Privacy Policy
Tarasetu (tarasetu.in) Last updated: July 17, 2026 · Version: 1.0
Tarasetu processes data that says a lot about you: when and where you were born, and what you talk about with Tara, your Jyotish guide. We take that seriously. This policy explains, plainly, what data we process, why, on what legal basis, and what rights you have under Indian law.
1. Who we are
- Service: Tarasetu — conversational Vedic astrology (Jyotish) with AI, in English and Hindi.
- Role under the Digital Personal Data Protection Act, 2023 (DPDP Act): Data Fiduciary.
- Privacy contact: namaste@tarasetu.in
- Website: https://tarasetu.in
2. What data we process, and why
| Data | Why | Legal basis (DPDP) | |---|---|---| | Name, email | Your account and signing in (one-time codes) | Consent, given at signup | | Birth date, time and place | Computing your kundli — the core of the service | Consent, given when you enter it | | Conversations with Tara | Answering you, and remembering your context between sessions | Consent | | Payment records (amount, plan, status) | Credits and subscriptions. Card/UPI details are handled by our payment processor (Razorpay); we never see them | Consent, for the purpose of the purchase | | Technical logs (IP, timestamps) | Security, abuse prevention, rate limiting | Legitimate use: security of the service | | Analytics | Understanding what works, in aggregate | Consent (cookie banner); cookieless analytics need none |
We do not sell your data. We do not use your data to train AI models. We do not share your birth data or conversations with advertisers — ever.
3. Who processes data on our behalf
We use a small set of processors, each bound by contract: hosting and compute (Vercel), database and authentication (Supabase), AI inference (Anthropic — conversations are sent for processing, not for training), email delivery (Resend), and payments (Razorpay, in India). International transfers happen only to jurisdictions permitted under the DPDP Act and its rules.
4. How long we keep it
Your account data and kundli: while your account exists. Conversations: while your account exists, so Tara can remember you. If you delete your account, everything — profile, kundli, conversations, credits, memory — is permanently deleted. Payment records are kept as long as Indian tax and accounting law requires.
5. Your rights (DPDP Act, 2023)
You have the right to: access a summary of your data and how it is processed; correction and erasure; grievance redressal; and to nominate a person to exercise your rights if you are unable to. Write to namaste@tarasetu.in — we respond within 30 days. You can also delete your account yourself at any time from your account page; deletion is immediate and irreversible. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
6. Age
Tarasetu is for people aged 18 and over. We do not direct the service at minors and do not knowingly process children's data; if we detect an account belonging to someone under 18, we will delete it.
7. Security
Data is encrypted in transit, database access is scoped with row-level security, credits and readings are enforced server-side, and admin access requires two factors. No system is perfect; if a breach ever affects your data, we will notify you and the Data Protection Board as the DPDP Act requires.
8. Changes
If this policy changes materially, we will tell you on this page and, for significant changes, by email. The date at the top always reflects the current version.