Your Privacy Matters

Privacy Policy

Updated 7 October 2026 · effective 23 October 2026

Advertising measurement wording added 18 October 2026 · applies from 3 November 2026. Before 3 November 2026, Advertising measurement is not offered, and nothing is sent to Meta or Google for it.

This Privacy Policy explains how The Astro Nova ("we," "us," or "our") collects, uses, shares, and protects your personal data when you use our AI-powered astrology platform at theastronova.com.

Who We Are (Data Fiduciary)

The Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 is THE ASTRO NOVA PRIVATE LIMITED (CIN U63999DL2025PTC445609), info@theastronova.com. Until 22 October 2026 it was Run AI Intelligence Private Limited (CIN U62099DL2025PTC452659).

Run AI Intelligence Private Limited provides technology and payment services to The Astro Nova (section 3).

1. Data We Collect

We collect the following categories of personal data to provide our astrology services:

Account Information: Name, email address, and profile photo when you register via Google OAuth or email/password credentials.
Birth Data: Date of birth, time of birth, and place of birth. This information is essential for generating accurate astrological charts and readings across Vedic systems.
Payment Information: Payment details are processed securely by our payment partner Razorpay. We do not store your full card numbers on our servers.
Usage Data: Pages visited, features used, session duration, device type, browser type, and interaction patterns. We use PostHog for product analytics, only if you accept analytics cookies.
Advertising measurement (only if you turn it on): from 3 November 2026, if you allow Advertising measurement ("Accept All" in our cookie banner, or in Cookie Settings), we keep, in a cookie for 30 days, the campaign details of the last paid ad link that brought you here (whichever ad network it came from), its Meta or Google click id if it carried one, and the page it opened. If you then create an account, we save those details on your account, with the time you arrived through that ad.
Your cookie choices: from 3 November 2026, when you create an account, we record on it the choices you had made in our cookie banner, whichever they were (Essential only included), and the time we recorded them. If you never made a choice, nothing is recorded. From 3 November 2026, whenever you save your cookie choices with Advertising measurement off while signed in, we record that choice and its time.
AI Interaction Data: Chat messages, voice call transcripts, and avatar session logs generated during your consultations with our AI astrologer, and the short chat memory described under Chat Memory below.
Technical Data: IP address, browser user-agent, referring URLs, and error logs for service reliability.
Waitlist Email (optional): If you ask to be notified when an upcoming astrologer goes live, we store only that email address, used solely to send the single go-live notification. Unsubscribing stops that email but does not yet delete the address. It is deleted if you delete an account registered with the same email, or if you ask our Grievance Officer to remove it (section 7).

2. How We Use Your Data

Your personal data is used for the following purposes:

Astrology Services: Generating birth charts, horoscopes, compatibility analyses, numerology reports and personalized remedies based on your birth data. Tarot cards are drawn at random and use no birth data.
AI Consultations: Powering AI chat, voice call, and avatar session features to deliver personalized astrological guidance.
Account Management: Authenticating your identity, managing subscriptions, processing payments, and providing customer support.
Service Improvement: Analyzing usage patterns to improve features, fix bugs, and develop new capabilities.
Communications: Sending transactional emails (receipts, account updates) and, with your consent, promotional content about new features or offers.

3. Data Sharing & Third Parties

We do not sell your personal data. We share data only with the following categories of service providers, strictly as needed to operate the platform, and, only if you turn on Advertising measurement, with Meta and Google for ad measurement. This list is kept in sync with the more detailed list on the DPDPA page.

