Privacy Policy

1. Who we are

AstroMangal ("AstroMangal", "we", "us", "our") is operated by Brewing Conversations Pvt Ltd, a company incorporated in India, with its registered office at 48-B Ambamata Scheme, Udaipur, Rajasthan, India.

This policy explains how we handle your information. It applies to the website www.astromangal.in and to the AstroMangal Android application. Both are covered by this single policy; where the two behave differently, the difference is stated explicitly below.

For anything in this policy, write to us at support@astromangal.in.

2. The short version

The website does not require an account and does not store your birth details. Kundli, Panchang, matching, dosha and muhurat calculations run on your own device — the birth date, time and place you type in stay there and are not transmitted to us.

The app is different. It has an account, so it stores what you give it: your phone number, your birth details, your chart, and your conversations.

Anything you send to an AI feature — a chat message, a report request, a palm photograph — is sent to an AI provider to generate the answer. This is unavoidable: it is how the feature works.

On the website we also record how the pages are used — clicks, taps, scrolling and movement between pages — so we can see where people get stuck. The fields you type personal details into are masked, so those recordings do not contain what you typed. Paid report pages are left out of the recording entirely.

We advertise on Facebook and Instagram, and to measure whether those advertisements work we share some of what you give us with Meta — your contact and basic profile details, and the approximate location we infer from your connection. It is protected before it leaves us, but it is still personal data and we treat it as such. Section 3 sets out the categories we send and, just as importantly, what we never send.

We do not sell your personal data. We have never sold it and this policy does not permit us to.

3. What we collect on the website

Browsing the website, and using the free calculators, does not require you to identify yourself or to create an account.

Birth details entered into the FREE CALCULATORS (date, time and place of birth) are processed entirely on your own device. They are not sent to our servers and we never receive them. If you close the tab, they are gone.

A PAID REPORT works differently, and you should know the difference before you start one. To produce a report we need the name and date of birth you enter, and we send them to our servers to compute it; we also ask your gender, which is optional and is used in one of the calculations. To take payment and to give you a private link to your report afterwards, we ask for your mobile number and verify it with a one-time password. Those details, and a record of the payment, are stored against your account. Card and UPI credentials are entered directly with our payment gateway and are never seen or stored by us.

• Usage data via Google Analytics 4 — pages viewed, session length, browser and device type, approximate location derived from IP, and referring site.
• Product events recorded through our own analytics layer and sent to Google Analytics. These are deliberately non-identifying: we record derived signals such as a zodiac sign, an age band, a topic category, or how long a response took. Into these events we do not put your name, your exact date or time of birth, your birth place beyond a coarse city, the text of your chat messages, or any photograph you upload. Advertising events are a separate thing and work differently; they are the next point.
• Advertising events sent to Meta, the company behind Facebook and Instagram, so that we can tell which advertisement actually brought someone to the site and stop paying for the ones that do not. Unlike the product events above, these do carry information that can identify you. The categories are: your name, your date of birth, your gender where you gave one, the approximate location we infer from your connection, and — once you sign in — your mobile number and your account identifier. Each of those is converted into a one-way fingerprint before it leaves our servers, so Meta can match it against what it already holds but cannot read it back into the original. Alongside them go the things any web request carries anyway: your network address, your browser identification, the page you were on, and Meta's own advertising cookies if your browser has them.
• Two things about that are worth being blunt about. Fingerprinting is not anonymity — the entire point is that Meta can recognise you from it if you already have an account with them, so it remains personal data and we treat it as such. And it is a boundary, not a blanket: the text of your chat messages, any photograph you upload, your time or place of birth, and the contents of any reading are never sent to Meta, in any form.
• Session recordings and heatmaps, through Microsoft Clarity. Clarity records how you interact with a page — where you click and tap, how far you scroll, mouse movement, and which pages you move between — and replays it to us as a recording of the screen. It also records which step of a tool you reached, and, if you arrived from an advertisement, which campaign and which advertisement brought you. Fields carrying personal data are masked: your name, your date of birth, your mobile number, your email address and the one-time sign-in code are captured as blocked-out shapes, so a recording shows that you typed into a box but not what you typed. Paid report pages are excluded — Clarity is not loaded on them at all.
• Information you volunteer through the contact form — your name, email address and message.
• Cookies and similar technologies, described in section 10.

4. What we collect in the Android app

The app stores everything section 3 describes for a paid report, and the following in addition. (This section used to say the website stored none of it. That stopped being true when paid reports shipped on the website; section 3 above is now the accurate account of the website.)

• Your mobile number, which is how you sign in. We verify it with a one-time password (OTP) sent by SMS.
• Your name and gender, if you provide them.
• Your birth details — date, time and place of birth — and the birth chart computed from them. In the app these are stored against your account so your readings persist between sessions.
• Your conversation history with the AI acharya.
• Palm photographs you choose to upload, and the readings generated from them.
• Subscription and payment records. Card and UPI credentials are entered directly with our payment gateway and are never seen or stored by us.
• Device and diagnostic information — device model, operating system version, app version, and crash reports — used to fix faults.

