🔐 Privacy Policy
1. Who We Are
omastroai.com ("we", "our", "the Platform") operates https://www.omastroai.com/, a Vedic Astrology software-as-a-service (SaaS) plugin and web application. The Platform provides AI-powered Kundali (birth chart) generation, Panchang, Rashifal, AI Jyotish chat, Kundali Milan (horoscope matching), Muhurat, and related Vedic astrology tools.
For privacy-related queries, contact us at: privacy@www.omastroai.com
2. Information We Collect
2.1 Account Registration Data
- Name: Your display name used within the Platform.
- Email address: Used for authentication, password recovery, and service notifications.
- Password: Stored as a bcrypt hash. We never store plain-text passwords.
- Google OAuth tokens: If you sign in with Google, we receive your email and public profile. We do not receive your Google password.
- Phone number: Optional, collected only if you provide it for OTP login.
2.2 Birth & Astrological Data (User-Provided)
- Date of Birth (DOB): Used exclusively to calculate astrological charts.
- Time of Birth (TOB): Used for ascendant and house calculations.
- Place of Birth: Used to determine geographic coordinates and time zone for accurate planetary calculations.
- Gender: Used in Kundali generation and gender-specific astrological interpretations.
This data is stored in our database only when you explicitly save a Kundali. It is automatically deleted after 30 days of inactivity.
2.3 AI Chat Data
- Messages you send to our AI Jyotish system, including questions and conversation context.
- AI-generated responses and astrological interpretations.
- Session metadata (mode, language, timestamps).
All AI chat sessions are automatically deleted after 30 days. You may delete your chats manually at any time from your Dashboard.
2.4 Usage & Technical Data
- IP address (for rate limiting and fraud prevention only).
- Browser type and operating system (from User-Agent headers).
- Pages visited, features used, timestamps of activity.
- Device type (mobile/desktop) for UI adaptation.
2.5 Payment Data
If you purchase a membership, payment processing is handled by third-party providers (such as WooCommerce, Razorpay, or Stripe). We do not store your credit card numbers or banking details on our servers. We receive only transaction confirmation and subscription status.
3. How We Use Your Information
- Providing the Service: Computing kundalis, delivering AI responses, generating panchang, rashifal, and muhurat data.
- Authentication: Verifying your identity when you log in.
- Personalisation: Remembering your language preference, saved charts, and chat history.
- Membership & Billing: Managing subscriptions, tracking AI chat quotas, processing credits.
- Security: Rate limiting, fraud detection, session management.
- Compliance: Responding to legal requests where required by applicable law.
- Support: Responding to tickets and bug reports you submit.
We do not use your data for advertising profiling, third-party data sales, or any purpose unrelated to the Vedic Astrology service.
4. Legal Basis for Processing (GDPR)
- Contract: Processing necessary to fulfil our service to you (account, kundali computation, AI chat).
- Legitimate Interests: Security, fraud prevention, service improvement.
- Consent: For optional features such as marketing notifications (if enabled).
- Legal Obligation: Complying with applicable laws.
5. Data Retention & Auto-Deletion
- Account data (name, email) is retained until you delete your account.
- You can delete your account and all associated data at any time from Dashboard → Security → Delete Account.
- You can delete only your chats/kundalis (keeping your account) from Dashboard → Delete My Data.
- Payment records may be retained for up to 7 years for legal/accounting compliance.
- Anonymised aggregate statistics may be retained indefinitely (no personal identifiers).
6. Data Sharing & Third Parties
We share data only as follows:
- Google OAuth: If you use "Sign in with Google", your authentication is handled by Google LLC under their Privacy Policy.
- Google Gemini AI API: Your chat messages are processed by Google's Gemini API to generate astrological responses. Google processes this under their API Terms of Service. We do not share your name, DOB, or email with Google.
- Payment Processors: Transaction data shared with WooCommerce/Razorpay/Stripe for billing.
- Hosting Provider: Our web server host stores data as part of website hosting. They are contractually obligated to protect it.
- Legal Authorities: We may disclose data if required by court order, law enforcement request, or applicable legal obligation.
We do not sell, rent, or trade your personal data to any third party.
7. Cookies & Local Storage
- Session Cookie: A secure, HTTP-only cookie for maintaining your login session.
- Language Preference: Stored in a cookie/localStorage to remember your language choice (Hindi/English).
- Theme Preference: Dark/light mode preference stored in localStorage.
- Guest Chat Sessions: Temporary chat data for non-logged-in users stored in sessionStorage (cleared when tab closes).
We do not use third-party advertising cookies. If Google OAuth is enabled, Google may set its own cookies subject to Google's Cookie Policy.
8. Your Rights
- Access: Request a copy of your personal data (available via Dashboard → Export My Data).
- Rectification: Update your name, email, or other details via Dashboard → Profile.
- Erasure (Right to be Forgotten): Delete all data via Dashboard → Delete Account or by contacting us.
- Portability: Export your data as JSON via Dashboard → Export My Data.
- Restriction: Request we restrict processing of your data in certain circumstances.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw consent for optional features at any time.
To exercise these rights, email us at privacy@www.omastroai.com or use the in-app controls in your Dashboard. We will respond within 30 days.
9. Children's Privacy
Our Platform is not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us immediately and we will delete it.
10. International Data Transfers
Our servers may be located outside your country. If you are in the EU/EEA, your data may be transferred to countries not covered by an EU adequacy decision. We take appropriate measures (such as standard contractual clauses) to protect transferred data.
11. Security
- Passwords stored using bcrypt hashing (industry standard).
- Session tokens are secure, HTTP-only, and expire after inactivity.
- API keys are stored server-side and never exposed to the browser.
- Rate limiting applied to all sensitive endpoints.
- Regular security reviews of the codebase.
No system is 100% secure. In the event of a data breach, we will notify affected users as required by applicable law.
12. Changes to This Policy
We may update this Privacy Policy. The "Last updated" date at the top of this page indicates the most recent revision. Significant changes will be notified via email or in-app notification. Continued use of the Platform after changes constitutes acceptance of the updated policy.
13. Contact Us
For any privacy concerns, data requests, or questions about this policy:
- Email: privacy@www.omastroai.com
- Website: https://www.omastroai.com/support