1 Who we are
Jyotish Daily Horoscope is a personalised Vedic astrology service delivered over WhatsApp. The service is owned and operated by Vikas (contact: contactvix@gmail.com), with WhatsApp Business operations based in the United Arab Emirates and a significant subscriber base in India. We are the Data Fiduciary under India's DPDP Act 2023 and the Data Controller under the UAE's PDPL — meaning we decide the purpose and means of processing your personal data under either framework.
2 What personal data we collect
We collect only the minimum data required to generate your birth chart and deliver your horoscope.
| Data | Why we collect it | How it is stored |
|---|---|---|
| WhatsApp phone number | To deliver your horoscope and manage your subscription | SHA-256 hash as database key; encrypted copy for delivery |
| Date of birth | To calculate your Vedic natal chart and Dasha periods | Encrypted at rest (Fernet / AES-128) |
| Time of birth | To determine your Ascendant (Lagna) and house positions | Encrypted at rest (Fernet / AES-128) |
| City of birth | To obtain geographic coordinates for chart calculations | Stored as plaintext (publicly available information) |
| Payment record | To track your subscription validity period | Stripe session ID and expiry date only — no card data stored |
| Subscription plan | To determine which plan (free trial / weekly / two weeks / monthly) you are on and when it expires | Stored as plaintext (non-sensitive plan label) |
| Referral code & referral link | If you use or share a referral code, we record which phone number referred which — so both accounts can receive the referral bonus | Referral code stored as plaintext (not personally identifying on its own); linked accounts stored using the same hashing/encryption as your phone number |
We do not collect your name, email address, government ID, or any financial instrument details. Card numbers are handled entirely by Stripe and never reach our servers.
3 How we use your data
- Generate your personalised Vedic horoscope (natal chart, Dasha, Panchang) using our deterministic astrology engine
- Produce AI-enhanced interpretations of your chart using Claude (Anthropic) — no personally identifiable information is sent to the AI (see Section 3a)
- Deliver your daily reading via WhatsApp at 7:00 AM IST
- Manage your subscription status
- Respond to on-demand horoscope requests you send us
We do not use your data for advertising, profiling, or any purpose beyond delivering the horoscope service you subscribed to.
3a How AI interpretation works
Your daily horoscope is generated in two layers. The first layer uses our deterministic Vedic astrology engine to compute your natal chart, planetary transits, and Panchang data from your birth details. The second layer uses Claude (Anthropic's AI) to produce warm, personalised interpretations of that computed data.
Anthropic's API does not use API inputs to train its models by default. The AI generates text for your reading and does not retain any data between sessions. For Anthropic's data practices, see anthropic.com/privacy.
4 Consent
Before we collect your date of birth, time of birth, or city of birth, the WhatsApp bot presents an explicit consent message listing exactly what will be stored and why, and linking directly to this Privacy Policy and our Terms of Service. You must reply AGREE to continue — this records a timestamped consent entry against your account. Replying DECLINE cancels the setup — no birth data is stored.
5 How we protect your data
- Encryption at rest: Phone number, date of birth, and time of birth are encrypted in the database using Fernet symmetric encryption (AES-128-CBC with HMAC-SHA256). City of birth is not encrypted as it is publicly available geographic information.
- Phone pseudonymisation: Your phone number is stored as a SHA-256 hash for lookups — the raw number is only decrypted when needed to send a WhatsApp message.
- Encryption in transit: All communication between your device, our servers, and third-party services is over TLS (HTTPS / WhatsApp end-to-end encryption).
- Access control: The admin panel is protected by password authentication. Database credentials are managed by Railway and never exposed in code.
- No third-party data sharing: Your personal data is not sold, rented, or shared with any third party for marketing or analytics purposes.
6 Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Meta (WhatsApp Business Cloud API) | WhatsApp message delivery | Your WhatsApp number and horoscope message content. Governed by Meta's Business Terms and WhatsApp's privacy policy. |
| Anthropic (Claude AI) | AI-enhanced horoscope interpretation (see Section 3a) | Anonymised astrological chart data only — planetary positions, Dasha period, Panchang. No PII (phone, birth date, birth time, city) is sent. |
| Railway | Cloud hosting and managed PostgreSQL database | All encrypted subscriber data stored in Railway's infrastructure |
| Stripe | Payment processing (where applicable) | Payment amount and currency only. Stripe handles card details directly — we never see them. |
6a Cross-border data transfers
Some of the third-party services listed in Section 6 — including Anthropic and Stripe — process data on servers located outside your home country, which may include the United States. Where personal data is transferred internationally, we rely on the data-processing and security safeguards those providers publish (see their respective privacy policies) and limit what is shared to the minimum described in Section 6. Only anonymised astrological data (never your phone number, name, or raw birth details) is sent to our AI provider, regardless of where its servers are located.
7 Data retention
- Active subscribers: Data is retained for the duration of the subscription.
- Expired / unsubscribed: Data is automatically deleted 30 days after subscription expiry or after you send STOP, whichever applies — enforced by a daily automated cleanup, not a manual process.
- Pending conversations: Incomplete signup flows (users who started but did not finish) are automatically cleared periodically.
- Immediate deletion: You may request immediate deletion of all your data by emailing us — see Section 8.
8 Your rights under DPDP Act 2023 and UAE PDPL
As a Data Principal under India's DPDP Act 2023, or a Data Subject under the UAE's PDPL, you have the following rights — we apply the fuller set below to every subscriber regardless of location:
- Right to access: Request a summary of the personal data we hold about you.
- Right to correction: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of all personal data we hold about you.
- Right to restrict or object to processing: Ask us to stop a specific use of your data (e.g. an upcoming feature) without cancelling your subscription entirely.
- Right to data portability: Request your data in a structured, commonly-used format (PDPL).
- Right to be informed of a data breach: We will notify affected subscribers without undue delay if a breach is likely to result in risk to your rights (PDPL).
- Right to opt out of direct marketing: Marketing messages (e.g. promotional offers) are separate from your subscription's daily readings — you can opt out of marketing specifically without cancelling your subscription by emailing us.
- Right to grievance redressal / complaint: Lodge a complaint with us if you believe your data has been mishandled. If unresolved, Indian subscribers may approach the Data Protection Board of India once constituted; UAE-based data-protection complaints may be directed to the UAE Data Office.
- Right to withdraw consent: Withdraw consent at any time by sending STOP via WhatsApp or emailing us.
To exercise any of these rights, contact us at contactvix@gmail.com. We will respond within 7 business days.
9 Children's privacy
This service is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has subscribed, please contact us immediately and we will delete the data.
10 Changes to this policy
If we make material changes to this policy, we will notify active subscribers via WhatsApp at least 7 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.
11 Contact & grievances
For any privacy-related queries, data requests, or complaints:
We aim to respond within 7 business days.
If your concern is not resolved, you may approach the Data Protection Board of India
once it is constituted under the DPDP Act 2023.