5. Why we use your information

We use your information only for the purposes below. We do not repurpose it for something unrelated without asking you first.

• To compute and deliver the readings, charts, panchang and muhurat results you request.
• To operate your account, keep you signed in, and retain your history so you can return to it.
• To process payments, manage subscriptions, and issue receipts.
• To provide customer support and respond to what you write to us.
• To detect, prevent and investigate abuse, fraud and security incidents.
• To understand which parts of the product are used, in aggregate, so we can improve them.
• To send you service messages. Promotional messages are sent only where you have not opted out, and every such message carries a way to stop them.
• To comply with law, and to establish or defend legal claims.

6. Consent, and how to withdraw it

Where we rely on your consent — for example to process the birth details you submit in the app, or to send you promotional messages — you gave that consent freely and you can withdraw it at any time.

To withdraw consent, write to support@astromangal.in, or use the in-app settings where available. Withdrawing consent does not undo processing that already happened lawfully, and it may mean we can no longer provide a feature that depends on the information withdrawn — for instance, we cannot generate a personalised reading without a birth date.

You can stop analytics and advertising cookies through your browser settings and through the opt-out links in section 10.

7. AI features and what is sent to AI providers

The AI chat, the AI reports and the AI palm reading work by sending your request to a large language model operated by a third party. We route these requests through OpenRouter, and the model used is Google Gemini 2.5 Flash.

What is sent depends on the feature: for chat and reports, your question together with the computed astrological facts of your chart (planetary positions, houses, dasha periods) as text; for palm reading, the photograph itself.

Before a palm photograph is sent anywhere, your device runs a hand-detection check locally in the browser or app to confirm the image contains a hand. That check happens on your device.

On the website, palm photographs are processed in real time to produce your reading and are not written to our servers or retained by us afterwards. In the app, the photograph and the reading are stored against your account so you can look at them again, and they are deleted when you delete your account.

We do not sell your inputs, and we do not use them to train our own models. The AI provider processes the request under its own terms and privacy policy, which govern any retention on their side; we do not control that and we do not claim otherwise here.

Please do not paste passwords, financial account numbers, government identifiers, or another person’s private information into an AI conversation.

8. Who we share information with

We do not sell your personal data and we do not rent or trade it. We share it only with service providers who need it to run the product, and only for that purpose. The categories and the named providers are:

• Hosting and delivery — Vercel, which hosts the website and serves it worldwide.
• AI processing — OpenRouter, and through it Google, for the chat, report and palm reading features.
• Payments (app) — Razorpay, which handles card, UPI and subscription mandates. They receive the payment information you enter; we receive only the outcome and the records we must keep.
• Analytics — Google Analytics 4.
• Session recording and heatmaps — Microsoft, through its Clarity product.
• Advertising measurement — Meta Platforms, for Facebook and Instagram advertising. Meta receives the advertising events described in section 3, with the identifying values in them fingerprinted before they leave us. This is how we know which advertisement produced a visit or a sale.
• Advertising — Google AdSense and its advertising partners. See section 10.
• SMS delivery (app) — the telecom provider that carries your one-time password.
• Professional advisers, auditors and law enforcement, where we are legally obliged to disclose, or where disclosure is necessary to establish or defend a legal claim. We disclose the minimum required.
• A successor entity, if the business is merged or acquired. You would be told before your information became subject to a different policy.

9. How long we keep it

We keep personal data only as long as the purpose requires, then delete it.

• Website birth details — never stored, so there is nothing to retain.
• App account data (phone number, name, birth details, chart, chat history, palm photographs) — kept while your account is active, and deleted when you delete your account. See section 12.
• Website palm readings — not retained after the response is generated.
• Payment, invoice and tax records — retained for as long as Indian tax, accounting and company law requires us to keep books of account. These cannot be deleted on request while that obligation lasts.
• Support correspondence — kept for as long as needed to resolve the matter and to handle any follow-up or dispute.
• Analytics data — retained in aggregated or de-identified form, from which you cannot be re-identified.
• Session recordings — held by Microsoft on our behalf, under Clarity’s own retention schedule. Microsoft sets that schedule; we do not, and we are not going to state a period we do not control.
• Server and security logs — kept for a short operational period and then rotated out.

10. Cookies, advertising and your choices

We use cookies and similar technologies for essential site functionality, for analytics, for session recording, and for advertising.

This site is monetised with advertising. We work with Google AdSense. Google, as a third-party vendor, uses cookies — including the DoubleClick cookie — to serve ads based on your prior visits to this and other websites. Google’s use of advertising cookies is described in its own advertising policies.

You can control this. You can opt out of personalised Google advertising at adssettings.google.com, opt out of participating vendors at optout.networkadvertising.org and optout.aboutads.info, block or delete cookies in your browser, and reset or delete your advertising identifier in your Android settings.

We also advertise on Facebook and Instagram, and we measure those advertisements — both with Meta’s pixel in your browser and from our own servers. What is sent, and in what form, is set out in section 3. You can review and limit how Meta uses information about you in the ad preferences of your Facebook or Instagram account.

