Privacy Policy

Jyotastro (“Jyotastro”, “we”, “us”) provides Vedic kundli (birth chart) generation, Ashtakoot Guna Milan match making, daily rashi predictions, and an AI astrologer (coming soon). This policy explains what information we collect when you use jyotastro.com, why we collect it, and what choices you have. By using Jyotastro, you agree to the practices described here and in our Terms of Service.

1. Information we collect

Account information. When you sign up, we collect your name, email address, and a password (stored only as a bcrypt hash, we never see or store your plain-text password).

Birth details. Generating a kundli or a match making report requires a name, gender, date of birth, time of birth, and place of birth (converted to latitude, longitude, and UTC offset for the astronomical calculations). Match making requests require these details for two people. You don’t need an account to use match making or daily predictions; an account is only required if you want to save a kundli for later.

Usage and device data. Like most websites, our hosting and network providers (Google Cloud Run, Cloudflare) generate standard server logs (IP address, browser type, timestamps) as a normal part of serving web traffic.

Analytics. We use Google Analytics 4 and Microsoft Clarity to understand how visitors use our public pages (traffic, popular pages, session recordings/heatmaps to spot usability issues). These tools are deliberately excluded from your dashboard and saved kundli pages, so your personal birth data and saved charts are never included in analytics or session recordings, only anonymized behavior on public marketing and tool pages is measured. Analytics also does not run on `localhost` during development.

Usage statistics. Separately, Jyotastro keeps its own first-party record of which pages are opened and which buttons and links are clicked, so we can see which features are used most. It stores the page’s route (for example “/kundli/:id”, never the chart itself), the button or link label, your device type, a random visitor ID kept in your browser’s local storage, and, if you are logged in, your account ID. On logged-in pages we never record link text, so names on your saved charts are not captured. This data stays on our own database, is never shared with third parties, and is deleted automatically after 180 days.

2. How we use your information

• To generate your kundli, match making report, or daily prediction using real astronomical calculations combined with traditional Vedic astrological methods.
• To create and secure your account (authentication uses a signed session token stored in an httpOnly cookie, which JavaScript on the page cannot read).
• To save and let you retrieve your kundli charts from your dashboard.
• To understand aggregate usage of our public pages and improve the product, as described under Analytics above.
• To communicate with you about your account, if we introduce features like email notifications in the future.

We do not sell your personal data, and we do not use your birth details or saved kundlis for third-party advertising.

3. Cookies

We use a single httpOnly session cookie to keep you logged in, it holds a signed token, not your password, and can’t be read by JavaScript. If you accept analytics, Google Analytics 4 and Microsoft Clarity may also set cookies on public pages to distinguish visitors; you can block these through your browser’s cookie or tracking-protection settings without affecting your ability to log in or use the site.

4. Third-party services we use

• MongoDB Atlas, database hosting for accounts and saved kundlis.
• Google Cloud Run, application hosting.
• Cloudflare, network routing, DNS, and security.
• Google Analytics 4 and Microsoft Clarity, traffic and usability analytics on public pages only.
• Razorpay (if/when paid features launch), payment processing; we would never store your full card details ourselves.

Each of these providers processes data under their own privacy terms as our service providers, not as independent owners of your data.

5. Data security

Passwords are hashed with bcrypt before storage and are never logged or stored in plain text. Session tokens are signed, stored in a secure httpOnly cookie, and all traffic to Jyotastro is served over HTTPS. No method of transmission or storage is 100% secure, but we take reasonable, industry-standard steps to protect your information.

6. Data retention and deletion

We retain your account and saved kundli data for as long as your account is active. You can delete any individual saved kundli at any time from your dashboard. To delete your account and all associated personal data entirely, email us at privacy@jyotastro.com and we will process the request within 30 days. Aggregated, de-identified analytics that cannot be traced back to you may be retained for longer, for product improvement purposes.

7. Your rights

You can request access to, correction of, or erasure of your personal data at any time by contacting privacy@jyotastro.com. If you are located in India, these rights are consistent with those available to you as a data principal under the Digital Personal Data Protection Act, 2023, and Jyotastro acts as the data fiduciary for the personal data you provide.

8. Children’s privacy

Jyotastro is intended for users aged 18 and older. Match making, in particular, is built around adult relationship and marriage compatibility. We do not knowingly collect personal data from anyone under 18; if you believe a minor has created an account, contact us and we will remove it.

9. International users

Jyotastro is operated from and primarily serves users in India, and your data is processed on infrastructure located in India (Google Cloud Run, Mumbai region, and MongoDB Atlas). If you access Jyotastro from outside India, your information will be transferred to and processed in India.

10. Changes to this policy

We may update this policy as Jyotastro’s features change. We’ll update the “Last updated” date above when we do; continued use of Jyotastro after a change means you accept the updated policy.

11. Contact us

Questions about this policy or your data can be sent to privacy@jyotastro.com.