Version 2026-10-29

Data processing addendum

In force from 29 October 2026. Part of the Terms of Service between you and Brainguru Technologies Private Limited.

When you send birth details to the API, you decide why and how they are processed (you are the data fiduciary, or the controller under the GDPR) and we process them only on your behalf, to compute your results.

  • Purpose: we use request data only to compute the response. We never sell it, profile anyone or train models on it.
  • Your instructions: these terms and your API calls are your instructions. We do not process request data for any other purpose unless the law requires it, and we will tell you if it does, unless the law forbids that.
  • Retention:
    • request bodies are never written to our database or logs;
    • the web server's access log records each request line, including its query string, for up to 8 days, then deletes it;
    • request metadata (id, operation, status, latency, credits, key) is kept for 90 days for billing and your usage pages.
  • Location: our servers and database are in India (Mumbai). Requests travel through Amazon CloudFront's edge network, often from a location near the caller.
  • Confidentiality: only the people who run the service can reach request data, and they are bound to keep it confidential.
  • Security: TLS for all traffic; keys stored only as hashes; access limited to the people who run the service.
  • Sub-processors: listed on the sub-processors page. We will announce a new one at least 30 days in advance, and you may object or close your account.
  • Breaches: we will notify you without undue delay, and give you what we know so you can meet your own duties.
  • Help with requests: we will help you answer your users' requests to exercise their rights, as far as we can for data we hold.
  • End: request data is not stored beyond the periods above, so nothing remains to return at the end of the contract.
  • Law: this addendum follows India's Digital Personal Data Protection Act, 2023. If you are subject to the GDPR and need standard contractual clauses, write to us before sending EU personal data.

Questions: developers@astrologics.in.