Section 01
Who we are
Kaalveda is operated by Webliska.AI (the data controller). Our registered office is in India. The contact for privacy matters is [email protected].
Section 02
What we collect
Account: email address, password hash, language preference, account settings. Charts: DOB, time of birth, place of birth, name (where applicable). Computed outputs: chart data, PDF metadata. Payment: handled by Stripe and Razorpay — we do not store card numbers; we store transaction IDs and amounts. Usage: page views and feature usage, measured through Google Tag Manager.
Section 03
Why we collect it
To compute your charts (chart inputs are required). To bill you (payment metadata, retained 7 years for tax compliance). To send transactional emails (account verification, PDF delivery, subscription renewals). To improve the product (aggregate, anonymised usage analytics). We do not use chart data for advertising or third-party marketing.
Section 04
Retention periods
Chart inputs and outputs: for the life of the account, unless you delete a chart or delete your account. Payment records: 7 years (tax compliance). Email logs: 90 days. Analytics: aggregate only, no individual records. Deleted account: personally identifying records removed within 30 days; payment metadata retained per tax law.
Section 05
Who has access
Inside the company: the engineers maintaining the engine and the support team handling tickets. Sub-processors: PayU, PayTM, Razorpay and Stripe (payments), Amazon Web Services (hosting and, via SES, transactional email), and Google (Tag Manager analytics and AdSense advertising — see section 8). Each is contractually bound to confidentiality and data protection. We do not share your chart data — your date, time or place of birth, or the readings computed from them — with any advertising partner. We do not sell data to brokers.
Section 06
No data sale
We do not sell personal data. We do not rent personal data. We do not hand your account details or your chart inputs to anyone for marketing. This is not the same as saying no third party ever sees anything: the pages you read carry Google advertising, and Google receives the ordinary request information any embedded script receives — your IP address, the page URL, your browser. That is described in section 8. It is separate from, and never joined to, your account or your birth details.
Section 07
Cookies
Essential cookies (session, CSRF token, authentication): set without consent because the site cannot function without them. Functional cookies (language preference, settings): set without consent because they remember your choices and contain no identifiers. Analytics cookies (Google Tag Manager): set on every page; there is no consent banner on this site today, so your browser settings are the control that works. Advertising cookies: set by Google on pages that carry ads — see section 8, which explains what they do and how to switch personalised advertising off. See /cookies for the full list.
Section 08
Advertising
Parts of this site are paid for by advertising. We use Google AdSense, which means Google and its partners serve ads on our pages and use cookies to do it. Where Google shows you a personalised ad, that is based on your previous visits to this and other websites — not on anything you have told us. Three things are worth stating plainly. First, your chart data never reaches an advertiser: your date, time and place of birth, the readings computed from them, and your account details stay with us and our own sub-processors. Second, ads do not appear on your account dashboard, the astrologer portal, or any checkout page — those show your own birth details or a payment in progress and are no place for a third-party script. Third, you can turn personalised advertising off entirely at google.com/settings/ads, which works across every site using Google ads, not just this one; you will still see ads, they will simply be untargeted. Google's own explanation of what it collects when it serves an ad is at policies.google.com/technologies/partner-sites.
Section 09
Your rights (GDPR / DPDPA)
EU GDPR and India's Digital Personal Data Protection Act 2023 grant you: right of access (request a copy of your data), correction (fix errors), deletion (remove the account, subject to legal retention for payment records), portability (export in machine-readable format), withdrawal of consent, and the right to lodge a complaint with your supervisory authority. Email [email protected] to exercise any right; we respond within 30 days.
Section 10
International transfers
Kaalveda is operated from India. Charts may be processed by sub-processors in the US (Stripe, Amazon Web Services, Google). Transfers are governed by standard contractual clauses and the relevant adequacy decisions. EU/UK residents: contact privacy@ for the safeguards in place for any specific transfer.
Section 11
Children
Kaalveda is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has registered, email [email protected] and we will remove the account.
Section 12
Security
Data at rest is encrypted with industry-standard ciphers. Data in transit uses TLS 1.3. Access to production data is restricted to engineering staff, logged, and audited. Passwords are hashed with bcrypt; we never store plaintext passwords. Payment data never touches our servers — Stripe and Razorpay tokenise at the browser.
Section 13
Breach notification
If we discover a personal data breach that is likely to result in risk to your rights, we will notify you and the relevant supervisory authority within 72 hours, per GDPR Article 33–34 and DPDPA Section 8.
Section 14
Changes
We may update this Policy. Material changes require 30 days' advance notice via email to active accounts. The "Last updated" date at the top of this page is always current.
Section 15
Contact
Privacy matters: [email protected]. Data subject requests: [email protected] with subject "Data subject request — [right]". Data protection officer enquiries: [email protected].
Questions or feedback about this document? Email [email protected] for general inquiries, or [email protected] for legal matters.