Privacy Policy

This Privacy Policy applies to all users of the Astromaitri platform, accessible at astromaitri.com and through our mobile applications. It explains what data we collect, why we collect it, how we use it, who we share it with, and your rights regarding your personal data.

By registering on or using the Platform, you consent to the collection and processing of your personal data as described in this Privacy Policy. You may withdraw consent at any time by contacting us at info@astromaitri.com.

A. Personal Information

• Name, age, gender, and date of birth
• Mobile number and email address
• Photographs and profile images
• Birth time and place of birth (for kundli and astrological analysis)
• Religion, caste, sub-caste, mother tongue, and gotra
• Educational qualifications and professional details
• Family background and marital history
• Location — city and state of residence

B. Sensitive Personal Data (as per SPDI Rules, 2011)

• Financial information: Payment details processed via Razorpay (we do not store card numbers or full banking credentials)
• Biometric data: If face verification is enabled for identity confirmation
• Health information: Only if voluntarily disclosed by the user in their profile

C. Technical & Usage Information

We record technical and usage information every time a device interacts with the Platform — whether or not you are signed in, and whether or not you have an account. This includes:

• Your IP address (stored in full, not only in truncated or hashed form), the approximate country derived from it, device type, device class, operating system, browser, and user-agent string
• A cookie or local-storage identifier and a session identifier that let us recognise the same browser across visits
• Full activity and usage events — the pages you view, the links and features you use, session timing, searches you run, articles you read, sign-ups, logins, profile edits, photo uploads, when an interest or message is sent, when contact details are revealed, and newsletter or plan interest. For each event we record the time, the page path, the referring page, and any campaign parameters (UTM tags) in the link you arrived through. Message content is not stored in this activity log (it is held separately in your conversations); the log records only that a message was sent.
• Crash reports and diagnostics (via Sentry)
• Push notification tokens (for horoscope and match alerts via Firebase)

Inputs to our free tools — including without an account. Our free Kundli and Kundli-Matching tools ask you to type birth details so we can compute a chart. When you use these tools we store the details you enter, on our servers, even if you are not signed in and never create an account. This includes the name(s), date of birth, time of birth, place of birth and its coordinates and time zone, and gender you enter, together with the result we compute (such as a match score and any dosha flags). We link this input to the anonymous browser identifier described above, and — if you later sign in or create an account from the same browser — to your account.

We keep this technical, usage, and free-tool information as described in Section 7 (Data Retention). In short: it is retained for up to 5 years, renewable while a safety or legal purpose still requires it, rather than being deleted on a fixed short-term schedule.

We process your personal, technical, and usage data for the following purposes:

• To provide matrimony matchmaking services and show relevant profile recommendations
• To generate kundli, birth charts, and astrological analysis based on the birth details you enter, including through our free tools
• To power our compatibility matching algorithm
• To send OTP for authentication and verification via SMS through Twilio
• To deliver horoscope notifications and match alerts via Firebase
• To process subscription payments securely via Razorpay
• For safety, fraud prevention, and abuse investigation — we use activity logs, IP addresses, and tool inputs to detect and investigate fake or duplicate profiles, harassment, scams, impersonation, and misuse of the Platform, and to protect our users and our service
• For service improvement and development — we analyse how the Platform and its tools are actually used to fix problems, improve features, and improve the quality of our matching and astrology output
• For marketing and acquisition analytics — we measure which articles, links, and advertising campaigns bring visitors and lead to new members, so we can understand what works and decide where to invest. This includes connecting an anonymous first visit to a later sign-up from the same browser
• To monitor platform performance and errors via Sentry
• To comply with legal obligations and respond to lawful requests under applicable Indian law

We do not sell, rent, or trade your personal data to third parties. We share your information only in the following limited circumstances:

• Razorpay — For payment processing. PCI DSS compliant. Only transaction metadata is shared; full card data is handled exclusively by Razorpay.
• Twilio — For SMS-based OTP authentication and verification.
• Supabase — For database hosting and authentication infrastructure. SOC 2 Type II compliant, hosted on AWS.
• Firebase (Google Cloud) — For push notifications (horoscope alerts, match notifications).
• Sentry — For error monitoring and crash diagnostics. No personally identifiable data is intentionally sent to Sentry.
• PostHog — For product analytics. In addition, we operate our own first-party analytics and activity log on our own infrastructure (Supabase); this first-party data is described in Section 2C and is not shared with third parties for their own purposes.
• Law Enforcement: Where required by applicable Indian law, court order, or to protect the rights, safety, or property of Astromaitri and its users.

All third-party processors are bound by Data Processing Agreements and are contractually required to protect your data.

Lawful disclosure & safety. Separately from the service providers listed above, we may access, preserve, and disclose information we hold about you — including your account details, activity logs, IP addresses, and the inputs you entered into our tools — where we believe in good faith that doing so is necessary to: (a) comply with a law, regulation, legal process, or enforceable governmental or court request; (b) enforce our Terms of Service, including investigating potential violations; (c) detect, prevent, or address fraud, security, safety, or technical issues; or (d) protect the rights, property, or safety of Astromaitri, our users, or the public. This access is limited to our administrators and authorised personnel and is not exposed to other users of the Platform.

