Celestara ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding it.

1. Information we collect

Account information — email address, name, hashed password.

Astrological information — your birth date, birth time, and birth location. This data is essential for generating accurate Vedic charts.

Usage information — pages visited, readings generated, preferred language, preferred theme.

Payment information — processed securely by Razorpay; we do NOT store your card or UPI details on our servers.

2. How we use your information

To generate accurate birth charts, dashas, horoscopes, and AI readings
To personalize your experience (language, theme, age-based recommendations)
To process payments through Razorpay (no card data hits our servers)
To send transactional emails (OTP, password reset, receipts)
To improve the Service and detect abuse

3. AI processing

Readings are generated using Google Gemini (via the Emergent LLM Key). Your birth data and prompt are sent to Google's API to produce the reading; neither we nor Google use this data to train public models. Generated readings are cached on our servers for up to 7 days so you can revisit them without re-paying.

4. Data sharing

We do NOT sell, rent, or trade your personal data. We share data only with:

Razorpay — to process your payments (PCI-DSS compliant)
Google (Gemini) — to generate AI readings
Resend — to send transactional emails (OTP, password reset)
Law enforcement — only when required by a valid legal order

5. Data retention

We retain your account data for as long as your account is active. Reading caches are auto-purged after 7 days. You can request deletion of your account and all associated data at any time (see "Your rights" below).

6. Security

We use industry-standard security: passwords are hashed with bcrypt, authentication uses signed JWTs in sessionStorage (auto-cleared on tab close), all traffic is HTTPS, and optional 2FA is available in your profile.

7. Your rights

You have the right to:

Access — request a copy of all data we hold about you
Correct — update inaccurate data directly in your Profile
Delete — request deletion of your account and all data
Export — download your readings via the PDF/PNG export feature on each reading page
Withdraw consent — stop using the Service at any time

To exercise any of these rights, email webcelestara@gmail.com. We respond within 30 days.

8. Cookies & sessionStorage

We use sessionStorage for your auth token (cleared when you close the tab) and localStorage only for non-sensitive preferences (theme, language, dismissed banners). We do NOT use third-party advertising cookies.

9. Children

The Service is intended for users aged 18 and above. We do not knowingly collect personal information from children under 18.

10. Changes

We may update this Privacy Policy. Changes are reflected in the "Last updated" date at the top. Material changes will be communicated via email where possible.

11. Contact

For privacy-related questions, write to us at webcelestara@gmail.com.