Privacy Policy

Last updated: 13 September 2026

This Privacy Policy explains, in plain language, what personal data TrueLoger actually collects through its website and app, why, who we share it with, and what rights you have over it. It is written to reflect the categories of data our platform is actually built to process — not a generic template — and is aligned with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 to the extent those provisions are in effect.

Data → Purpose → Retention → Your Rights. Every category of data below follows that structure so you can see exactly what it's for and how long it's kept, rather than a single long paragraph.

1. Who This Policy Covers

This Policy applies to anyone who visits, registers on, or purchases from the TrueLoger website, operated by [Legal Entity Name] ([company/proprietorship/LLP — registered under the laws of India]), registered at [Registered Business Address, City, State, PIN Code] ("TrueLoger", "we", "us"). If you only use our free tools (Kundli, horoscope, numerology calculators, etc.) without creating an account, only the technical/browser data described below applies to you.

2. Data We Actually Collect

Organized by the part of the platform that collects it — we do not list categories we don't actually use.

Account data

What:
Name, email, phone (if provided), authentication provider (email/password or Google Sign-In).
Why:
Creating and securing your account, signing you in, and contacting you about your orders/bookings.
Retention:
For the life of your account; deleted when you delete your account (see Data Deletion page), except where a linked order/payment record is separately retained.

Profile data

What:
Date of birth, time of birth, place of birth, resolved coordinates and timezone, gender (if provided).
Why:
This is the single source of truth for every astrological calculation on the platform — free tools, paid consultations, and personalized reports. It is captured once in your profile and reused, never re-typed per purchase.
Retention:
Kept while your account exists; a personalized report already generated uses a frozen SNAPSHOT of this data taken at the time you purchased it, so a later profile edit never silently changes an already-delivered report.

Order & payment data

What:
What you purchased, price/discount/tax breakdown, coupon codes used, and payment references/status from our payment gateway (Cashfree). We do not receive or store your card, UPI, or net-banking credentials — those are captured directly by Cashfree.
Why:
Processing your purchase, fulfilling it, showing your order history, and handling refunds/disputes.
Retention:
Retained for accounting, tax, and dispute-resolution purposes even after account deletion — see the Data Deletion page.

Consultation & meeting data

What:
Service booked, duration, your preferred date/time, and — once a Google Meet link is created — the meeting's Google Calendar event details.
Why:
Scheduling your consultation and creating a real Google Meet link for it (see Section 5 on Google).
Retention:
Kept with the related order record.

Personalized report data

What:
The immutable profile snapshot used to generate the report, the calculated astrological data (planetary positions, houses, dashas, yogas, etc.), the AI-generated narrative sections, and the final PDF.
Why:
Generating and delivering your report, and letting you view/re-download it later.
Retention:
Kept as part of your order history; the PDF is stored privately and is never publicly accessible (see Section 8).

Astrologer application data

What:
If you apply to register as an astrologer: name, email, phone, location, experience, expertise, languages, a written "about you", and your uploaded resume file.
Why:
Reviewing your application to join TrueLoger's consultant roster.
Retention:
Kept while the application is active/under review; the resume file is stored privately and is only ever accessible to admins reviewing applications.

Support & grievance data

What:
Whatever you write in a Contact, Grievance, or order/report/meeting support request — your name, email, category, message, and any order/report/meeting reference you attach.
Why:
Responding to your request.
Retention:
Kept for accountability/audit purposes; see the Data Deletion page.

Technical data

What:
Standard web-server/browser data such as IP address and basic request logs, collected automatically by our hosting provider (Vercel) as part of normal operation — not collected or processed separately by TrueLoger's own code.
Why:
Security, abuse prevention, and diagnosing technical issues.
Retention:
Governed by our hosting provider's own log-retention practices.

3. Why We Collect It

Every category above exists to run a specific, real feature of the platform — never collected merely "because it's common for websites to collect it." If a field isn't listed in Section 2, we don't collect it.

