Privacy Policy

Converseio Private Limited (“we”) runs Sarvatas Chakras. This policy explains what personal data we collect, why, who we share it with, and the rights you have under India's Digital Personal Data Protection Act, 2023. We are the “data fiduciary” for this data.

What we collect

• Birth details you enter for the free daily chakra or a report: name, gender, date, time and place of birth, and the place's coordinates. If you save family members to your account, we keep their birth details too.
• Contact details: your email address and mobile number, which we ask for at checkout and for the free daily reading (see below).
• Order and payment status from Cashfree Payments: order ID, amount, and whether the payment succeeded. We never receive your card, UPI or bank details.
• Messages you send us, such as correction requests or support emails.
• Usage data: pages visited, device type, referring site or campaign, and an approximate city worked out from your IP address. We don't store the IP address itself for analytics.

We don't ask for health, financial or identity documents, and we don't need them.

The free daily reading

To show you your day at /today we ask for a mobile number, an email address and your birth details. We check the number with a one-time code sent to your WhatsApp through AiSensy, and we record that you agreed to this policy and when. We use the email to send you your readings and occasional offers, and to let you keep your details by signing in with it; we don't treat the email as confirmed until you sign in with it. Write to [email protected] and we will delete all of this.

Why we use it

• To calculate your chakra or report, email it to you and keep it in your account (the reason you gave it to us).
• To sign you in, using a one-time link sent to your email.
• To handle corrections, refunds and support requests.
• To understand, in aggregate, how people find and use the site so we can improve it.
• To meet legal, tax and accounting obligations and to prevent fraud.

We don't sell your data, share it with advertisers, or use your birth details for anything other than preparing your readings.

Cookies

• sc_session (essential): keeps you signed in. It is removed when you sign out.
• sc_lead (essential): keeps your verified number on this device so we can show your day. It lasts up to 90 days and is removed when you sign out or clear your cookies.
• sc_vid (analytics): a random ID that lets us count returning visits and where they came from. Set only if you accept analytics; it lasts up to one year and contains nothing about you. We note your city and device type, never your IP address. Blocking it doesn't affect ordering.
• sc_avid, sc_sid, sc_attr (essential, kept in your browser tab, not cookies): if you don't accept analytics we still count the visit anonymously, with a random ID that is erased when you close the tab, so we can't tell a returning visitor apart. sc_attr remembers which ad or link brought you here, so we can tell which ads work; it is saved with your order if you buy.
• sc_consent (essential): remembers whether you accepted analytics. It lasts one year.
• _ga, _ga_* (analytics, Google Analytics): tells us apart visits and sessions. Set only if you accept analytics; they last up to two years.
• _clck, _clsk, MUR, CLID (analytics, Microsoft Clarity): record a session and show it to us as a heatmap or recording. Set only if you accept analytics; they last up to one year.
• _fbp (advertising, set by Meta): lets Meta tell us which of our Facebook and Instagram ads led to a visit or an order. It lasts up to 90 days. Blocking it doesn't affect ordering.

We use the Meta Pixel to measure our ads on Facebook and Instagram. It tells Meta which pages you visit here and, when you buy, the product and price. We don't send Meta your birth details.

Who we share it with

Only with the service providers we need to run the site, each for the purpose listed:

• Cashfree Payments (India): to take your payment.
• Zoho ZeptoMail (India): to send your report and sign-in emails.
• AiSensy (India): to send the one-time code to your WhatsApp number.
• Google Maps Platform: to look up the birthplace you type.
• Anthropic (Claude, USA): for the Annual report only, chart facts (nakshatra placements, dated periods and the ages at which they fall) are sent to draft the written readings. Your name, email, phone number and birth date, time and place are not sent. Weekly and Monthly reports don't use AI.
• Google (Google Analytics, USA): to measure how the site is used, only if you accept analytics. Page visits and device details are sent; your birth details and contact details are never sent.
• Microsoft (Clarity, USA): to record how visitors use the site (clicks, scrolling, page movement) for us to review, only if you accept analytics. Nothing is recorded for visitors who decline.
• Meta Platforms (Facebook and Instagram): to measure our ads. When you order, your email and phone number are sent to Meta in hashed (scrambled) form, with the product and price, so Meta can match the sale to an ad; Meta can't read them back. Your birth details are never sent.
• Cloudflare: to protect the site and deliver it quickly, and (Cloudflare R2, Asia-Pacific region) to keep an encrypted copy of our nightly backups for 30 days.
• Our hosting provider (servers in Mumbai, India): where the site and your data are stored.

We may also disclose data where Indian law requires it, for example to a court or a tax authority.

Where it is stored

Your data is stored on our servers in India. An encrypted copy of our nightly backup is kept with Cloudflare R2 in its Asia-Pacific region, which may be outside India, and is deleted after 30 days; it can only be read with a key we hold. The Annual report's chart facts are processed by Anthropic in the United States, and Meta receives the ad-measurement data described above, which it may process outside India. Google and Microsoft receive analytics data only if you accept, and may process it in the USA. Indian law permits these transfers.

How long we keep it

• Your account, saved birth details and reports: until you ask us to delete them, or 3 years after your last order or sign-in, whichever comes first.
• Free daily reading details (verified number, email, birth details): until you ask us to delete them, or 3 years after your last visit, whichever comes first.
• Order and invoice records: as long as tax and company law require (currently up to 8 years). Only the order record is kept, not your birth details.
• Analytics: page-level events for 90 days, and visit summaries for 12 months.
• Sign-up codes (the number and email you gave when asking for a code): deleted the next time that number asks for a code once they are over an hour old, or sooner if you ask us to.
• Sign-in links expire after 15 minutes and can be used only once.

Your rights

You can ask us to:

• show you the personal data we hold about you;
• correct or update it (you can also do much of this in your account);
• delete it, or withdraw your consent (we will stop processing it and erase it unless the law requires us to keep part of it);
• let someone you nominate exercise these rights if you die or become unable to.

Write to [email protected]. We reply within 30 days. If you're not satisfied, you can complain to our Grievance Officer (below) and then to the Data Protection Board of India.

Children

You must be 18 or older to buy a report or create an account. A parent or guardian may enter a child's birth details to order a report for them; by doing so they give consent on the child's behalf. We don't knowingly collect data from children directly, and we don't track children or target advertising at them.

Security

Data is sent over HTTPS, stored on access-controlled servers, and backed up in encrypted form. Only people who need it to fulfil your order can access it. If a breach affecting your data occurs, we will tell you and the Data Protection Board as the law requires.

Changes

If we change this policy, we will update the date at the top of this page, and email you about significant changes if you have an account.

Grievance Officer

Hemal Patel, Director, Converseio Private Limited, Mumbai, India · [email protected]