Privacy Policy

1. Introduction

AstroPredict ("we", "us", "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect, how we process and store it, and your rights regarding your data when using the AstroPredict Vedic Astrology Platform.

2. Information We Collect

Based on our platform architecture, we collect the following data types:

• Account Data: When you register an account, we collect your email address and a bcrypt-hashed representation of your password. We never store or log plaintext passwords.
• Birth Profile Data: To compute Vedic astronomical charts, you provide birth details including name/label, birth date, birth time, latitude, longitude, and location name.
• Saved Calculations & AI Snapshots: If you are signed in, your generated birth charts, calculation configurations (ayanamsa, chart layout), and AI interpretation snapshots are stored in PostgreSQL linked to your account ID.
• Technical Logs & Security Data: We collect client IP addresses strictly for rate-limiting enforcement on contact forms and password reset endpoints to prevent spam and abuse.

3. How We Use Your Information

• To compute exact astronomical longitudes, planetary dignities, house cusps, and Vimshottari Dashas.
• To generate structured AI chart interpretation summaries based on your calculated birth positions.
• To deliver transactional emails (password reset links and support responses) via Resend API.
• To enforce rate limits and maintain system integrity.

4. Third-Party Data Sharing

We do not sell, rent, or trade your personal information or birth profile data to third-party advertisers or data brokers. Third-party infrastructure providers used by our platform include:

• Resend: Used exclusively to deliver transactional emails (password resets and support inquiries).
• OpenStreetMap / Komoot (Photon): Used for location geocoding. Only search queries (city names) are transmitted; no personal user identifiers are shared.

5. Data Security

We enforce industry-standard security practices, including salted bcrypt password hashing (10 salt rounds), HTTP-only session cookies with lax same-site policies, and cryptographically random single-use password reset tokens (SHA-256 hashed at rest).

6. Cookies & Local Storage

We use a single functional HTTP-only cookie (astro_session) to maintain secure user authentication states. We do not place third-party advertising or cross-site tracking cookies on your browser.

7. Your Rights & Account Deletion

You have the right to inspect, update, or delete your saved birth profiles directly within the platform dashboard. If you wish to delete your account and all associated data completely, please contact us at raj.myinscribe@gmail.com and we will process your deletion request manually.