1. Information We Collect

1.1 Information you provide directly

Data	When collected	Why
Name	Account signup / kundali form	Personalise your readings
Email address	Signup, Google OAuth, notification opt-in	Account access, notifications, support
Date of birth	Kundali, dasha, numerology forms	Generate your birth chart and predictions
Time of birth	Kundali, dasha forms	Accurate planetary position calculation
Place of birth	Kundali, dasha, career, love, health forms	Geographic coordinate lookup for chart
Password (hashed)	Email signup	Account security — stored as bcrypt hash, never plain text
Payment info	Pro subscription purchase	Processed by Razorpay — we never store card numbers

1.2 Information collected automatically

• Push notification token — endpoint and encryption keys stored when you enable alerts
• Session cookie — JWT token to keep you logged in (HttpOnly, expires in 30 days)
• Usage analytics — page views and feature usage via Google Analytics 4 and Microsoft Clarity
• IP address — logged by our hosting provider (Railway) for security
• Browser and device type — collected by analytics tools

1.3 Guest data

If you use our tools without an account, we store chart data anonymously for internal analytics. If you voluntarily provide your email via the opt-in prompt, we store it linked to that session only.

2. How We Use Your Data

• Generate and save your Vedic birth charts, dasha readings, compatibility reports, and predictions
• Send daily and monthly prediction push notifications (only if you opt in)
• Send transactional emails — account verification, password reset, support replies
• Send the weekly newsletter (only if you subscribe)
• Process Pro subscription payments via Razorpay
• Improve the product using anonymised analytics
• Respond to your support tickets

We do not sell your personal data to any third party. We do not use your birth data for any purpose other than generating your astrological readings.

3. Third-Party Services

Service	Purpose	Data shared	Privacy policy
Google OAuth	Sign in with Google	Name, email, profile picture	Google
Google Analytics 4	Usage analytics	Anonymised page views, events	Google
Microsoft Clarity	Session recordings, heatmaps	Anonymised mouse movements, clicks	Microsoft
Google Gemini AI	Generate AI interpretations	Chart data only (no name/email sent)	Google
Razorpay	Payment processing	Name, email, payment amount	Razorpay
Resend	Transactional email delivery	Email address, email content	Resend
Railway / Supabase	Hosting and database	All stored data (servers in the US)	Railway
Meta (Instagram Threads)	Auto-publish new article summaries to our official Threads account	Article title, excerpt, image and link only — no user personal data	Meta

4. Data Storage & Security

• All data is stored in a PostgreSQL database hosted on Supabase (servers in the United States)
• All connections are encrypted via TLS/HTTPS
• Passwords are hashed with bcrypt — we cannot see your password
• JWT session tokens are HttpOnly cookies — not accessible to JavaScript
• Payment card data is never stored on our servers — Razorpay handles all card processing

5. Cookies & Local Storage

Name	Type	Purpose	Expires
access_token	HttpOnly Cookie	Keep you logged in	30 days
guest_*	Cookie	Track guest tool usage (no personal data)	Session
mj_push	LocalStorage	Remember push notification preference	Persistent
mj_push_snooze	LocalStorage	Remember if you dismissed the notification prompt	3 days
mj_notes	LocalStorage	Store your Jyotish notes locally on your device	Persistent
GA4 cookies	Cookie	Google Analytics usage tracking	2 years
Clarity cookies	Cookie	Microsoft Clarity session recording	1 year

6. Push Notifications

If you enable push notifications, we store your browser's push subscription endpoint and encryption keys. We use these only to send daily Vedic prediction alerts and monthly horoscope announcements. You can disable notifications at any time via your browser settings — we will delete your subscription immediately on request.

7. Children's Privacy

MantraJyoti is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Your Rights

• Access — request a copy of all data we hold about you
• Correction — update your name or email via your profile page
• Deletion — delete your account and all data from your profile, or by emailing us
• Portability — request your kundali and reading data in JSON format
• Opt-out — unsubscribe from newsletter or disable push notifications anytime

To exercise any right, email mantrajyoti232@gmail.com with subject "Privacy Request". We respond within 30 days.

9. Data Retention

• Account & reading data — retained until you delete your account
• Guest chart data — retained for 90 days then automatically deleted
• Push subscriptions — retained until you unsubscribe or subscription expires
• Support tickets — retained for 12 months after resolution
• Payment records — retained for 7 years as required by Indian tax law

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email and update the "Last updated" date at the top of this page. Continued use of MantraJyoti after changes constitutes acceptance of the updated policy.