4. AI Processing (Reports)

Personalized reports combine two distinct things: (a) real astrological calculations, performed entirely by our own deterministic calculation engine — never invented or altered by AI — and (b) narrative interpretation of those calculations, generated section-by-section by an AI model (Claude, via the OpenRouter API) based on developer-written prompts.

  • What is sent: only the specific calculated data fields a given report section actually needs (e.g. planetary positions for a planetary-positions section) — never your name, contact details, or full profile, and never the whole report's data in one request.
  • Why: to write the human-readable interpretive text that makes up each report section.
  • Retention by the AI provider: we have not independently verified OpenRouter/Claude's data-retention practices for API requests at the time of writing this page, and do not claim the provider retains no data at all — this is a legal-review item (see LEGAL_REVIEW_CHECKLIST.md). Do not rely on this page as a representation of the provider's own retention policy; refer to OpenRouter's and Anthropic's own current terms.

AI-generated interpretation is not a substitute for professional medical, legal, or financial advice, and can contain errors — see our Disclaimer.

5. Third Parties We Share Data With

  • Firebase (Google) — authentication and our primary database (Firestore) and file storage. If you sign in with Google, Google shares your basic account info (name, email) with us for that purpose; we never see or receive your Google password.
  • Cashfree Payments — processes your payment. Cashfree receives whatever payment/customer information it needs to process the transaction; we do not receive your card/UPI credentials in return.
  • Google Calendar / Google Meet — used to create a real meeting link for paid consultations. Only your name, email, and appointment schedule are shared with this integration, only for bookings that require a meeting.
  • OpenRouter / Anthropic (Claude) — processes the specific report-section data described in Section 4.
  • Resend — our transactional email provider, used to send order confirmations, booking confirmations, and similar account emails. Resend receives your email address and the content of the specific email being sent.
  • Vercel — our hosting provider, which necessarily processes standard request/technical data to serve the website.

We do not sell personal data to anyone, and do not use third-party advertising or marketing-analytics trackers (see Section 6).

6. Cookies & Tracking

See our dedicated Cookie Policy for the full, audited list of what this site actually stores in your browser. In summary: only essential authentication-session and cart-persistence storage, and whatever cookies Cashfree's own checkout page sets during payment. No advertising or marketing-analytics cookies are currently used.

7. How Long We Keep Data

Retention is described per data category in Section 2. Where an exact legally-mandated retention period applies (for example, under tax or accounting law) and has not yet been confirmed by legal review for this business, that is flagged as a configuration/legal-review item rather than an invented number — see LEGAL_REVIEW_CHECKLIST.md.

8. Security

See our dedicated Privacy & Security page for how we actually protect your data (access controls, private storage for reports/resumes, server-side authorization, etc.). We do not claim any specific security certification unless we actually hold it.

9. Your Rights

Under the Digital Personal Data Protection Act, 2023 (to the extent its provisions are in effect) and applicable Indian law, you may:

  • Access the personal data we hold about you;
  • Request correction of inaccurate or incomplete data;
  • Request erasure of your personal data, subject to our legal/accounting retention obligations (see Section 7 and the Data Deletion page);
  • Withdraw consent where consent is the basis for processing, as easily as you gave it;
  • Raise a grievance with us, and, where applicable, escalate it to the relevant authority.

You can exercise any of these rights via our Contact page (select "Privacy Request"), or delete your account directly from Account Settings.

11. Children

The platform is intended for users 18 years of age or older, consistent with the eligibility requirement in our Terms & Conditions. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Policy as our services or applicable law change. The "Last updated" date at the top reflects the most recent revision; material changes will be highlighted where reasonably practicable.

13. Contact & Grievance

For any question about this Policy, or to exercise a right described in Section 9, contact us at support@trueloger.com or via our Contact page. For a formal grievance, see our Grievance Redressal page.

This document describes TrueLoger's actual data practices as implemented. It is not a substitute for legal advice, and the placeholder business/legal details in it (see Section 1 and 13) require confirmation by qualified counsel before this is relied upon as final. See LEGAL_REVIEW_CHECKLIST.md.