Run AI Intelligence Private Limited (a related company): technology services, hosting and supplier accounts, and collection and invoicing of payments for credits, on behalf of The Astro Nova Private Limited.
AI Processing: Anthropic (Claude) for AI-powered astrological interpretations, OpenAI for semantic search embeddings, and Pinecone (US) to store those embeddings and search them for your chat memory. Conversation data is processed but is not used to train third-party models. Both providers operate under data processing agreements.
Payment Processing: Razorpay (India, payments). Razorpay is PCI-DSS compliant. Stripe (US/IE) is not used for new payments.
Voice & Avatar: ElevenLabs (US/UK) for voice synthesis and real-time conversational AI; HeyGen / LiveAvatar (US) for streaming avatar sessions. For a voice call, ElevenLabs receives your voice and the conversation, and what the AI astrologer is given or looks up during the call: your name, account ID, chosen language, your chart and birth details, a partner's birth details if you ask about a partner, a summary of notes from earlier calls and, when it looks them up, those notes themselves, and whether an earlier conversation raised a safety concern. ElevenLabs keeps a copy of each call's conversation under its own retention settings; when you delete your account, we ask ElevenLabs to delete the conversations of your calls that we have on record.
Analytics: PostHog (US) for product analytics — opt-in and gated by your cookie consent, and disabled by default until you accept analytics cookies. If PostHog session replay is switched on, it records how you move through the site (clicks, scrolling and page layout) with all text and form fields masked (images on the page are not masked).
Advertising measurement: from 3 November 2026, Meta Platforms (US), through the Meta Pixel, and Google (US), through the Google Ads tag, only if you turn on Advertising measurement ("Accept All" in our cookie banner, or in Cookie Settings); it is off until you do. The tags run only on our public pages and on three pages of your account (the dashboard, the welcome page and billing). On every other page, such as the sign-in, password-reset, settings or shared comparison pages, they are switched off: they do not load there, and if you reach such a page by a link from a page where they had loaded, we switch them off at once and switch them back on only when you return to one of those pages. On those pages, Meta and Google may receive a page view when you open or reload a page, and an event when you sign up or buy credits (never the amount), each with the campaign name and that platform's own click id from your last ad click. The page address they receive stops before any "?" or "#". Like any website you load content from, they also receive your IP address and browser details, and they set their own cookies. We send no name, email address or account id. We ask Google not to use this for ad personalisation. They hold what they receive under their own privacy policies.
Infrastructure: Neon (US, managed Postgres), Vercel (US, application hosting + CDN), Upstash (US, Redis for rate limiting). Data is stored in encrypted environments.
Communications: Resend (US) for transactional email delivery; WhatsApp / Meta (US) for notification delivery if you opt in.
Sign-in / Maps: Google (Cloud Platform, OAuth) for Google sign-in if you choose that option, and for location search via Places API.
Legal Requirements: We may disclose data if required by law, court order, or to protect the rights, property, or safety of The Astro Nova, its users, or the public. See Terms s.8 for our Nodal Officer channel for law-enforcement requests.

Payments on theastronova.com are collected in Run AI Intelligence Private Limited's Razorpay account. Where another provider in this list is engaged through an account held by Run AI Intelligence Private Limited, that is part of Run AI's technology and hosting services, on behalf of The Astro Nova Private Limited.

4. Data Security

We implement industry-standard security measures to protect your data:

All data transmitted between your browser and our servers is encrypted using TLS.
Passwords are hashed using bcrypt with salt rounds, never stored in plain text.
Database connections use SSL encryption.
API keys and secrets are stored in encrypted environment variables, never in source code.
We conduct regular security audits and follow OWASP security best practices.
Access to production data is restricted to authorized personnel with role-based access controls.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Your Rights

Under India's Digital Personal Data Protection Act (DPDPA) 2023 and the EU General Data Protection Regulation (GDPR), you have the following rights:

Right to Access: Request a copy of all personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data. You can delete your account from Settings at any time. On the website your data is erased straight away, apart from the records listed under Data Retention below; for the Android app, see Delete your account.
Right to Data Portability: Request your data in a structured, machine-readable format.
Right to Withdraw Consent: Withdraw consent for data processing at any time. This may limit your ability to use certain features. From 3 November 2026, to stop advertising measurement, open Cookie Settings (at the bottom of our home page and our other information pages, in the footer of the sign-in pages, or in your account Settings under Your Data), untick Advertising measurement and save. On that page the Meta and Google tags stop at once, and the advertising cookies on this site are deleted. What Meta or Google already received stays with them. Advertising measurement runs only on pages shown in English, and only there does Cookie Settings show it; on a page shown in Hindi or Hinglish, saving Cookie Settings turns it off. If you are signed in, the ad details saved on your account are deleted too; otherwise they stay until you delete your account or ask us to remove them.
Right to Grievance Redressal: Under DPDPA, you may raise concerns with us or the Data Protection Board of India.

