Version 2026-11-02

Privacy Policy

In force from 2 November 2026. Provided by Brainguru Technologies Private Limited (CIN U72200DL2011PTC227021), 4th Floor, D-67, D Block, Sector 2, Noida, Uttar Pradesh 201301, India.

Two roles

• The API. You send us your users' birth details, and we process them on your behalf, only to compute your results. Our duties for that data are in the data processing addendum.
• The portal. For the account data you give us, we are responsible (the "data fiduciary" under the Digital Personal Data Protection Act, 2023).

What the API keeps

• Request bodies are never written to our database or our logs.
• Our application logs hold a request id, the operation, the status, the latency and part of the key's id, never a request's data.
• The web server's access log records each request line, including its query string, with the connecting address and time. It is kept for up to 8 days for security and troubleshooting, then deleted. Send birth details in a POST body, or in a GET query string only if that is acceptable for your users.
• Usage records (operation, status, latency, credits, key) are kept for billing and your usage pages. Individual events are deleted after 90 days; daily totals are kept.

What the portal keeps

• Account: your name, email, phone number and company.
• Billing (paid plans only): your legal name, address, state, PAN or GSTIN (outside India: your country and company registration number) and billing email, your bills, and the tax invoices we issue. GST law requires us to keep invoices for the period it sets, so they stay even after an account is deleted.
• Credentials:
  • a hash of your password (never the password itself);
  • your Google account id, if you sign in with Google;
  • which version of the terms you accepted, and when.
• Necessary cookies: one strictly necessary cookie that keeps you signed in (we store only a hash of it), and, during a Google sign-in, a short-lived cookie that protects that sign-in. These are always on.
• Advertising cookies (optional): we use the Google Ads tag (Google LLC) to measure our own advertising and for remarketing, so that people who have visited our website and portal may later see our ads on other websites and apps.
  • The tag loads on the pages of this site, including sign-in, dashboard and billing pages, but not on the sign-up and password-reset links we email you. API requests and the birth details you send through the API never reach it.
  • It follows your choice in "Cookie preferences" in the footer: while advertising is off, it runs in Google "Consent Mode" without advertising cookies. Visitors in India, where no cookie banner is required, have advertising cookies on by default and can switch them off the same way; visitors elsewhere are asked first through our cookie banner.
  • When an account is created, we report that one sign-up to Google Ads as a conversion, without your name or email. A cookie holding no identifier marks it for up to 10 minutes and is removed as soon as the report is made.
  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or to other websites. You may opt out of personalised advertising at Google Ads Settings and of some third-party vendors' use of cookies at www.aboutads.info. How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.
  • Apart from the Google Ads tag, we use no advertising pixels or ad-retargeting trackers. You can also block cookies in your browser; signing in will not work without the necessary one.
• Abuse limits: your address is used in memory, for a few minutes, to apply rate limits. Apart from the web server's access log above, it is not stored.

Why we use it

To run your account and keys, meter usage, bill paid plans, keep the service secure, answer your messages, and meet legal and tax duties. We do not sell personal data or use API request data to train models. Apart from the Google Ads measurement described above, we do not profile anyone.

Email

We send only account email: sign-up and reset links, security notices, bills, and notices about these terms. There is no marketing without your consent.

Who helps us

How long we keep it

• Account data: while the account exists. When you delete your account, we delete it within 30 days, except invoices and billing records the law requires us to keep.
• Access logs: up to 8 days. Usage events: 90 days; daily totals while the account exists.

Your rights

Under the Digital Personal Data Protection Act, 2023, you may:

• ask for a summary of your personal data and how we process it;
• correct, complete or update it (most of it on the dashboard's Settings page);
• ask us to erase it, or delete your account;
• withdraw consent where we rely on it;
• nominate another person to exercise these rights for you in case of death or incapacity;
• raise a grievance with our Grievance Officer, and, if you are not satisfied, complain to the Data Protection Board of India.

Write to developers@astrologics.in, or to our Grievance Officer, Raj Singh, at grievance@astrologics.in. We acknowledge a grievance within 24 hours and resolve it within 15 days.

Security

• Passwords are hashed with scrypt.
• API keys and session ids are stored only as hashes.
• Everything travels over TLS.
• If a breach affects your personal data, we will tell you and the authorities as the law requires.

Children

The portal is for adults (18+) using it for work. We do not knowingly hold children's data in the portal.

Changes

New versions are posted here with their date. We will email you before a significant change takes effect.