We implement reasonable security practices and procedures as required under the SPDI Rules, 2011, including:

• SSL/TLS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Role-based access controls — only authorized personnel can access personal data
• Regular security audits and vulnerability assessments
• Secure authentication via Supabase (including multi-factor support)

Data is stored on Supabase servers hosted on AWS infrastructure with enterprise-grade security, redundancy, and backup systems.

While we employ industry-standard safeguards, no system is completely immune to security risks. We encourage you to use a strong, unique password and report any suspected unauthorized access immediately to info@astromaitri.com.

Under Indian law (SPDI Rules, 2011; DPDP Act, 2023) and GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request deletion of your account and associated personal data.
• Right to Withdraw Consent: Withdraw your consent for non-essential data processing at any time.
• Right to Data Portability: Receive your personal data in a commonly used, machine-readable format.
• Right to Object: Object to processing of your data for direct marketing or profiling purposes.

To exercise any of these rights, contact us at info@astromaitri.com, or visit our /delete-account page.

How we handle access requests. When you ask for a copy of your data, we fulfil it by generating a full data export — a machine-readable file containing the personal, profile, activity, and tool-input records we hold that are linked to you.

Deletion — closure vs. formal erasure. We offer two paths. Account closure (via our /delete-account page) is the default: we remove your profile and the personal information that identifies you, and we de-identify your historical activity and tool records — we sever the link between those records and your identity so they can no longer be traced back to you through your account. Separately, you may make a formal erasure request, which we honour with actual deletion of the personal data we hold about you — the records are erased, not merely de-identified. The only exceptions are records subject to a live safety or complaint investigation or a legal obligation (a legal hold), and the payment records the law requires us to keep (see Section 7); these are retained until that purpose concludes. If you are unsure which you want, contact us and we will review the request against our legal obligations.

• Active account data: Retained for as long as your account remains active.
• Activity logs and usage events: Retained for up to 5 years, renewable while a safety or legal purpose still requires it. Our activity and usage log is append-only and is not deleted on a fixed short-term schedule; it is kept for this bounded period and de-identified when you close your account. See the account-deletion note below for what happens to these records when you close your account.
• Free-tool inputs: The birth details and results you enter into or generate with our free Kundli and Kundli-Matching tools (including when used without an account) are retained for up to 5 years, renewable while a safety or legal purpose still requires it, rather than being deleted on a fixed short-term schedule.
• On account deletion: Closing your account (via /delete-account) removes the personal information that identifies you and de-identifies your historical activity and tool records — we sever the link to your account rather than keeping it attached. A formal erasure request instead results in actual deletion of the personal data we hold about you, except records under a legal hold or otherwise required by law. (See Section 6 for the full explanation of what deletion does.)
• Payment records: Retained for 7 years as required under the Income Tax Act, 1961 and GST laws.
• Legal hold: Where required by law or pending legal proceedings, data may be retained beyond the periods described above.

Astromaitri uses the following types of cookies and tracking technologies:

• Essential Cookies: Required for login sessions, security tokens, and core platform functionality. Cannot be disabled without affecting platform access.
• Analytics Cookies & Identifiers: Used by our own first-party analytics and by PostHog and Google Analytics to understand how the Platform is used. Our first-party analytics associate usage with a browser identifier and, where applicable, your account, as described in Section 2C.
• Notification Tokens: Firebase Cloud Messaging tokens stored locally for push notification delivery.

You can disable non-essential cookies through your browser settings. Note that disabling essential cookies may prevent you from accessing certain features. For mobile apps, you may manage notification permissions through your device settings.

Astromaitri is strictly not intended for users under 18 years of age. We do not knowingly collect, process, or store personal data from minors. If we become aware that a user under 18 has registered on the Platform, we will immediately suspend the account and delete all associated data.

If you believe a minor has registered on our Platform, please notify us at info@astromaitri.com immediately.

Our Platform may contain links to third-party websites, services, or applications. Astromaitri is not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit through links on our Platform.

Your personal data may be processed and stored outside of India, on servers operated by our service providers (including AWS and Google Cloud infrastructure). We ensure that such transfers are protected through:

• Contractual safeguards — Data Processing Agreements with all international processors
• Adequacy standards consistent with the SPDI Rules, 2011 and applicable international frameworks
• Encryption of data during transfer and at rest

As required under Rule 5(9) of the SPDI Rules, 2011 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the details of our Grievance Officer are:

We reserve the right to update this Privacy Policy at any time. We will notify you of significant changes via email or a prominent in-app notification with at least 30 days' advance notice before the changes take effect.

The “Last Updated” date at the top of this page indicates when the Privacy Policy was most recently revised. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.

For any privacy-related queries, data access requests, or concerns, please reach out: