Privacy policy

Anvaya (useanvaya.com) is owned and operated by Anvaya Vedic Sciences Pvt Ltd ("we," "us," or "our"). This Privacy Policy explains what personal information we collect about your use of the Service, how we use and protect it, who we share it with, and the choices available to you.

Astrology services rely on sensitive life data — birth date, time, place, relationships, and the events you choose to record. We treat that data accordingly. By creating an account or using the Service, you acknowledge this policy. If you do not agree, please do not use the Service.

We design for users in India and comply with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP) where it applies. If you access the Service from other regions, you may have additional rights under local privacy law.

Account and identity

• Email address and/or phone number — used for one-time-password login, account recovery, and transactional email.
• Display name, country preference, and account settings.
• Authentication events (sign-in, identifier changes) — stored with hashed identifiers where possible.

Birth and chart data

• Birth date, time, place, gender, and notes you enter for each person on your account.
• Pramāṇa questionnaire answers, confidence scores, and calibration history.
• Computed chart bundles, samhita chapters, sambandha analyses, Panchang preferences, Muhurta searches, and samvāda messages.
• Life events, feedback, and ratings you submit within readings.
• Parivara (family constellation) links, sharing grants, and access permissions you configure.

Payment and billing

• Transaction amounts, currency, product purchased, credits granted, and payment status.
• Payment-processor references and invoice identifiers — we do not store full card numbers or UPI PINs.
• Founding-cohort, invite, and promotional grant metadata tied to your account.

Technical, security, and usage

• Device and browser type, operating system, IP address, and request logs for security, fraud prevention, and reliability.
• Optional product analytics if you accept non-essential cookies (see §9).
• Error and performance reports when error monitoring is enabled in our environment.
• Support correspondence and in-product feedback you send us.

We use the information above to:

• Provide the Service — compute charts, run pramāṇa, generate samhita and sambandha readings, deliver samvāda answers, and operate included tools (Panchang, Sangati, Pravāha, Muhurta, Janma Akshara).
• Authenticate you, secure your account, and prevent fraud or abuse.
• Process payments, issue receipts and tax-compliant invoices, and manage credits.
• Send transactional email (receipts, generation complete, sharing invites, security notices).
• Respond to support requests, investigate delivery failures, and improve product quality.
• Comply with legal obligations (tax, accounting, lawful government or court requests).

Readings, $samvāda replies, and related prose may be produced through automated pipelines, including large-language-model steps guided by fixed methodology prompts. Outputs are generated for your account and are not used to train public third-party foundation models unless we tell you otherwise in a specific feature announcement.

Parts of the Service use automated computation and AI-assisted language generation. This includes chart calculation, $pramāṇa scoring, $samhita and $sambandha prose assembly, and $samvāda responses. These systems operate on the birth data and answers you provide; they do not make binding decisions about you in the legal sense.

AI-generated text may contain omissions or inaccuracies. It is provided for personal reflection and entertainment, not as professional advice. See our Terms of Service for the full disclaimer.

We process personal data as needed to perform our contract with you (deliver the Service you purchased or registered for), for legitimate interests (security, product improvement, and fraud prevention), and to comply with legal obligations (tax and accounting records). Where consent is required — for example optional analytics cookies — we ask before enabling it. You may withdraw consent for non-essential processing without affecting the lawfulness of processing before withdrawal.

We do not sell your personal information. We share data only as described below:

Service providers — trusted vendors who process data on our instructions, including:

• Supabase — database, authentication, and row-level security.
• Vercel — hosting, edge delivery, and serverless functions.
• Resend — transactional email delivery.
• Dodo Payments — see Merchant of Record below.
• Google Maps — birth-place autocomplete when you search locations.
• Compute infrastructure — deterministic chart calculation and reading generation.
• Anthropic or similar providers — LLM API calls for calibration and prose generation, when configured.
• Sentry or similar — error and performance monitoring, when enabled.

Merchant of Record (payments) — For card, UPI, and wallet checkout, Dodo Payments receives billing identity and payment metadata as the legal seller and may process that data under its own privacy obligations. We receive transaction amounts, product purchased, credits granted, payment status, and payment-processor references in our ledger; we do not receive or store full card numbers or UPI PINs. For payment-specific privacy rights, see Dodo Payments's privacy policy. Billing history and statutory invoices are available through Dodo Payments's customer portal and checkout confirmation emails.

Family and sharing — when you grant another user view access to a samhita, invite someone to your parivara, or request access to a chart held by family, we share the minimum data needed to honour that permission. You control grants and may revoke them in-product.

Legal and safety — we may disclose information if required by law, to respond to lawful requests, to protect the rights and safety of users or the public, or in connection with a merger, acquisition, or asset sale with notice where required by law.

• Account and chart data: retained while your account is active.
• After you schedule account deletion: erased after the in-product grace period (typically seven days), except as noted below.
• Payment transactions: anonymized and retained roughly six to eight years for Indian tax and accounting compliance.
• Deletion audit logs: minimal records (hashed user identifier, timestamps) may be kept to prove erasure was performed.
• Support tickets and feedback: retained as long as needed to resolve issues and for quality review.
• Backups: encrypted backups may persist briefly after erasure before rotating out of active systems.

• Access and update profile and birth data in the app where editing is supported.
• Add or update email and phone from Account settings (subject to collision rules).
• Manage sharing grants and revoke access to your charts at any time.
• Delete your account from Account → Delete account (DPDP erasure flow).
• Opt out of non-essential analytics via the cookie banner.
• Contact us to exercise rights under DPDP or other applicable law — access, correction, erasure, grievance, and nomination of a representative.

Data export: bulk JSON export is not offered in the current release. You may request a copy of key account information by emailing support@useanvaya.com from your registered address; we will respond within reasonable timelines required by law.

We use essential cookies and local storage for login sessions, security, and core functionality. Non-essential product analytics load only if you choose Accept analytics in the cookie banner; choosing Essential only disables those scripts.

You can change your choice by clearing site data or using the banner when we show it again after updates. Your browser may also offer controls to block or delete cookies.

The Service is not directed to anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us data, contact us and we will take steps to delete it.

We use industry-standard measures including encryption in transit (TLS), access controls, and row-level security on database tables. No method of transmission or storage is completely secure. Use a strong, unique login method and notify us promptly if you suspect unauthorized access to your account.

Our processors may store or process data outside India (for example in United States or European Union regions for hosting and AI APIs). We rely on contractual safeguards and provider compliance programs appropriate to the transfer, including standard contractual clauses where applicable.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. For material changes, we may also notify you by email or in-product notice where required by law. Continued use after changes constitutes acceptance where permitted by law.

Privacy questions, data requests, or DPDP grievances: support@useanvaya.com. Please include the email or phone on your account so we can verify your identity. We aim to acknowledge requests within a few business days and resolve them within timelines required by applicable law.