This policy explains what Rashi Mitra, operated by Rashi Mitra, collects, why, and your rights under India’s Digital Personal Data Protection Act, 2023.
What we collect
- Birth details you enter: name (optional), date, time and place of birth, and gender (optional). These are needed to compute your chart.
- Account details when you sign in: phone number or Google account email and name.
- Your chat messages and the replies, so that the conversation can continue and so you can see your history.
- Purchase records: what you bought, when, and the Razorpay payment identifiers. We do not receive or store card numbers or UPI credentials.
- Technical data such as device type and approximate usage, for keeping the service working.
Why we use it
- To compute your chart and answer your questions. This is the sole purpose for your birth details.
- To run your account, credits and purchases.
- To improve the quality of readings, using conversations in aggregate.
- To comply with law, including tax and payment regulations.
We do not sell your data and do not use it for advertising.
Who processes it for us
- Anthropic (United States): the AI model that generates replies receives your chart data and messages for processing. Anthropic does not use this data to train its models under its commercial terms.
- Amazon Web Services (Mumbai region): our servers and database, where accounts, charts, conversations and purchase records are stored.
- Razorpay (India): payment processing.
- OpenStreetMap and GeoNames (place lookup; only the place name you type is sent).
Retention
Your account data is kept while your account exists. Conversations are kept so you can refer back to them. If you delete your account, personal data is deleted within 30 days except purchase records we must keep for tax purposes (up to 8 years, as required).
Your rights
You can ask to see, correct or delete your personal data, withdraw consent, or raise a grievance by emailing support@rashimitra.in from the phone number or email linked to your account. We respond within 30 days. Our grievance officer can be reached at the same address.
Children
The service is for adults. We do not knowingly collect data from anyone under 18.
Security
Data is transmitted over HTTPS and stored with access controls. No system is perfectly secure; if a breach affects you, we will notify you as required by law.
Changes
We may update this policy and will post the new date above.