To exercise any of these rights, contact us at info@theastronova.com. We acknowledge every request within 24 hours and aim to resolve within 15 days, in compliance with DPDPA s.13(3) and Rule 3(2)(a) of the IT (Intermediary Guidelines) Rules 2021.

6. Cookies & Tracking

We use the following types of cookies and similar technologies:

Essential Cookies: Required for authentication (NextAuth.js session cookies), security (CSRF tokens), and basic site functionality. These cannot be disabled.
Analytics Cookies: PostHog analytics cookies to understand usage patterns and improve the platform, including session replay if it is switched on (text and form fields are masked; images are not). You can opt out via cookie preferences.
Advertising Cookies (Advertising measurement): only if you turn it on. Meta's _fbp and _fbc, Google's _gcl_ cookies, and two of ours: an_paid (30 days; the campaign details and click id of the last ad that brought you here) and an_ad_signup (one day; tells this browser a sign-up has just happened, with no identity in it). Google's and Meta's tags can also keep the ad click that brought you here, with its click id, in this browser's storage. Turning it off deletes them, and that stored ad click, from this site.
Preference Cookies: Store your theme preference, language selection, and other UI settings locally.

We use advertising cookies only if you turn on Advertising measurement. We do not sell your data to advertisers or anyone else.

7. Contact & Data Protection Officer

For any privacy-related inquiries, data requests, or complaints:

The Astro Nova Private Limited (formerly ZESTORA WELLNESS PRIVATE LIMITED)

CIN: U63999DL2025PTC445609

Registered Office: H.No. 1141/2 Min, Upper Ground Floor, Ext Lal Dora Village, Rithala, North West Delhi 110085

Email: info@theastronova.com

Grievance Officer: Simran Bansal

Phone: +91 97738 77969

Email: info@theastronova.com

General inquiries: support@theastronova.com

Pursuant to DPDPA s.13(3) and Rule 3(2)(a) of the IT (Intermediary Guidelines) Rules 2021, we acknowledge every privacy inquiry within 24 hours and aim to resolve within 15 days. If you are unsatisfied with our response, you may lodge a complaint with the Data Protection Board of India, approach a District Consumer Disputes Redressal Commission, or file via the e-Daakhil portal.

Chat Memory

So that a later reading can build on an earlier one, we keep a short memory of your chats. In plain terms:

What we keep: after a chat reply, we may save one memory entry. It holds a text of up to 500 characters that begins with your question and the reply you were shown, the date and time, the kind of entry, your account ID, and an embedding: a list of numbers computed from that question and reply, used to find related entries. Not every reply is kept. Some other readings are kept the same way: a compatibility match (the names entered and the result), a numerology reading (the name, date of birth and numbers) and a tarot draw (your question and the cards).
Why: when you send a new chat message, we look for up to three of your earlier entries that are closely related to it and give them to the AI astrologer, so it can refer back to what you asked before. We search only your own entries. Tarot entries are never used this way.
Who handles it, and where: the entries are stored by Pinecone, a US company. To compute an embedding, the text is sent to OpenAI (US); to search, so is your new message. The entries it uses are sent to Anthropic (US) with your message. Your chat memory is therefore transferred to and stored outside India, as described in section 7 of our DPDPA Notice.
How long: for as long as your account exists. There is no shorter time limit, and no setting yet that turns memory off or clears it on its own.
How to erase it: when you delete your account (Settings → Delete my account), we ask Pinecone to delete every entry saved under your account ID. To have your chat memory erased without closing your account, or to ask us to confirm it is gone, write to our Grievance Officer at info@theastronova.com (section 7).

