Privacy Policy

Last Updated: May 2025

1. Who We Are

CosmosGuide (operating at mycosmosguide.com) is a Vedic astrology and numerology platform offering AI-powered readings, compatibility tools, and consultations. We are based in India and operate as a sole proprietorship / private individual practitioner service.

For privacy matters, contact us at: jyothisairam@twinstarsgroup.com

2. Data We Collect

We collect data in the following ways:

• Account Registration: Name, email address, and password (hashed — never stored in plain text)
• Profile Information: Date of birth, time of birth, place of birth, phone number, city — provided voluntarily for accurate readings
• Consultation Bookings: Name, email, phone, birth details, and your message/query
• Payment Information: Transaction IDs and order references processed by Razorpay. We do not store card numbers, CVVs, or UPI PINs — these are handled entirely by Razorpay's PCI-DSS compliant systems
• Usage Data: Pages visited, tools used, oracle session logs (question count, credits used)
• Communications: Emails, messages, or reviews you send us

We do not collect sensitive personal data such as biometric data, financial account details, caste, religion, or health records beyond what you voluntarily share for astrology purposes.

3. How We Use Your Data

• To create and manage your CosmosGuide account
• To generate accurate astrological charts, numerology reports, and AI-powered readings using your birth data
• To process payments and manage oracle credit balances
• To respond to consultation booking requests and communicate with you
• To send account-related notifications (order confirmations, password resets)
• To improve our tools, content, and services based on aggregated, anonymised usage patterns
• To display approved testimonials on our website (only with your submitted consent via the review form)

We do not sell your personal data to any third party. We do not use your data for targeted advertising.

4. Third-Party Services

CosmosGuide uses the following trusted third-party services, each with their own privacy practices:

• Hostinger — Website hosting provider. Our website files are hosted on Hostinger's servers (EU/India region). Hostinger may process server logs including IP addresses. Hostinger Privacy Policy →
• Supabase — Database and authentication provider. Your account credentials and profile data are stored securely in Supabase's PostgreSQL database. Data is encrypted at rest and in transit. Supabase Privacy Policy →
• Razorpay — Payment gateway for processing INR transactions (UPI, cards, net banking, wallets). Razorpay is PCI-DSS Level 1 certified. We only receive a payment reference ID — never your card or bank credentials. Razorpay Privacy Policy →
• Anthropic Claude API — Powers our AI reading feature. Birth chart data is sent to the API to generate interpretations. Anthropic processes this data per their API terms. No personally identifiable information beyond birth details is transmitted. Anthropic Privacy Policy →

5. Data Storage & Security

• All data is stored in India or EU-region servers compliant with applicable data protection laws
• Passwords are hashed using bcrypt via Supabase Auth — we cannot read your password
• All connections to CosmosGuide are encrypted via HTTPS/TLS
• Access to the database is restricted to authorised administrators only
• We retain your data for as long as your account is active, or up to 3 years after your last login, whichever is earlier, unless deletion is requested
• Payment records are retained for 7 years as required under Indian accounting laws

While we take reasonable precautions, no system is 100% secure. Please contact us immediately if you suspect unauthorised access to your account.

6. Your Rights under the DPDP Act 2023

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (your "right to be forgotten"), subject to legal retention requirements
• Grievance Redressal: Lodge a complaint with us, and if unresolved, with the Data Protection Board of India
• Withdraw Consent: Withdraw consent for data processing at any time (note: this may affect your ability to use the service)
• Nominate: Nominate another person to exercise rights on your behalf in case of death or incapacity

To exercise any of these rights, email us at jyothisairam@twinstarsgroup.com with the subject line "Data Rights Request". We will respond within 72 hours.

7. Cookies & Local Storage

CosmosGuide uses browser localStorage (not third-party tracking cookies) to:

• Keep you logged in between sessions (authentication token)
• Remember your baby name shortlist
• Store temporary calculation preferences

We do not use advertising cookies, cross-site tracking cookies, or any third-party analytics cookies. You can clear localStorage at any time via your browser settings.

8. Children's Privacy

CosmosGuide is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has submitted information to us, please contact us immediately and we will delete it promptly. Under the DPDP Act 2023, processing of children's data requires verifiable parental consent.

9. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify registered users of significant changes via email. Continued use of CosmosGuide after updates constitutes acceptance of the revised policy. The "Last Updated" date at the top of this page reflects the most recent revision.

10. Contact & Grievance Officer

For privacy concerns, data requests, or grievances:

If your grievance is not resolved within 30 days, you may approach the Data Protection Board of India once it is constituted under the DPDP Act 2023.