Privacy Policy
Last updated: 21 October 2026
This policy explains how Vedic Rishi Astro Solutions Pvt Ltd ("UpAstrology", "we", "us") handles personal data when you use upastrology.com and our iOS and Android apps. We keep it short and plain. If something is unclear, write to mail@upastrology.com.
1. Who is responsible for your data
The controller is Vedic Rishi Astro Solutions Pvt Ltd, D-3/60, SVP Nagar, Versova MHADA, Andheri-West, Mumbai 400053, Maharashtra, India. For all privacy, data-subject, refund and legal requests, email mail@upastrology.com. We have not appointed a Data Protection Officer; requests sent to that address are handled by our team. See also our Legal Notice.
2. Representative in the EU and UK
We are based outside the EU and UK. Where the law requires us to have a representative there (GDPR Article 27), we will name it on this page and in the Legal Notice. Until then, please contact us at mail@upastrology.com.
3. What we collect
- Account data. Your email address if you sign in with an email one-time code. If you use Google sign-in, your name, email address and profile picture from Google.
- Birth details. Name, date, time and place of birth (with the coordinates and time zone of the place) that you enter into calculators and reports. For two-person tools such as compatibility, also the other person's birth details. Only enter someone else's details if you are entitled to, for example because they have agreed or they are your child. Birth details are not "special category" data, but we treat them with care.
- Order data. The product, amount, currency, payment method and order ID. Card details are entered on Stripe or PayPal and are never stored by us.
- Messages. What you send through contact and feedback forms and account-deletion requests.
- AI astrologer chat. The questions you type into the chat and the answers returned.
- Technical data. IP address, device and browser type, pages visited and similar usage data, collected through analytics tools (see our Cookie Policy).
- Saved birth profile. For convenience, your last-used birth details are kept in your own browser so you do not have to retype them. They stay on your device until they expire after 30 days or you clear your browser data.
4. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Provide calculators, readings and reports you ask for, and email purchased PDF reports | Contract, or steps at your request before a contract (Art. 6(1)(b)) |
| Accounts and sign-in | Contract (Art. 6(1)(b)) |
| Payments, invoicing, tax and accounting records | Contract and legal obligation (Art. 6(1)(b), (c)) |
| Customer support | Contract and our legitimate interest in helping you (Art. 6(1)(b), (f)) |
| Security, abuse and fraud prevention | Legitimate interest (Art. 6(1)(f)) |
| Analytics and advertising measurement | Consent in the EU, EEA, UK and Switzerland (Art. 6(1)(a), given through the cookie banner). Elsewhere, legitimate interest where the local law permits it. |
| Marketing emails | Only if you agreed (Art. 6(1)(a)). Every email has an unsubscribe link. |
We do not sell your personal data. We do not make decisions about you that have legal or similarly significant effects by automated means. The AI astrologer and report tools generate astrological content only; see our Disclaimer.
5. Who receives your data
We use the following service providers. They process data for us or for the stated purpose only.
| Provider | What for |
|---|---|
| Vercel (USA) | Website hosting |
| Amazon Web Services | Database (DynamoDB) and email delivery (SES), in US and EU regions |
| Analytics 4, Tag Manager, Google Ads conversion measurement, Google Sign-In, and Firebase for the Human Design assistant chat | |
| Microsoft Clarity | Session analytics and heatmaps |
| Meta | Facebook pixel and ad measurement |
| Stripe and PayPal | Payment processing |
| AstrologyAPI | Astrology calculation engine. It receives only anonymous birth details (date, time, coordinates and time zone of birth), never your name, email or any other identifier. |
| Mapbox and Esri ArcGIS | Maps on astrocartography pages |
| Bunny CDN | Delivery of images |
| BigDataCloud | Place and geolocation lookup |
| Vedic Rishi group servers | Our own application services (api.upastrology.com and app back ends) |
We may also share data when the law requires it, to protect our rights, or in a sale or restructuring of the business, with notice to you where required.
6. International transfers
We are in India, and our providers work from India, the USA and the EU (our AWS data is stored in US and EU regions). If you are in the EU, EEA, UK or Switzerland, some of your data is therefore transferred outside those areas. We rely on the European Commission's Standard Contractual Clauses (and the UK addendum) and, for providers certified under it, the EU-US Data Privacy Framework. You can ask us for a copy of the safeguards.
7. How long we keep it
We keep as little as we can, for no longer than we need it. We do not keep a store of your birth details or readings: they are used to calculate and deliver what you asked for, and the copy you can come back to stays in your own browser or email.
- Account data (your email, and name and picture with Google sign-in): only while you have an account. Delete it at any time on the account deletion page or by email.
- Payment records: kept by Stripe and PayPal under their own policies. We keep only the invoice details that Indian tax law requires us to keep.
- Messages to us: only until your request is resolved.
- Analytics data: held by Google and Microsoft in pseudonymous form, for at most 14 months.
- Saved birth profile in your browser: 30 days, or until you clear your browser data.
8. Your rights
Under the GDPR and UK GDPR you can ask us to give you access to your data, correct it, erase it, restrict its use, or give it to you in a portable format. You can object to processing based on legitimate interest, and withdraw consent at any time (withdrawing does not affect what happened before). To use a right, email mail@upastrology.com. We may ask you to prove who you are. We reply within one month. You also have the right to complain to your data protection authority, such as your national authority in the EU or the Information Commissioner's Office (ICO) in the UK. We would appreciate the chance to fix the issue first.
9. Cookies and similar technologies
Details, including the list of cookies and how to change your choice, are in the Cookie Policy.
10. Children
UpAstrology is not directed at children under 16 (in the EU) or under 13 (elsewhere). We do not knowingly collect their data. If you think a child has given us data, email us and we will delete it.
11. Security
We use encrypted connections, access controls and trusted providers. No online service is perfectly secure. If a breach affects you, we will notify you and the authorities as the law requires.
12. Other regions
California. We do not sell personal information for money. Advertising pixels from Google and Meta may count as "sharing" for cross-context behavioral advertising under California law; you can opt out through the cookie choice or by email. California residents may request access, deletion and correction.
Brazil. Under the LGPD you have rights similar to those above; contact us at the same address.
13. Changes
If we change this policy in a meaningful way, we will update the date at the top and, where appropriate, tell you by banner or email. Questions about your data? Contact us. Related: Terms of Use.