Privacy Policy

Personal Information

• Account Information: Name, email address, phone number, profile picture
• Birth Data: Date of birth, time of birth, place of birth (essential for astrological calculations)
• Profile Details: Gender, relationship status, spiritual preferences, interests
• Payment Information: Billing address, payment method details (processed securely via Stripe)

Spiritual & Astrological Data

• Astrological Charts: Generated kundli, birth charts, planetary positions
• Consultation History: AI chat conversations, divine guidance sessions, spiritual questions
• Preferences: Spiritual practices, meditation preferences, remedy choices
• Matchmaking Data: Compatibility preferences, relationship goals, partner criteria

Technical Information

• Device Information: Device type, operating system, browser information
• Usage Data: App interactions, feature usage, session duration
• Location Data: General location for accurate astrological calculations (with consent)
• Sensor Data: Compass and accelerometer data for AR Vastu features (with consent)

Core Services

• Generate accurate astrological charts and horoscopes using Swiss Ephemeris calculations
• Provide personalized AI-powered spiritual guidance and divine consultations
• Offer compatibility analysis and matchmaking services based on astrological compatibility
• Deliver personalized remedies, gemstone recommendations, and spiritual practices
• Enable AR Vastu compass features using device sensors

Platform Enhancement

• Improve AI model accuracy through anonymized conversation analysis
• Personalize content recommendations and spiritual guidance
• Enhance user experience and platform functionality
• Provide customer support and technical assistance

Communication

• Send important service updates and notifications
• Deliver daily/weekly horoscopes and spiritual insights (with consent)
• Provide customer support and respond to inquiries
• Share relevant spiritual content and educational materials

Limited Sharing Scenarios

• Service Providers: Trusted partners who assist in platform operations (hosting, payment processing, analytics) under strict confidentiality agreements
• Matchmaking: Basic compatibility information shared with potential matches (with explicit consent)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In case of merger, acquisition, or sale of assets (with user notification)

Security Measures

• Encryption: All sensitive data encrypted in transit and at rest using industry-standard protocols
• Access Controls: Strict access controls and authentication for all team members
• Regular Audits: Periodic security assessments and vulnerability testing
• Secure Infrastructure: Cloud hosting with enterprise-grade security measures
• Data Backup: Regular encrypted backups with disaster recovery procedures

Retention Periods

• Account Data: Retained for the duration of your account plus 90 days after deletion
• Birth Charts & Astrological Data: Retained for 7 years for accuracy and historical analysis
• Payment Information: Retained for 7 years for tax and legal compliance
• Chat Conversations: Anonymized after 2 years, deleted after 5 years
• Usage Analytics: Aggregated data retained indefinitely, personal identifiers removed after 2 years
• Marketing Data: Retained until you unsubscribe plus 3 years for compliance

Data Storage Locations

• Primary Storage: AWS/Google Cloud servers in the United States and European Union
• Backup Storage: Encrypted backups in multiple geographic regions
• CDN Storage: Static content distributed globally for performance
• Analytics Storage: Anonymized data stored with third-party analytics providers

Data Deletion Process

• Account deletion requests processed within 30 days
• Backup systems purged within 90 days of deletion
• Some data may be retained for legal compliance (anonymized)
• Cached data removed from CDNs within 48 hours

Transfer Safeguards

• Standard Contractual Clauses: EU-approved data transfer mechanisms
• Adequacy Decisions: Transfers only to countries with adequate data protection
• Binding Corporate Rules: Internal policies ensuring consistent data protection
• Certification Programs: Compliance with international privacy frameworks

Regional Compliance

• GDPR (EU/UK): Full compliance with European data protection regulations
• CCPA (California): Consumer privacy rights and data transparency
• PIPEDA (Canada): Personal Information Protection and Electronic Documents Act
• LGPD (Brazil): Lei Geral de Proteção de Dados compliance
• PDPA (Singapore): Personal Data Protection Act adherence

Types of Cookies

• Essential Cookies: Required for basic site functionality and security
• Performance Cookies: Analytics and site optimization
• Functional Cookies: Remember your preferences and settings
• Targeting Cookies: Personalized content and advertising (with consent)

Third-Party Services

• Google Analytics: Website usage analytics and reporting
• Stripe: Payment processing and fraud prevention
• Firebase: Authentication and real-time database
• Cloudflare: Content delivery and security
• Intercom: Customer support and communication

Age Verification

• Users must confirm they are 13 or older during registration
• Birth date verification for astrological accuracy
• Parental consent required for users under 16 in EU
• Additional protections for users under 18

Parental Rights

• Parents can request deletion of their child's account
• Access to information collected about their child
• Ability to refuse further collection or use of information
• Contact us at privacy@celestial.com for child-related concerns

EU Representative

For EU residents: CELESTIAL EU Privacy Representative
Email: eu-privacy@celestial.com
Address: 789 European Plaza, Dublin, Ireland