Privacy Policy
ΰ€—ΰ₯‹ΰ€ͺΰ₯ΰ€―ΰ€€ΰ€Ύ

Your kundali, your chats β€” yours alone.

Last updated25 April 2026Reading time: ~3 min
At SanatanAI, your birth details and conversations are sacred β€” we treat them the way a trusted family pandit would: held in confidence, used only to help you, and never repeated to anyone else. This Privacy Policy explains exactly what we collect, how we encrypt it, who can access it, and what rights you have.
Section 01

What we collect

To generate a kundali and respond to your questions, we collect only what's strictly required:

  • β—†Birth details β€” date, time and place of birth (used solely for chart generation).
  • β—†Account info β€” name, email, phone number for authentication.
  • β—†Conversation content β€” your messages with our agents and any uploaded floor plans or photos.
  • β—†Usage analytics β€” anonymized signals (page views, feature use) so we can improve the product.
  • β—†Payment metadata β€” handled by Razorpay; we never store your card or UPI credentials.
Section 02

End-to-end encryption

πŸ”’ Encrypted in transit and at rest
Every conversation between you and a SanatanAI agent is end-to-end encrypted. Your messages are encrypted on your device with a key derived from your account, transmitted over TLS 1.3, and stored encrypted at rest with AES-256 keys rotated every 90 days. No one β€” not our staff, not our contractors, not law enforcement absent a valid Indian court order β€” can read your chats in plaintext.

What this means in practice:

  • β—†Your birth details and chats can only be decrypted with keys tied to your account.
  • β—†We do not train our base models on your private conversations. Period.
  • β—†Floor-plan and photo uploads are processed by Vastu AI and then encrypted; thumbnails purge after 30 days.
  • β—†Server admins cannot read user data; access is gated by signed audit logs.
Section 03

How we use your data

We use your data for exactly four things, in this order of priority:

  • β—†Generate your birth chart and answer your questions accurately.
  • β—†Provide and improve the service β€” bug fixes, feature work, performance.
  • β—†Send transactional notifications (subscription renewal, security alerts).
  • β—†Aggregate, anonymized analytics to understand product usage at the cohort level.

We do not sell your data, share it with advertisers, or use your conversations to train third-party models. Marketing emails are opt-in and you can withdraw consent at any time.

Section 04

Who we share data with

A small number of carefully chosen sub-processors help us run the service. Each is bound by a Data Processing Agreement and is GDPR / DPDP Act compliant:

  • β—†Razorpay β€” payment processing only. Receives transaction metadata, not your chats.
  • β—†Cloud infrastructure provider β€” encrypted storage of data, located in Indian data centers.
  • β—†Twilio / messaging providers β€” only when you opt into WhatsApp/SMS notifications.
  • β—†Google Firebase β€” authentication tokens (not the contents of your chats).
Legal disclosure
We may disclose data only when compelled by a valid order from a court of competent jurisdiction in India. Where law permits, we will notify you before complying.
Section 05

Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

  • β—†Access β€” download a copy of your kundali, chats, and account data.
  • β—†Correction β€” fix incorrect birth details or account info anytime.
  • β—†Erasure β€” delete your account; all data is purged within 30 days, encrypted backups within 90.
  • β—†Withdraw consent β€” for marketing, voice mode storage, or any optional feature.
  • β—†Grievance β€” escalate via our Grievance Officer (see Contact section).
Section 06

Cookies & local storage

We use only the cookies and local-storage keys required to run the service: a session token, your selected language, your theme preference, and the active agent. We do not use third-party advertising or tracking cookies.

Section 07

Children & age

SanatanAI is intended for users aged 18 and above. If you are between 13 and 18, you may use the service only with verifiable parental consent. We do not knowingly process data from children under 13.

Section 08

Updates to this policy

We will notify you by email at least 14 days before any material change to this Privacy Policy takes effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.