Privacy Policy

1. Introduction

At Spazia Vedic (vedic.spazia.in), we are committed to protecting your privacy and safeguarding your personal data. This Privacy Policy describes how we collect, use, share, and protect your information when you use our Vedic astrology services.

Our Commitment: We believe privacy is a fundamental right. That's why we follow a privacy-by-design approach - your data stays on your device whenever possible, and we collect only what's essential for service delivery.

2. Data Protection Compliance

We comply with all applicable data protection laws:

GDPR Compliance General Data Protection Regulation (EU)

DPDP Act India's Digital Personal Data Protection Act

CCPA Ready California Consumer Privacy Act compliance

Your Rights:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure (right to be forgotten)
Right to data portability
Right to withdraw consent
Right to object to processing

3. Information We Collect

A. Birth Details (For Chart Calculations)

Date of birth (DD-MM-YYYY)
Time of birth (HH:MM)
Place of birth (city, state, country)
Latitude and longitude coordinates

B. User Account Information

Name and email address
Phone number (optional, for notifications)
Profile preferences and settings
Language preferences (EN/HI/MR)

C. Payment Information

We do NOT store payment information. All payments are processed securely through Razorpay with PCI-DSS compliance. We only receive transaction IDs and payment status.

D. Usage Data

IP address (for rate limiting, not stored long-term)
Browser type and version
Device information
Pages visited and service usage patterns
Time and date of service requests

4. How We Use Your Information

We use your information solely for the following purposes:

Chart Calculations Generate accurate Vedic astrology charts

Service Delivery Provide horoscopes, reports, and guidance

Security Protect against fraud and unauthorized access

Communication Send service updates and notifications

Improvement Enhance services based on usage patterns

Legal Compliance Fulfill legal and regulatory obligations

5. Privacy-First Architecture

Client-Side Computation (Primary Model)

The majority of chart calculations happen directly on your device using the Astronomy Engine 2.1.19. Your birth details never leave your browser unless you explicitly request a server-side calculation.

When Server-Side Calculation Occurs:

Server-side chart computation (requires explicit POST request)
Horoscope generation (daily/weekly/monthly)
Matchmaking and compatibility analysis
Report generation and PDF export

Server-Side Data Handling:

Birth data is never stored on servers
Calculations use temporary, hashed keys
24-hour cache expiration for computed results
No per-user analytics or tracking

6. Data Sharing and Disclosure

We DO NOT sell or rent your personal data to third parties.

When We Share Data:

Payment Processors: Razorpay for payment processing (no birth data shared)
Cloudflare: For DDoS protection and CDN services
Email Providers: Resend API for transactional emails
Legal Requirements: When required by law or to protect rights
Service Providers: Only as data processors under strict contracts

No Ad Networks We don't use Google Ads or ad tracking

No Data Brokers We never buy or sell data

No Analytics Tracking Google Analytics and similar tools are blocked

7. Cookies and Tracking Technologies

We use only essential cookies for functionality:

Session cookies: Maintain login state during your visit
LocalStorage: Save preferences and profile data on your device
Service Worker cache: Enable offline functionality

We do NOT use:

Google Analytics or similar tracking
Advertising cookies
Social media tracking pixels
Cross-site tracking scripts

You can manage cookies through your browser settings.

8. Data Security

We implement industry-standard security measures:

Encryption: TLS 1.3 for all data transmission
Authentication: JWT-based session management
Access Control: Role-based access to sensitive operations
Server Security: Regular security audits and updates
Database Security: Encrypted storage of sensitive fields

Important Note: Since birth details are not stored on servers, even a data breach would not expose personal birth information.

9. Data Retention

Birth Data: Deleted after calculations complete (not stored)

Account Data: Retained until account deletion

Payment Records: Retained for 7 years for tax/compliance purposes

Server Logs: Retained for 30 days maximum

Cache Data: Deleted after 24 hours

Analytics Data: Aggregate-only, no personal identifiers

10. Your Data Rights - How to Exercise Them

Request Access to Your Data:

Request Deletion of Your Data:

Request Data Portability:

Withdraw Consent:

Object to Processing:

Lodge a Complaint:

Contact our Data Protection Officer at privacy@spazia.in or use our DSR form.

We respond to all requests within 30 days as required by GDPR and DPDP Act.

11. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. International Data Transfers

Your data may be processed in India and other jurisdictions. We ensure adequate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) where applicable.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated effective date.

You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

Data Protection Officer:

Email: privacy@spazia.in

General Inquiries: support@spazia.in

Phone: +91 88888 93311

Address: Mumbai, Maharashtra, India

Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with your data protection authority.