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Birth chart data is kept while your account exists, to enable continuous, personalized readings; chat memory is kept for as long as your account exists (see Chat Memory). Call transcripts (voice and avatar), call summaries, details about another person given in a call (such as a partner's birth details) and the call's extracted notes are erased automatically 180 days after the call. The call record itself (times, minutes billed, ratings and safety flags) is kept, and so are any comment you write when rating a chat, call or report, and short quotes of the astrologer's own words saved for quality review. Short notes the voice astrologer saves to remember you are kept while your account exists.

Since the afternoon of 4 October 2026 (IST), if you delete your account from Settings on the website, your personal content (profile, birth data, charts, readings, chat and call history, remedies) is erased from our database straight away, apart from what is listed below. Straight after, we ask Pinecone (chat memory and saved readings) and ElevenLabs (voice calls) to delete their copies, and retry daily until it succeeds. Apart from what is listed below, our database does not keep your name, email address, phone number or sign-in records after deletion. Emails you exchanged with our support team, and any safety alert our team received about one of your calls, stay in our mailboxes. What stays:

Payment, order and credit records (amounts, dates, invoice numbers, payment-provider references), kept for tax and accounting. The link to your account, any shipping address and any free-text note are removed. They are not yet deleted automatically after a fixed period.
Your account's random ID, in our internal deletion and billing records; and a separate record, which does not contain that ID, of which Terms version you accepted and when.
Your email address on our do-not-mail list, only if mail to it bounced, could not be delivered or was marked as spam, or if we were asked to stop mailing it.
Short quotes of the astrologer's own words saved for quality review, no longer linked to your account.
If a family member asks us to close a deceased person's account, their request, including that person's email address and anything written in it, is kept as the record of the closure.
Anonymous counts (such as waitlist demand) with every identifying field removed.
Analytics events PostHog has already received (only if you accepted analytics cookies), labelled with that random ID, which no longer links to your name or email.
Advertising events Meta and Google already received (only if you turned on Advertising measurement) stay with them under their own policies; deleting your account does not delete them.

Ad campaign details and the record of your cookie choices saved on your account are deleted with it.

Accounts deleted up to and including 4 October 2026 may have gone through an earlier process that could leave some records behind (for example readings, chat memory or activity logs); we have not yet re-erased them to this standard. The Android app keeps a separate account; see Delete your account.

Children's Privacy

The Astro Nova is not intended for children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us at support@theastronova.com and we will promptly delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform at least 15 days before they take effect. Continued use of the platform after changes constitutes acceptance of the updated policy.

Updated 7 October 2026 · effective 23 October 2026

Advertising measurement wording added 18 October 2026 · applies from 3 November 2026. Before 3 November 2026, Advertising measurement is not offered, and nothing is sent to Meta or Google for it.

This Privacy Policy explains how The Astro Nova ("we," "us," or "our") collects, uses, shares, and protects your personal data when you use our AI-powered astrology platform at theastronova.com.

Who We Are (Data Fiduciary)

Run AI Intelligence Private Limited provides technology and payment services to The Astro Nova (section 3).

Data Retention

Payment, order and credit records (amounts, dates, invoice numbers, payment-provider references), kept for tax and accounting. The link to your account, any shipping address and any free-text note are removed. They are not yet deleted automatically after a fixed period.

Your account's random ID, in our internal deletion and billing records; and a separate record, which does not contain that ID, of which Terms version you accepted and when.

Your email address on our do-not-mail list, only if mail to it bounced, could not be delivered or was marked as spam, or if we were asked to stop mailing it.

Short quotes of the astrologer's own words saved for quality review, no longer linked to your account.

If a family member asks us to close a deceased person's account, their request, including that person's email address and anything written in it, is kept as the record of the closure.

Anonymous counts (such as waitlist demand) with every identifying field removed.

Analytics events PostHog has already received (only if you accepted analytics cookies), labelled with that random ID, which no longer links to your name or email.

Advertising events Meta and Google already received (only if you turned on Advertising measurement) stay with them under their own policies; deleting your account does not delete them.

Ad campaign details and the record of your cookie choices saved on your account are deleted with it.