 110027, India. This Privacy Policy outlines what personal data we collect, why we process it, how it is safeguarded, when it may be shared with verified service providers, and your rights as a data principal. It applies to our website (astrokarmaveda.com), online booking and contact forms, and consultations arranged through the platform.

We handle personal data in accordance with applicable Indian legislation, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and rules framed thereunder, the Information Technology Act, 2000 and its Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020.

1. Data Fiduciary & Contact Details

The Data Fiduciary for AstroKarmaVeda is Unnati Infosolutions Pvt. Ltd., New Delhi, India. For all privacy inquiries, data subject rights, or grievances, our contact information is as follows:

• Registered Office: V282, 2nd Floor, Rajouri Garden, New Delhi – 110027, India
• General Enquiries Email: info@astrokarmaveda.com
• Customer Support & Grievance Email: support@astrokarmaveda.com
• WhatsApp / Phone: +91 7678291249
• Service Hours: Monday to Sunday, 9:00 AM to 9:00 PM IST

2. Personal Data We Collect

We collect personal data only when voluntarily provided by you or necessary to deliver our services. When submitting forms on our website, clear notice and links to this Privacy Policy are presented. We collect:

• Booking & Account Details: Full name, email address, phone/WhatsApp number, country of residence, and account login credentials created to manage appointments.
• Birth & Consultation Information: Exact date of birth, time of birth, and place of birth; chosen consultation package; preferred date/time slot; and any specific life questions or context you submit for your reading. This data is strictly necessary to calculate your Janma Kundli (birth chart) and prepare your reading.
• Contact Enquiries: Name, email address, phone number, subject, and message submitted through our contact form.
• Transaction & Service Records: Booking reference numbers, selected consultation packages, transaction timestamps, payment amounts, and payment status or order IDs provided by Razorpay. (Note: We never collect or store your card numbers, CVVs, or UPI PINs.)
• Technical & Session Data: Encrypted session identifiers (to maintain login and booking state), CSRF security tokens, and IP addresses recorded upon form submissions for fraud prevention. Standard web hosting server logs capture routine access diagnostics.

3. Purpose and Legal Grounds for Processing

We process your personal data for clear, lawful, and specific purposes:

• To respond to your inquiries and schedule requested consultations;
• To calculate Vedic birth charts (Janma Kundli, Navamsha D9), dasha timelines, and planetary transits;
• To communicate appointment confirmations, video call links, and service updates via email or WhatsApp;
• To deliver one-on-one video consultations through secure platforms (Zoom or Google Meet);
• To process and reconcile consultation fees securely via Razorpay;
• To comply with statutory tax, accounting, and consumer protection record-keeping mandates in India; and
• To protect our platform, astrologers, and clients against fraud, unauthorized access, or abusive activity.

We do not sell, rent, or trade your personal data. Your birth and consultation information is strictly confidential and is never used for targeted advertising or commercial marketing profiling.

4. Astrologer Access, Confidentiality & Consultations for Minors

Astrologer Access & Confidentiality: Consulting astrologers are granted restricted, need-to-know access to your birth data (date, time, place) and submitted life questions solely for casting charts and conducting your consultation. Astrologers are bound by strict non-disclosure obligations and do not have access to your financial payment credentials.

Consultations for Minors: For consultations involving individuals under the age of 18, the booking and associated birth information must be submitted directly by the child's parent or legal guardian. In accordance with the Digital Personal Data Protection Act, 2023, verifiable parental or guardian consent is required. Children are not permitted to independently register accounts or submit personal data on this platform.

5. Sharing with Service Providers & Technical Infrastructure

We partner with reputable service providers to deliver secure and reliable digital services:

• Payment Gateway (Razorpay): Online payments are processed by Razorpay Software Private Limited. When you proceed to checkout, payment information is captured directly by Razorpay's secure PCI-DSS Level 1 compliant interface. Razorpay handles your card details, UPI transactions, or net banking authentication in compliance with RBI directives. AstroKarmaVeda receives only transaction references and status notifications.
• Cloud Hosting & Database Infrastructure: Our web servers and database systems are hosted in secure, enterprise-grade data center environments with firewall protections, database encryption, and regular security patching.
• Video Platforms (Zoom & Google Meet): Consultations are conducted via Zoom or Google Meet. Meeting rooms are access-restricted to the client and the consulting astrologer.
• Transactional Communications: Email and WhatsApp delivery providers utilized strictly for delivering appointment confirmations, booking links, and service reminders.

6. Cookies & Tracking Technologies

Our website uses strictly essential first-party session cookies (for login authentication, booking state progression, and CSRF attack prevention) and technical security cookies loaded by Razorpay during payment checkout. We do not deploy third-party advertising pixels, tracking beacons, or behavioral marketing trackers. For detailed information, please review our Cookie Policy.

7. Data Retention & Security Measures

We retain personal data strictly for as long as necessary to fulfill the purposes for which it was collected or to comply with statutory legal requirements:

• Transaction & Accounting Records: In accordance with Indian tax and corporate laws, booking invoices, transaction references, and financial records are retained for the statutory period (typically 7 to 8 financial years).
• Birth Details & Chart Notes: Retained in your private account profile to facilitate consultation delivery and follow-up sessions, unless you request erasure. You may request the deletion of your birth data and chart records at any time.
• General Enquiries: Contact form submissions and support correspondence are retained for up to 12 months following resolution before being purged.
• Technical Logs: Server and IP access logs are retained for routine security diagnostics for up to 180 days in compliance with Indian cyber security regulations.

We employ administrative, technical, and physical security measures—including SSL/TLS data encryption in transit, hashed passwords, database access restrictions, and role-based permissions—to protect your personal information against unauthorized access, loss, or disclosure.

8. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 and applicable Indian data protection laws, you enjoy the following rights regarding your personal data:

• Right to Access Information: Request a summary of the personal data processed by us and the processing activities undertaken.
• Right to Correction & Erasure: Request the correction, completion, or updating of inaccurate data, or the deletion of data no longer required for service or legal purposes.
• Right of Grievance Redressal: Avail of our readily accessible grievance redressal mechanism for any privacy-related issues.
• Right to Nominate: Nominate an individual who, in the event of death or incapacity, shall exercise your rights as a data principal.
• Withdrawal of Consent: Where processing is based on consent, withdraw your consent at any time, subject to statutory retention obligations.

9. Grievance Redressal & Complaint Escalation

In compliance with the Digital Personal Data Protection Act, 2023, Rule 3 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Consumer Protection (E-Commerce) Rules, 2020, we have designated a Grievance Officer:

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect service updates, operational changes, or new regulatory requirements. Any modifications will be posted directly on this page with an updated "Last Updated" date. Continued use of our website following changes indicates your acknowledgement of the revised policy.