Astrology Chat Research - Privacy Notice

1. Scope

This notice applies ONLY to the optional research question feature that the Raj Yoga and Navamsa result pages may show. It does not apply to any other tool on this site. Chart calculation and your birth inputs remain in your browser and are not sent to us - that is unchanged, and this notice does not narrow it.

2. If you do not consent to retention

Your question stays on your device. The server receives the automatic labels our classifier produced, the page you were on, the classifier version, a random submission id, and transient abuse-control data. NO TEXT of your question is sent.

3. If you do consent

We keep the following, and nothing else:

• The redacted question text, after automated removal of obvious personal details
• The automatic labels our classifier produced for it
• Which page it came from
• The date and hour it was submitted, in Indian Standard Time
• Human labels added later by a reviewer, if any
• A random record id
• The date the record expires
• The version of this consent notice you saw
• The version of the redaction rules that were applied
• A redaction summary containing placeholder types and counts only - never matched values
• A one-way digest of your deletion code, never the code itself

4. Purpose

Demand measurement, taxonomy construction and guardrail evaluation ONLY. We are trying to learn what people would ask an astrology chat and which questions such a feature must refuse to answer. Your question is not used to generate a reply, and this feature answers nothing.

5. Processors

Vercel Functions and Upstash Redis, via the Vercel Marketplace. Google Analytics receives only the tool name, the surface, and a coarse question class - never your question text.

6. Retention

• Question records, and any exported copies of them, are kept for 180 days and then deleted.
• The record that prevents a duplicate submission is kept for 24 hours.
• The abuse-control value derived from your IP address is kept for 2 hours.
• Non-identifying aggregate counters may persist beyond these periods.

7. Limits of redaction

Removal of personal details is PATTERN-BASED and is NOT guaranteed anonymisation. It reliably removes obvious identifiers such as email addresses, phone numbers and labelled dates, and it cannot reliably remove a name or a place written in an ordinary sentence. Please do not enter personal details into the question box.

8. Human review

Authorised human reviewers may read retained questions. That is the point of keeping them: a person has to read them to build the taxonomy and to judge which questions the feature must refuse.

9. Sharing

Original or redacted questions are NOT sold or licensed to anyone. Only aggregates, and genuinely synthetic or de-identified outputs, may ever become material we share or license.

10. Withdrawing your question

If you consent, you receive a deletion code once, on screen. Keep it if you may want the question removed - we cannot recover it for you, because we store only a one-way digest of it and never the code itself.

• On the same device, a control on this page can delete the question your browser remembers.
• From any other device, enter the deletion code manually.
• Deletion removes the record from our database and removes the row from any exported copy.
• Non-identifying aggregate counts remain, because they are no longer linked to you or to the record.

11. Contact and grievances

Write to desiutils.in@gmail.com with any question or complaint about this notice, and we will respond. Please note that DELETING A SPECIFIC QUESTION REQUIRES THE CODE: we store only a one-way digest of it and keep nothing that ties a question to you, so without the code we cannot identify which record is yours - and we would rather tell you that plainly than ask you to send us the question text, which would create a new copy of the very thing you wanted removed. Any question you do not delete is erased automatically at 180 days.

12. Age

Keeping a question for research is available ONLY to users who affirm they are 18 or older. If you do not affirm this, you can still use the feature and submit WITHOUT your question being kept. This is a product safeguard rather than legal sign-off: the DPDP Act defines a child as under 18 and requires verifiable parental consent, machinery this research pilot has deliberately not built - so the retention path is closed to under-18s rather than attempting a consent we cannot verify.