DPDPA Notice

The Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 is THE ASTRO NOVA PRIVATE LIMITED (CIN U63999DL2025PTC445609), info@theastronova.com. Until 22 October 2026 it was Run AI Intelligence Private Limited (CIN U62099DL2025PTC452659).

Run AI Intelligence Private Limited provides technology and payment services to The Astro Nova (see the processor list in section 7).

As a Data Fiduciary under the DPDPA, we collect the following categories of Digital Personal Data:

• Name -- as provided during registration (Google OAuth or email signup).
• Email address -- for account authentication, communications, and transactional emails.
• Phone number -- if provided for OTP authentication or WhatsApp notifications.
• Date of birth, time of birth, and place of birth -- required for generating accurate astrological charts and readings.
• Gender -- used for personalising astrological interpretations.
• Payment information -- transaction records processed via Razorpay (India). Full card details are never stored on our servers.
• Device and technical information -- IP address, device type, browser type, operating system, and session data.
• Advertising measurement data -- from 3 November 2026, only if you turn on Advertising measurement ("Accept All" in our cookie banner, or in Cookie Settings): the campaign details of the last paid ad link that brought you here (whichever ad network it came from), its Meta or Google click id if it carried one, the page it opened and when (kept in a cookie for 30 days, and saved on your account if you then sign up).
• Cookie choices -- from 3 November 2026, when you create an account, the choices you had made in our cookie banner, whichever they were (Essential only included), and the time we recorded them; and, whenever you save your cookie choices with Advertising measurement off while signed in, that choice and its time.
• AI interaction history -- chat messages, voice call transcripts, and avatar session logs generated during consultations, and chat memory entries (a short text of a remembered question and reply, with an embedding of it; see Chat Memory in the Privacy Policy).
• Waitlist email (optional) -- if you ask to be notified when an upcoming astrologer goes live, we store only that email address, used solely to send the single go-live notification. Unsubscribing stops that email but does not yet delete the address. It is deleted if you delete an account registered with the same email, or if you ask our Grievance Officer to remove it.

We process your personal data only for the following specified and lawful purposes, as required under Section 4 of the DPDPA:

• Astrological readings and consultations: Generating birth charts, horoscopes, compatibility reports, transit analyses, and personalized remedies across Vedic systems.
• Birth chart computation: Using your date, time, and place of birth to calculate planetary positions, house placements, Nakshatras, Dashas, and divisional charts.
• Continuity of readings (chat memory): Keeping a short memory of your chats and readings so that a later chat can refer back to what you asked before. Only your own entries are searched, and tarot entries are never used.
• Payment processing: Processing credit purchases and maintaining transaction records for accounting and tax compliance.
• AI service improvement: Analysing anonymised interaction patterns to improve the quality and relevance of AI-generated astrological interpretations.
• Communications and updates: Sending transactional emails (receipts, OTPs, account updates) and, with your explicit consent, promotional content about new features or offers.
• Advertising measurement: from 3 November 2026, only with your consent ("Accept All" in our cookie banner, or Advertising measurement in Cookie Settings), measuring which of our Meta and Google ads bring people to the site and lead to sign-ups and purchases.
• Legal compliance: Fulfilling obligations under applicable Indian law, including tax regulations and law enforcement requests.

Under Chapter III of the DPDPA, you have the following rights:

• Right to Access (Section 11): Request a summary of the personal data we hold about you and the processing activities performed on it.
• Right to Correction (Section 12): Request correction of inaccurate or misleading personal data, or completion of incomplete data.
• Right to Erasure (Section 12): Request deletion of your personal data. You can delete your account directly from your account settings. On the website your data is erased straight away, apart from the records listed in section 5; for the Android app, see Delete your account.
• Right to Grievance Redressal (Section 13): Raise a grievance with our Grievance Officer. If unsatisfied with our response, you may file a complaint with the Data Protection Board of India.
• Right to Nominate (Section 14): Nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact our Grievance Officer at info@theastronova.com. We acknowledge every request within 24 hours and aim to resolve within 15 days, in compliance with DPDPA s.13(3) and Rule 3(2)(a) of the IT (Intermediary Guidelines) Rules 2021.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this notice:

