गोपनीयता नीति

What we collect

When you use this website or book a reading, we collect the following categories of personal data.

• Identity and contact data: your full name, email address and phone number.
• Birth data: date, time and place of birth. For Kundli Match Making we also collect the same details for your partner, with that person's consent.
• Payment data: billing amounts and transaction reference numbers. Card numbers, CVV codes and bank account details are handled exclusively by Razorpay and are never transmitted to or stored on our systems.
• Technical data: browser type and IP address at the moment of form submission. This is used solely for fraud prevention and is deleted after 90 days.

We do not collect data from minors. Our services are directed at persons aged 18 and above.

How we use your data

• Chart computation: birth date, time and place are essential inputs to compute a Vedic birth chart. Without them the service cannot be delivered.
• Service delivery: we use your contact details to send you your reading and to communicate about your booking.
• Billing: we use your name and email to issue a tax invoice and process payment via Razorpay.
• Tax compliance: invoices and related records are retained for six years as required by section 36 of the Central Goods and Services Tax Act, 2017.
• Fraud prevention: IP address and browser type are logged at intake to detect and block fraudulent submissions.

Your data is used only by Abhishek Soni to deliver and improve your reading. It is not shared with third parties for marketing, not sold to any data broker, and not used to train any artificial intelligence model.

We will not use your data for any purpose materially different from the one for which it was collected without obtaining fresh consent from you.

Your account

This website offers an optional account. When you sign in, your profile, your saved charts and the readings prepared for you are stored in your account, visible only to you and the astrologer. You can export a copy of your data or erase your account at any time, as described under Your rights below.

Where it goes, sub-processors

We engage the following sub-processors, who may receive limited personal data as necessary to deliver the service.

• Frappe-hosted CRM, receives your name, email, phone and birth data to store your reading record and manage correspondence. Hosted on Indian servers.
• Razorpay Payments Private Limited, receives your name, email, phone and the transaction amount to process payment and issue a receipt. Razorpay's own privacy policy governs their handling of payment data.
• Resend, receives your email address and reading content when we send a transactional email. Used as a fallback when WhatsApp delivery fails.
• WhatsApp Business API, receives your phone number and reading content to deliver your reading over WhatsApp, which is the primary delivery channel.

No data is transferred outside India except as strictly required by Resend's infrastructure. All processors are bound by data processing agreements.

How long we keep it

• Chart and reading data: retained for the lifetime of your relationship with us, and until you request erasure.
• Invoices and billing records: retained for six years from the date of the transaction, as required by the CGST Act, section 36.
• Technical data (IP, browser): deleted after 90 days.
• Marketing consent records: retained until you withdraw consent, then archived for three years to demonstrate compliance.

Your rights under the DPDP Act 2023

The Digital Personal Data Protection Act 2023 grants you the following rights in relation to the personal data we hold about you.

• Access: a summary of the personal data we hold about you and how it is processed.
• Correction: to have inaccurate or incomplete personal data corrected or completed.
• Erasure: to have your personal data erased, subject to our legal retention obligations above.
• Grievance: to have your grievances heard and addressed within 30 days, per section 13 of the DPDP Act.
• Nomination: to nominate a person who may exercise your data rights in the event of your death or incapacity.

To exercise any of these rights, file a request through the grievance page or email hello@abhisheksoni.in. We will verify your identity and respond within 30 days.

Cookies and tracking

We use first-party cookies only, and only to remember your language and theme so the site feels yours on your next visit.

We do not use analytics, tracking pixels, third-party cookies or advertising beacons, and we do not keep an event log of your browsing. Nothing about your visit is sent to any analytics or advertising service.

You can choose to use the site without preference cookies from the cookie notice. The site still works; it simply will not remember your language and theme.

Consent

We collect your explicit consent at intake before processing your personal data. You may withdraw consent for marketing communications at any time by replying STOP to any WhatsApp message or email from us.

Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal, nor processing carried out on other lawful grounds such as billing or tax compliance.

Cross-border transfer of data

Our backend CRM and calculation engine are hosted on Indian virtual private servers. Personal data does not leave India, except where Resend's email infrastructure routes a transactional email through servers outside India. We are monitoring the DPDP Act's cross-border transfer rules (section 16) and will update this notice as those rules are notified by the Central Government.

Children

This website and its services are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please notify us immediately at hello@abhisheksoni.in and we will delete it promptly.

Data Protection Officer

For this scale of practice, Abhishek Soni serves as both Grievance Officer and the primary contact for data questions. We will appoint a separate Data Protection Officer if and when the practice meets the threshold for classification as a Significant Data Fiduciary under section 10(1) of the DPDP Act 2023.

Grievance Officer

As required by section 13 of the Digital Personal Data Protection Act 2023:

• Name: Abhishek Soni
• Address: Nagpur, Maharashtra, India
• Email: hello@abhisheksoni.in
• Response time: within 30 days of receipt of a grievance

Changes to this notice

Material changes, those that affect your rights or the way we use your data, will be notified to you by email and by a banner on this website displayed for at least 30 days before the change takes effect.

Non-material changes, such as corrections of typographical errors, may be made without prior notice. The "Last updated" date at the top of this page always reflects the most recent change.