Shivganai Technologies Private Limited, CIN U62013HR2024PTC125758, at 828, Sector 21C, Faridabad, Haryana 121001, India, determines why and how personal data are processed for ShubhRaashi. This Policy covers the app, website and related services intended primarily for India.

We process: phone number and OTP/authentication records; optional name; date, time and place of birth; family-profile details; voice recordings and transcripts; questions, outputs and consultation history; payment/recharge/refund metadata; support communications; device, IP, language, app version, security and diagnostic events; and permission status.

We use the minimum data reasonably needed to authenticate and secure accounts; transcribe questions and generate astrology outputs; maintain user-chosen history; process payments, invoices and refunds; provide support; prevent fraud and security incidents; diagnose failures; send essential balance/expiry/security messages; comply with law; and conduct separately disclosed optional analytics or research.

Birth details, voice and transcripts are personal information and are treated as high sensitivity by our internal controls. They are not automatically “sensitive personal data” under the current SPDI Rules; a voice template used for identity/authentication may be biometric information. We do not create a voiceprint for authentication. [COMPANY TO CONFIRM].

Before collecting birth details or recording audio, we give a clear just-in-time notice describing the data, purpose, provider and retention and obtain an affirmative action. We record consent and notice version. Core-service consent is separate from optional marketing, analytics using personal data, and model-training consent.

You may withdraw optional consent in Account > Settings > Privacy or through the contact below, as easily as it was given. [COMPANY TO CONFIRM: path and processor propagation]. Withdrawal does not invalidate earlier lawful processing; a feature may stop if its data are essential. Account deletion is a separate choice.

When you press the microphone control, audio is sent to Sarvam AI for [COMPANY TO CONFIRM: transcription only or transcription plus response generation]. We do not record in the background. Identifiable raw audio is deleted from our active systems and our processor is required to delete it within 72 hours after successful processing. If processing fails, deletion occurs within 72 hours after detection. A narrow exception applies to a legal preservation order or a user-authorised support investigation; the audio is then restricted and deleted when the purpose ends.

[COMPANY TO CONFIRM: deletion applies to queues, replicas, observability tools, processor storage and backups; provide Sarvam contract/SLA and audit evidence]. We do not call audio anonymous merely because obvious identifiers are removed.

Transcripts are stored only if consultation history is enabled. You can delete individual consultations. Unsaved/account-linked transcripts are automatically deleted after [COMPANY TO CONFIRM: 12 or 24 months], unless needed for an unresolved complaint, fraud/security investigation or law. We do not use identifiable audio, transcripts or birth profiles to train a general-purpose or third-party AI model without separate, specific opt-in consent.

Accounts are adult-only. Another adult’s profile requires their permission or lawful authority. A minor profile may be created only by a verified parent/lawful guardian for the disclosed astrology purpose; the minor may not independently use voice consultation. [COMPANY TO CONFIRM: verification method]. We do not track or behaviourally monitor minors or direct targeted advertising at them. The adult can delete a minor profile separately.

We share only necessary data with: Sarvam AI for [confirmed purpose]; PhonePe for payments/refunds; DigitalOcean for [hosting/storage]; Google Analytics for Firebase for [confirmed event fields]; Firebase Crashlytics for [confirmed diagnostic fields]; and [COMPANY TO CONFIRM: every LLM, TTS, OTP/SMS, notification, email, support, monitoring and backup provider].

Provider roles, processing countries and retention: [COMPANY TO CONFIRM: complete table]. No birth details, raw audio, transcript or question content may be sent to analytics/crash tools unless specifically disclosed and lawfully consented to. Providers acting for us are contractually limited by purpose, confidentiality, security, subprocessor, incident, rights-assistance and deletion obligations. We do not sell or rent personal data.

Some processing may occur outside India in [COMPANY TO CONFIRM: countries]. We apply current Indian transfer requirements and comply with any government restriction under the DPDP framework when in force.

• Raw identifiable audio: maximum 72 hours after successful processing/failure detection, subject to the narrow exceptions above.

• Account and birth profiles: while the account is active, then until verified deletion completes.

• Transcripts/history: [COMPANY TO CONFIRM: default period], or until user deletion/account deletion, subject to a specific hold.

• Authentication/OTP records: [COMPANY TO CONFIRM: period].

• Support, refund and dispute files: [COMPANY TO CONFIRM: period based on limitation and operational need].

• Books, invoices and tax records: the period required for the applicable record, including Companies Act 2013 s 128(5) where applicable.

• ICT-system logs covered by CERT-In Direction iv: rolling 180 days, securely within India; longer only for a defined investigation/legal need.

• Backups: [COMPANY TO CONFIRM: maximum cycle]; deletion tombstones are reapplied on restore.

• Irreversibly anonymised statistics: may be retained where re-identification is not reasonably possible.

We use risk-appropriate safeguards including [COMPANY TO CONFIRM: encryption at rest/in transit, key management, access control, audit logs, secure development, vulnerability management, backup and vendor controls]. No system is completely secure.

We maintain an NTP-traceable clock, CERT-In point of contact, India-retained ICT logs and a process to report listed cyber incidents to CERT-In within six hours of noticing or being informed, as required by the CERT-In Directions. From 14 May 2027, we will also provide DPDP breach notices to affected persons and the Data Protection Board in the form and time then required. Notices use the app, SMS, email or another effective channel.

You may request access/summary, correction, completion, updating, erasure, consent withdrawal, grievance redressal and nomination through [COMPANY TO CONFIRM: in-app paths] or the contact below. We provide review/correction and withdrawal rights under current applicable law and voluntarily operate the other listed request channels in preparation for the DPDP provisions scheduled for 14 May 2027. We verify identity proportionately and respond within [COMPANY TO CONFIRM: published period, no more than applicable law permits].

Use Account > Settings > Delete Account or www.shubhraashi.com/delete-account. Deletion does not require surrender of unused paid value; the choices in the Terms apply. We delete or irreversibly anonymise account-linked data and instruct processors, subject to defined tax, dispute, fraud/security and legal holds. We confirm completion and explain retained categories.

The website uses necessary cookies for security/core functions. Optional analytics operates only according to the choice displayed and actual consent configuration. Promotional messages require applicable permission and include an opt-out; essential transaction, security and policy messages are not marketing.

We update this Policy prospectively, provide reasonable advance notice of material changes and obtain fresh consent before a materially different consent-based purpose where required. Continued use alone is not fresh consent.

For privacy-related questions, support requests, or data rights requests, contact:

Company: Shivganai Technologies Private Limited

Brand: ShubhRaashi

Date of Incorporation: 24 October 2024

Registered Office:

828, Sector 21C Faridabad, Haryana – 121001 India

CIN: U62013HR2024PTC125758

Support Email: shubhraashi35@gmail.com

Grievance Officer: Kunal Bhardwaj Email: shubhraashi35@gmail.com

This Privacy Policy is intended to comply with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, and applicable platform requirements, including Google Play Data Safety disclosures.