• Account data (content): Birth data, charts, readings, chat and call history, and remedies are retained for the duration of your active account. Since the afternoon of 4 October 2026 (IST), when you delete your account from Settings on the website, they are erased from our database straight away, apart from what this section lists. Straight after, we ask Pinecone (chat memory and saved readings) and ElevenLabs (voice calls) to delete their copies, and retry daily until it succeeds. Accounts deleted up to and including 4 October 2026 may have gone through an earlier process that could leave some records behind (for example readings, chat memory or activity logs); we have not yet re-erased them to this standard.
• Account identifiers: Apart from what this section lists, after deletion our database does not keep your name, phone number or sign-in records, and keeps your email address only on our do-not-mail list (if mail to it bounced, could not be delivered or was marked as spam, or if we were asked to stop mailing it) or, for a deceased person's account closed at a family member's request, in the record of that request (with anything the family member wrote in it). We keep your account's random ID in our internal deletion and billing records, and a separate record, which does not contain that ID, of which Terms version you accepted and when. Emails you exchanged with our support team, and any safety alert our team received about one of your calls, stay in our mailboxes. Analytics events PostHog has already received (only if you accepted analytics cookies) stay there, labelled with that random ID, which no longer links to your name or email. Advertising events Meta and Google already received (only if you turned on Advertising measurement) stay with them under their own policies; deleting your account does not delete them.
• Financial records: Payment, order and credit records (amounts, dates, invoice numbers, payment-provider references) are kept for tax and accounting. When you delete your account, the link to it, any shipping address and any free-text note are removed. They are not yet deleted automatically after a fixed period.
• Call content: call transcripts (voice and avatar), call summaries, details about another person given in a call (such as a partner's birth details) and the call's extracted notes are erased automatically 180 days after the call. The call record itself (times, minutes billed, ratings and safety flags) is kept, and so are any comment you write when rating a chat, call or report, and short quotes of the astrologer's own words saved for quality review; those quotes stay after account deletion, no longer linked to your account. Short notes the voice astrologer saves to remember you are kept while your account exists.
• Chat memory: kept for as long as your account exists. When you delete your account, we ask Pinecone to delete every entry saved under your account ID.
• Marketing preferences: Retained until you unsubscribe from promotional communications or withdraw consent.
• Advertising measurement data: the cookie on your device for up to 30 days, deleted at once if you turn Advertising measurement off; the details saved on your account while your account exists, deleted when you delete it, when you turn Advertising measurement off while signed in, or earlier if you ask our Grievance Officer.

When data is no longer needed and not subject to a legal retention requirement, it is securely deleted or irreversibly anonymised.

In accordance with Section 9 of the DPDPA:

• The Astro Nova is not intended for individuals under 18 years of age.
• We do not knowingly collect, store, or process personal data from children.
• We do not engage in tracking, behavioural monitoring, or targeted advertising directed at children.
• If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly.

Certain third-party processors may process data outside India. As permitted under Section 16 of the DPDPA, we transfer personal data only to countries and entities not restricted by the Central Government. All such processors are bound by contractual obligations to maintain the confidentiality and security of your data. Meta and Google, which receive advertising measurement data only if you turn on Advertising measurement, are listed below; they receive it under their own terms and use it under their own privacy policies.

Complete processor list (synced 18 October 2026 with Privacy Policy s.3):

• Run AI Intelligence Private Limited (a related company): technology services, hosting and supplier accounts, and collection and invoicing of payments for credits, on behalf of The Astro Nova Private Limited.
• Anthropic (US) — LLM inference for AI chat and voice agent prompts
• OpenAI (US) — embedding generation for semantic memory search
• Pinecone (US) — stores and searches your chat memory entries
• ElevenLabs (US/UK) — voice synthesis and real-time conversational AI
• HeyGen / LiveAvatar (US) — streaming avatar sessions
• Stripe (US/IE) — not used for new payments
• Razorpay (India) — payments
• Neon (US) — managed Postgres for application data
• Vercel (US) — application hosting and CDN
• Upstash (US) — Redis for rate limiting and webhook dedup
• Resend (US) — transactional email delivery
• PostHog (US) — product analytics and, if switched on, masked session replay (opt-in; gated by your cookie consent)
• WhatsApp / Meta (US) — notification delivery if you opt in
• Google (Cloud Platform, OAuth) (US) — sign-in (if you choose Google OAuth) and location search
• Meta Platforms (US) — ad measurement through the Meta Pixel, only if you turn on Advertising measurement
• Google (Google Ads tag) (US) — ad measurement, only if you turn on Advertising measurement

Payments on theastronova.com are collected in Run AI Intelligence Private Limited's Razorpay account. Where another provider in this list is engaged through an account held by Run AI Intelligence Private Limited, that is part of Run AI's technology and hosting services, on behalf of The Astro Nova Private Limited.

This list replaces any earlier abridged version. Every processor is listed for each purpose. If a new processor is added, this section and the Privacy Policy s.3 are updated within 30 days.