Session recording has its own opt-out, separate from advertising: visit clarity.microsoft.com/optout to stop Microsoft Clarity recording your sessions.

One more thing your browser stores, which is not a cookie and is not advertising. When we text you a sign-in code, your browser records that a code went to that number — as a short numeric checksum of the number, and the time. We do not store the number itself and we never send any of this anywhere, but we should be plain about what the checksum is and is not: it is a comparison key, not a protection. There are only about four billion possible Indian mobile numbers, so anything that can already read this site's storage on your device could work back from the checksum to the number. It is stored this way to keep the number out of your browser's storage in plain form, not because the checksum could not be undone. It exists only so that reopening the page, or opening it in a second tab, does not text you again and use up the small number of codes your number is allowed in a quarter of an hour. It is normally cleared about fifteen minutes later, the next time you are on a sign-in or checkout page; if you never return to one it stays in your browser until you clear this site's data, which you can do at any time from your browser settings.

Opting out of personalised advertising does not remove ads — it means the ads you see are no longer based on your browsing history.

11. Your rights

Under the Digital Personal Data Protection Act, 2023, and other applicable Indian law, you have the following rights over the personal data we hold about you:

• The right to know what personal data we hold about you, and who we have shared it with.
• The right to have inaccurate or incomplete data corrected, and to have it updated.
• The right to erasure — to have your personal data deleted, except where we are legally required to keep it.
• The right to withdraw consent, as described in section 6.
• The right to nominate another person to exercise these rights on your behalf if you die or become incapacitated.
• The right to grievance redressal — to complain to us and receive a response, as described in section 14.
• The right to escalate an unresolved complaint to the Data Protection Board of India.

To exercise any of these, email support@astromangal.in from the address or phone number on your account, telling us which right you wish to use. We may need to verify your identity before we act, so that nobody else can obtain or delete your data. We respond within 30 days and there is no charge.

12. Deleting your account and your data

You can ask us to delete your account and the personal data attached to it at any time.

The process, what is deleted, what we are obliged to keep, and how long it takes are set out on our dedicated page: www.astromangal.in/delete-account

We verify every deletion request against the mobile number on the account before acting on it, so that nobody else can delete your account by knowing your number. We action verified requests within 30 days and confirm when it is done.

Deleting your account does not automatically cancel an active subscription mandate. Cancel the subscription first, or ask us to do it as part of the deletion.

Go to the account deletion page →

13. Children and minors

AstroMangal is intended for adults. Our services are not directed to children, and we do not knowingly collect personal data from a child.

Under Indian law a person below the age of 18 is a child for data protection purposes. We do not knowingly process a child’s personal data without verifiable consent from a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children.

If you believe a child has provided us with personal data, write to support@astromangal.in and we will delete it.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, and with the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer with any complaint about how your personal data has been handled.

Grievance Officer, Brewing Conversations Pvt Ltd, 48-B Ambamata Scheme, Udaipur, Rajasthan, India. Email: support@astromangal.in.

Please put "Grievance" in the subject line and describe the issue and the outcome you are seeking. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

15. Security

We take reasonable technical and organisational measures to protect your information. The website and the app communicate over HTTPS. Access to production systems is restricted to the people who need it. Payment credentials are handled by a PCI-compliant payment gateway and are never stored by us.

On the website, the strongest protection is architectural: because the calculators run in your browser, your birth details are never in our custody in the first place.

No system is perfectly secure, and we do not claim otherwise. If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by law.

16. Where your data is processed

We are based in India and we process personal data in India. Some of our service providers — hosting, AI processing, analytics, session recording and advertising — operate infrastructure outside India, so your information may be processed in other countries, including the United States.

Microsoft Clarity is one of these. The session recordings described in sections 3 and 10 are processed and stored on Microsoft’s infrastructure, which is outside India.

Where that happens, we use providers that offer contractual protections for the data they process on our behalf, and we transfer only what the service requires.

17. Astrology, AI, and what this service is not

AstroMangal provides astrological content and AI-assisted interpretation for personal reflection and cultural interest. It is not professional advice.

Nothing on AstroMangal is medical, psychological, legal or financial advice, and it should not be used in place of a qualified professional. AI-generated readings may be inaccurate or inconsistent. Decisions you take remain yours.

If you are in distress or facing a medical, legal or financial emergency, please contact a qualified professional or the appropriate emergency service.

18. Governing law and jurisdiction

This policy is governed by the laws of India. The courts at Udaipur, Rajasthan have exclusive jurisdiction over any dispute arising out of or relating to it.

19. Changes to this policy

We may update this policy as the product or the law changes. The revision date at the top of this page always reflects the current version. If a change materially affects how we use your personal data, we will tell you through the app or the website before it takes effect.

20. Contact us

Brewing Conversations Pvt Ltd

48-B Ambamata Scheme, Udaipur, Rajasthan, India

Email: support@astromangal.in

We reply to privacy queries within 15 days, and usually much sooner.

See also our Terms of Service and Account Deletion page.