Legal

Privacy Policy

Your birth time is not ordinary data. This page says exactly what we hold, who else sees it, how long we keep it, and how to make us delete it.

Last updated 16 September 2026

Complaining about another platform, pandit or astrologer? Read what people wrote · We do not arbitrate or promise refunds.

1.Who is responsible

Gunat Maa Group, a sole proprietorship of Shravan Meena, Floor 1, Building 78, Omex City, Bagru Khurd, 1864 Block, Jaipur, Rajasthan 302026, India, is the Data Fiduciary for the personal data described here, under the Digital Personal Data Protection Act 2023. astropothi is one of its brands.

For anything about your data, write to shravanmeena47@gmail.com. For anything about an order, WhatsApp 84419 66080 or email shravanmeena47@gmail.com — it is the faster route and reaches the same people. Our grievance process is on the page.

2.What we collect

Name, gender, date, time and place of birth
It is the input to the calculation. There is no report without it.
You type it on the order form
Coordinates and timezone of your birth place
The chart needs a precise latitude, longitude and UTC offset, so we resolve the place you picked into those.
Resolved by us when you order
For a Vastu report: the direction your building faces, its type, city and room layout
It is the input to that calculation. No birth details are used.
You type it on the order form
Mobile number
It is your account, the delivery channel for the report, and how we reach you about the order.
You type it at checkout
Email address
An alternative way to reach you. Optional.
Only if you give it
State
Place of supply for GST on your invoice.
At checkout
Anything you add to your profile — interests, notes, what you follow
To make later reports more relevant. Entirely optional, and you can empty it at any time.
Only if you fill it in
Order and payment records: amount, tax, coupon, Razorpay reference, invoice number
We are required to keep them, and you need them for a refund.
When you pay
The generated report, as a PDF and as text
So you can re-download it, read it in the browser, and ask it questions.
When it is generated
Your questions to the report assistant, and its answers
So the conversation survives a reload, and so we can see which chapters readers find unclear.
When you use the assistant
Behaviour on the site: pages seen, buttons pressed, which report you looked at, where you stopped
To understand which reports people want, and where the checkout loses them.
As you browse
A device identifier, IP address, browser user-agent, and the utm_* tags on the link you arrived by
To count devices rather than clicks, to know which advertisement worked, and for security.
As you browse
One-time passwords
To sign you in.
When you sign in

3.Three things worth knowing before you read further

Your mobile number alone opens your order history. When you buy, we sign you in on the number you typed, without a one-time password. Anyone who enters that number at checkout can be shown the reports bought on it. Ask us and we will require a one-time password on your account instead.

We record browsing from before you tell us who you are. A random identifier is stored in your browser on your first visit. When you later sign in, that earlier browsing is joined to your account — so the pages you looked at before you bought become part of your record. That is the whole reason it exists: it tells us which reports people consider and abandon.

Your questions to the assistant are stored, and staff can read them. People ask reports about marriage, money, illness and grief. If you would rather a question was not kept, do not type it — and tell us if you want a conversation deleted.

4.What we use it for, and nothing else

  • Computing and delivering the report you asked for.
  • Taking payment, issuing your invoice, and handling refunds.
  • Letting you sign in and find your past reports.
  • Answering your questions about your report, including through the assistant.
  • Understanding how the site is used, so we can fix what is not working.
  • Meeting our tax, accounting and legal obligations.

Your birth details are used to generate the report you ordered and to let you re-read it. They are not used for anything else.

We do not sell your data, and we never will. We do not share your birth details with advertisers, data brokers or any other business, and we do not use them to build advertising audiences.

5.Who else touches it

Only these, only for the job named, and each under a contract that forbids using your data for anything else.

Razorpay — India
Gets your name, mobile number, email if you gave one, and the amount, to take the payment. We never receive your card or UPI credentials.
MSG91 — India
Gets your mobile number and a link to your report, to deliver it and your one-time passwords over WhatsApp and SMS.
Amazon Web Services, Bedrock — Mumbai region
Gets chapter text from your report and your questions to the assistant, to write the fuller explanations and answer you.
Amazon Web Services, S3 — Mumbai region
Stores the finished PDF so you can download it again.
Google Maps Platform
Gets the birth place name you typed, to turn it into coordinates. Called from our server, never from your browser, so Google does not see your device.
Our hosting provider — India region
Runs the service, and therefore holds everything at rest.

We will also disclose data where the law requires it, or to establish or defend a legal claim. We do not transfer personal data outside India except as shown above, and we do not transfer it to any country the Central Government has restricted under s.16 of the DPDP Act.

6.How long we keep it

WhatKept for
Your account and birth detailsUntil you ask us to delete them
Generated reports and their PDFsUntil you ask us to delete them, so you can re-download
Assistant conversationsUntil you ask us to delete them, or the order is deleted
Order, invoice and payment recordsEight years, as required by tax and company law — this is the one thing we cannot delete on request
Behavioural events26 months, then deleted
One-time passwordsMinutes. They expire and are then unusable

7.Your rights

Under the DPDP Act 2023 you can ask us to:

  • Show you the personal data we hold about you, and who we have shared it with.
  • Correct anything wrong, incomplete or out of date — including a birth time you entered wrongly.
  • Delete your data. We will, except for the invoice records law requires us to keep, and we will tell you exactly what was retained and why.
  • Withdraw consent at any time. Withdrawing it stops future processing; it does not undo what was lawfully done before.
  • Nominate someone to exercise these rights if you die or become incapacitated.
  • Complain — to us first, and to the Data Protection Board of India if we do not resolve it.

Write to shravanmeena47@gmail.com or WhatsApp 84419 66080. We will acknowledge within 48 hours and complete the request within 30 days. There is no charge.

8.Children

A kundli is often commissioned for a newborn, so this needs saying plainly. You may order a report about a child only if you are that child's parent or legal guardian, and by ordering you confirm that you are.

We do not knowingly process a child's personal data without verifiable parental consent, and we never track, profile or advertise to children. If you believe a child's data has reached us without proper consent, tell us and we will delete it.

9.Ordering a report about someone else

If you order a report about another adult — a partner, a parent, a prospective match — you are giving us their birth details. Please have their permission. You are responsible for having it, and we will delete their data on their request just as we would on yours.

10.Security, and being honest about it

Traffic is encrypted in transit. Payment credentials never reach our servers. Access to the database is restricted to the people who need it, staff accounts are separate from buyer accounts, and every administrative action is tied to a named account.

No system is perfectly secure. If a breach affects your data we will notify you and the Data Protection Board as the DPDP Act requires, and we will tell you what happened rather than a sanitised version of it.

11.Cookies, and what we do instead

We do not use advertising or third-party tracking cookies, and there is nothing on this site from an advertising network. What we do use is browser storage: a random device identifier that persists, a visit identifier that lasts until you close the tab, your sign-in token, and your light or dark theme choice.

Clearing your browser storage removes all of it. The site keeps working; we simply stop recognising the device.

12.Changes

If we change this policy in a way that affects what we collect or who sees it, we will say so on the site rather than only changing the date at the top.

Stuck, or something looks wrong?

A person reads every message — not a bot. Ask about your chart, your reading, your payment or your order. 9am – 9pm, every day.