Skip to main content
CELESTIALCELESTIAL

DPDP Notice (India)

Notice under the Digital Personal Data Protection Act, 2023 · Last updated: April 2026

This notice explains how CELESTIAL collects, processes, and protects personal data of Data Principals located in India, and how you may exercise your rights under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

1. Data fiduciary

CELESTIAL (operated by the entity disclosed in our Legal page) is the Data Fiduciary in respect of personal data you provide to us through our website, mobile apps, and related services.

2. Personal data we collect

  • Account data: name, email, phone (for SMS auth), password hash.
  • Astrological data: date, time, and place of birth — used solely to compute your charts and personalize content.
  • Payment data: processed by Stripe / Razorpay; we do not store full card numbers.
  • Usage data: pages viewed, features used, errors encountered (via Sentry, with PII redacted).
  • Conversation data: inputs and outputs from our Divine AI feature, retained for safety and quality review.

3. Purpose & lawful basis

We process personal data based on your consent (granted at sign-up and at subscription) and for performance of the contract you enter with us when purchasing a service. Specific purposes:

  • Providing requested astrological, spiritual, and AI guidance services.
  • Billing, invoicing, and fraud prevention.
  • Communicating service updates, receipts, and (with separate consent) marketing.
  • Complying with applicable laws, including the PCPNDT Act, 1994.

4. Your rights as a Data Principal

  • Right to access: request a summary of personal data we hold about you.
  • Right to correction: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data (subject to legal retention obligations).
  • Right to grievance redressal: contact our Grievance Officer (below).
  • Right to nominate: nominate another individual to exercise your rights in the event of your death or incapacity.
  • Right to withdraw consent: withdraw at any time from account settings or by emailing us.

5. Data retention

Account data is retained while your account is active and for up to 90 days after account deletion (to handle support, billing disputes, and chargebacks). Conversation data is retained for 12 months. Payment records are retained as required by tax law (7 years).

6. Cross-border transfers

Personal data may be processed in jurisdictions where our service providers operate (database in AWS US-East, AI inference in the United States via Anthropic and OpenAI). We use contractual safeguards to protect your data in transit and at rest.

7. Children

We do not knowingly process personal data of any child under 18. See our Disclaimer. If you believe a child has shared data with us, contact our Grievance Officer for prompt deletion.

8. Grievance Officer

Email: grievance@thecelestial.xyz
Response timeline: we acknowledge within 72 hours and substantively respond within 30 days, in line with DPDP requirements.

If unsatisfied with our response, you may approach the Data Protection Board of India.

9. Changes to this notice

We will notify you of material changes by email and on this page. Continued use of the service after a change constitutes acceptance of the updated notice.

See also: Privacy Policy, Terms, Refunds, Disclaimer.