Privacy Policy

The short version

We collect what we need to draw your chart, answer your questions, take your money once, and deliver what you bought. Nothing more.

We do not sell your personal data. We do not use your birth details to target you with advertising.

You can see your data, correct it, take it with you, and delete your account from inside the app or from this website.

Who we are

Xalen Technology Private Limited ("we", "us") is the Data Fiduciary for GrahaGuru, GrahaGuru Shop and GrahaGuru Mall. Our registered address and GSTIN are listed at the end of this policy.

This policy covers the GrahaGuru website at grahaguru.in, the GrahaGuru mobile apps, and the Shop and Mall surfaces. Where a surface has extra rules, we say so.

The Astro wallet, Shop store credit and a Mall transaction are separate records on separate planes. Value, eligibility, a refund or a transaction on one surface does not create or change value, eligibility, a refund or a transaction on another, and a balance shown on one surface is not proof of a balance on another.

What we collect

You give us some of this. Some of it is created when you use the service.

• Account details: your name, email address, phone number, and the sign-in method you chose.
• Birth details: date of birth, time of birth and place of birth. We need these to compute a chart. They are the reason the service works.
• What you ask: your questions to Vedika AI, your saved chats, and the reports and readings we generated for you.
• Photographs you upload for a palm reading, and the reading produced from them.
• Purchase records: what you bought, when, the amount, the tax charged, the invoice, and the store or gateway reference. We never see or store your full card number or UPI credentials.
• Wallet ledger: every credit and debit against your balance, and whether the credit was paid or promotional.
• Delivery details for physical orders: the address, phone number and pincode you enter, and the courier's tracking events.
• Device and usage data: app version, device model, operating system, crash reports, language, and which screens you opened.

Why we use it

We only process personal data for a lawful purpose you have consented to, or where the law lets us process it without consent.

• To deliver what you asked for: charts, readings, answers, reports, orders.
• To take payment, issue a GST invoice, and keep the accounting records the law requires us to keep.
• To keep accounts safe, stop fraud and abuse, and enforce our Terms.
• To answer your support messages and your grievances.
• To fix crashes and make the product work better.
• To send you service messages. Marketing messages only if you asked for them, and you can stop them at any time.

Vedika AI and astrology processing

Vedika AI is our astrology assistant. When you ask it something, we send the question and the chart context it needs to our AI providers so that an answer can be produced. Full details are in the Consumer AI Privacy Notice.

Answers, readings and reports are generated by software. They are for guidance and reflection. They are not medical, legal, financial or psychiatric advice, and they are not a prediction of a guaranteed outcome. The Generative AI Disclosure explains how we label them.

We do not use your questions or your birth details to train a public foundation model.

Who we share it with

We share the minimum needed, with processors bound by contract to use it only on our instructions.

• Astrology and AI engines that compute charts and generate text.
• Payment processors and the app stores, to take payment and verify a purchase.
• Couriers and logistics partners, for physical orders only.
• Cloud hosting, email delivery, crash reporting and analytics providers.
• Government authorities, courts and law enforcement where a valid legal request requires it.

Where your data lives

GrahaGuru data is hosted in India, in the Asia Pacific (Mumbai) region. Some processors operate outside India; where that happens we transfer only what that processor needs, and only to countries the Central Government has not restricted under section 16 of the Digital Personal Data Protection Act, 2023.

How long we keep it

We keep your account data while your account is open. When you delete your account we erase or anonymise personal data within 30 days, except records we are legally required to retain.

Invoices, tax records and payment evidence are kept for eight years, because the Companies Act, 2013 and GST law require it. A retained invoice is not a live account.

Support tickets and grievance records are kept for three years so that we can show how a complaint was handled.

Keeping it safe

Data is encrypted in transit and at rest. Access is restricted to staff who need it, and administrative access is logged.

If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal, as required by section 8(6) of the Digital Personal Data Protection Act, 2023 and the rules made under it.

Your rights

As a Data Principal under the Digital Personal Data Protection Act, 2023 you can ask us to do the following. Write to [email protected] and we will respond within 30 days.

Use Delete account in the GrahaGuru app Profile, or the Account and Data Deletion page on this website, to erase your account yourself.

• Get a summary of the personal data we hold about you and who we shared it with.
• Correct, complete or update anything that is inaccurate.
• Erase personal data we no longer need for the purpose you gave it for.
• Nominate another person to exercise these rights if you die or become incapable.
• Withdraw a consent you gave. Withdrawing consent stops future processing; it does not undo processing that already happened, and some features stop working without the data they need.
• Raise a grievance with our Grievance Officer, and, if we do not resolve it, complain to the Data Protection Board of India.

Children

GrahaGuru services are for people aged 18 or older. The products are not directed to children.

GrahaGuru is for adults. You must be 18 or older to hold an account. We do not knowingly create accounts for children or process the personal data of a child, and we do no behavioural advertising or tracking directed at children. If you believe a child holds an account, write to [email protected] and we will delete it.

Changes to this policy

If we change this policy in a way that materially affects you, we will tell you in the app or by email before the change takes effect. The version and effective date are shown on this page.

Contact and grievances

Privacy questions and Data Principal requests: [email protected].

Grievance Officer: Vansh Joshi, Grievance Officer, [email protected], +91 89658 15111. Xalen Technology Private Limited, A704, Gagan Unnati Co Op Hsg Soc, Katraj Kondhwa Road, Pune, Maharashtra 411048, India. GSTIN 27AAACX6117C1ZL.

We acknowledge every grievance within 24 hours and resolve it within 15 days, as required by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.