Privacy Policy

Effective date: 20 October 2026

Kartexa, Unnao ("we", "us") is the data fiduciary for personal data processed through AvenAstro. This policy explains what we collect, why, who receives it, how long we keep it and your rights under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and related rules, as in force from time to time. The Platform is for adults only (18+); we do not knowingly process children's data.

1. Data we collect

• Account: name, email address, password (stored only as a one-way hash), role, login and security events, optional two-step login secret (encrypted).
• AI chat intake: name, date of birth, place of birth, optional birth time, optional phone, and your chat messages.
• Location: only if you press the location button, your approximate (about 1 km) or, if you choose, precise coordinates and the city, state and country derived from them. Birthplace is separate from current location.
• Bookings and support: session times, notes you write, reviews, support tickets and messages.
• Payments: order details, amount, currency, provider reference numbers and status. Card, UPI and bank credentials are handled by Razorpay or PayPal and are not stored by us.
• Astrologers: profile details and, when you request a payout, KYC data (see section 5).
• Technical: IP address, device and browser data in security and audit logs.

2. Why we use it (purposes)

• To create and secure your account and verify your email.
• To deliver purchases, sessions, AI replies, reminders and receipts.
• To personalise AI replies from the birth details you give.
• To process payments, prevent fraud and keep financial records.
• To keep the Platform safe, including moderation of unsafe content.
• To comply with law and respond to lawful requests.

We rely on your consent and on legitimate uses permitted by law (such as performing a contract you asked for, security, and legal compliance). You may withdraw consent for optional processing (for example saved birth details or location) at any time.

3. Who receives your data

• Groq (AI model provider, outside India): receives your chat messages and the intake details used to personalise replies in order to generate answers.
• Razorpay and PayPal: payment processing.
• Our email delivery provider: transactional emails.
• Hosting and infrastructure providers, and mapping/geocoding services (OpenStreetMap Nominatim or the configured provider) which receive coordinates or place text you submit.
• The astrologer you book receives your name, email, session time and any note you provide.
• Authorities, courts and regulators when legally required.

We do not sell personal data. Some providers process data outside India; we use them under contractual safeguards and applicable law.

4. Retention

• Chat conversations: deleted automatically 90 days after they are created, or earlier on request.
• Saved birth details and location: until you delete them (Account page) or close your account.
• Payment, order and invoice records: retained for the period required by tax, accounting and company law.
• Security and audit logs: retained for a limited period for security and then deleted.
• KYC documents (astrologers): see section 5.

After the retention period data is deleted or irreversibly anonymised.

5. Astrologer KYC and payout data

When an astrologer asks for a payout we collect: legal name, PAN, a masked Aadhaar copy (first eight digits hidden) or other document we accept, a bank proof, and bank account details (holder name, account number, IFSC). We use them only to verify identity, pay you, deduct and report taxes and meet legal obligations. We do not ask for or store your full Aadhaar number, and do not use Aadhaar for authentication. Uploaded files are encrypted at rest, kept outside the public web folder, and accessible only to authorised finance and administrator staff; every access is logged. Account and PAN numbers are stored encrypted. Documents are deleted when no longer needed for payouts, tax or legal compliance, and on account deletion unless the law requires us to retain them.

6. Security

We use TLS in transit, hashed passwords, encryption of secrets and KYC data at rest, role-based access, audit logs, rate limiting and backups. No system is perfectly secure. If a personal data breach affects you we will notify you and the authorities as required by law.

7. Your rights

You can: access a summary of your data (Account → Download my data); correct it; erase it; withdraw consent; and make a grievance. You may also nominate another person to exercise your rights in the event of your death or incapacity. To delete your account email aven@kartexa.com from your registered email address with the subject "Delete my aven astro account". See Account Deletion for how it works. Grievances go to our Grievance Officer (below); you may also approach the Data Protection Board of India once a grievance process with us has been completed.

8. Cookies and similar storage

We use one essential session cookie to keep you logged in and protect forms (CSRF), and your browser's local storage to remember your light/dark theme and to cache static files for the installable app. We do not use advertising or third-party analytics cookies. Because these are strictly necessary, they cannot be switched off without breaking the Platform.

9. Automated content

Aven AI Astro replies are generated by AI and are not reviewed by a human before being shown, but input and output are screened by automated safety rules. Reports of unsafe answers are reviewed by our team.

10. Changes

We will post updates here and, for material changes, ask you to review them.

11. Grievance Officer and contact

Abhishek, Grievance Officer, Kartexa, Unnao. Email: aven@kartexa.com. Phone: 9559996399. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

Version 2026-10-20