Privacy policy
This policy explains what personal data TaraYatra collects, why, and what you can do about it. The data fiduciary is [Registered company name], [Registered office address]. We follow the Digital Personal Data Protection Act, 2023 and the rules made under it.
What we collect
| Data | Why we need it |
|---|---|
| Phone number | To sign you in with a one-time password and protect your account. |
| Name, date of birth, gender (optional) | To confirm you are 18+ and to personalise readings. |
| Birth time and place | To calculate your kundli. You can leave the time out. |
| Wallet and payment records | To credit top-ups, bill sessions, pay guides and meet tax and accounting law. Card and UPI details stay with Razorpay. |
| Consultation chats and call metadata | To deliver sessions, resolve disputes and investigate safety reports. We do not record audio calls. |
| Ask Tara messages | To generate replies. Messages are sent to our AI provider, which may not use them to train its models. |
| Device and usage data | To fix crashes, prevent fraud and understand which features help. |
| Waitlist email or WhatsApp number | To tell you when TaraYatra launches. Nothing else. |
Who we share it with
We do not sell personal data. We share only what each service needs to work:
- Supabase: database, sign-in and file storage.
- Razorpay: payments.
- Agora: audio call connection.
- An SMS provider: sending your one-time password.
- An AI provider: generating Ask Tara replies.
- Your guide: your first name and the birth details you choose to share for that session. Guides never see your phone number.
- Authorities: when the law requires it.
Some of these providers process data outside India. We use them only under contracts that require them to protect it.
How long we keep it
- Profile, birth details, Ask Tara chats and files: until you delete your account.
- Payment and wallet records: 8 years, as required by tax and company law. After you delete your account they are kept without your name or contact details.
- Consultation chats: 180 days after the session, unless they're part of an open complaint.
- Waitlist sign-ups: until launch, plus 90 days.
Your rights
You can ask to see, correct or delete your personal data, withdraw consent, and nominate someone to act for you. Delete your account from Settings in the app, or write to [email protected]. We reply within 30 days. If you aren't satisfied, contact our grievance officer, and then the Data Protection Board of India.
Children
TaraYatra is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has signed up, write to us and we will delete the account.
Security
Data is encrypted in transit and at rest. Access inside the company is limited to the people who need it, and it is logged. If a breach affects you, we will tell you and the Data Protection Board as the law requires.
Changes
If we change this policy in a way that affects you, we'll tell you in the app before the change takes effect.