Privacy Policy

Effective Date: 12 August 2026 Last Updated: 12 August 2026

This Privacy Policy explains how ROISutra Digital Services Pvt. Ltd. (“VedicMindAI”, “we”, “us”, “our”), which operates vedicmindai.com and its subdomains and related applications (the “Platform”), collects, uses, stores, shares and protects your personal data.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), and the Information Technology Act, 2000 and the rules made thereunder.

We are the Data Fiduciary. You are the Data Principal.

By using the Platform or providing your information, you consent to the practices described here. If you do not agree, please do not use the Platform.

1. Who we are

2. Personal data we collect

We collect this data when you use the free Kundli, Rashifal or Panchang features, create an account, make a payment, interact with the AI Chat, or contact support.

3. Purpose of processing and lawful basis

We process your personal data only for the following specified purposes, on the following lawful bases under the DPDP Act:

We do not use your birth data or AI chat history for any purpose beyond those stated above without obtaining fresh consent.

Note on lawful basis: The DPDP Act permits processing only on the basis of consent or the specific legitimate uses listed in Section 7 of the Act. We do not rely on any other basis.

4. Notice and consent

Before or at the time of collecting your personal data, we provide a clear notice describing the personal data collected, the purpose of processing, your rights, and how to withdraw consent.

Consent obtained by us is:

• Free, specific, informed, unconditional and unambiguous
• Obtained through affirmative action — we do not use pre-ticked boxes or implied consent
• Withdrawable as easily as it was given

You may withdraw consent at any time by contacting privacy@vedicmindai.com or through your account settings, where available. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may limit or prevent your use of certain features. On withdrawal, we will cease processing and erase the relevant personal data unless retention is required by law.

5. Sharing of personal data

We do not sell your personal data. We share it only with:

• Data Processors engaged under binding contracts that require them to process data only on our instructions and maintain appropriate security: hosting and cloud providers, payment gateways, analytics tools, AI model providers, email and SMS services, and customer-support tools.
• Government authorities or law enforcement, where required by law, court order or a lawful request.
• Professional advisors — lawyers, auditors, accountants — under confidentiality obligations.
• Acquirers, in connection with a merger, acquisition, financing or sale of assets, subject to this Policy.

5.1 AI Chat — important

To generate AI Chat responses, the content you submit — which may include your birth details and questions — is transmitted to and processed by a third-party AI / large-language-model provider acting as our Data Processor. Please do not enter information in the AI Chat that you would not want processed by such a provider.

6. Cross-border transfers

Your personal data may be transferred to and processed in countries outside India, including by our cloud and AI providers. We ensure such transfers comply with Section 16 of the DPDP Act and any restrictions notified by the Central Government from time to time, and we require appropriate contractual safeguards.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

When the purpose is fulfilled or consent is withdrawn — whichever is earlier — we erase or anonymise the personal data, unless retention is required by law.

8. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access — obtain a summary of the personal data we hold about you and our processing activities.
• Correction and completion — request correction of inaccurate or incomplete personal data.
• Erasure — request deletion of your personal data, subject to legal retention requirements.
• Withdraw consent — at any time, as easily as it was given.
• Nomination — nominate another individual to exercise your rights in the event of your death or incapacity.
• Grievance redressal — raise a grievance with us before approaching the Data Protection Board.

To exercise any right, write to privacy@vedicmindai.com or follow the process on our Grievance Redressal Mechanism page. We may verify your identity before acting on a request, and will respond within 30 days.

9. Grievance redressal

We aim to acknowledge grievances within 48 hours and resolve them within 30 days.

Full details of how to raise a grievance, verify your identity and escalate are set out on our Grievance Redressal Mechanism page.

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India. Under the DPDP Act, you are required to exhaust our grievance mechanism before approaching the Board.

10. Security safeguards

We implement reasonable security safeguards to protect personal data, including:

• Encryption in transit, and at rest where appropriate
• Role-based access controls on systems holding personal data
• Multi-factor authentication for internal administrative systems
• Logging and monitoring of access
• Periodic security reviews
• Contractual security obligations on our Data Processors

While we take reasonable measures, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

11. Personal data breach notification

In the event of a personal data breach, we will:

1. Notify each affected Data Principal without delay, describing the nature and extent of the breach, its likely consequences, the measures we are taking, and the steps you may take to protect yourself; and
2. Notify the Data Protection Board of India without delay, and provide detailed particulars within 72 hours of becoming aware of the breach, or such longer period as the Board may allow.

12. Children’s personal data

The Platform is intended for users aged 18 years and above. Under the DPDP Act, a child is any individual below 18 years of age.

We do not knowingly process the personal data of a child without verifiable consent from a parent or lawful guardian. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe we have collected a child’s data without the required consent, contact us immediately at privacy@vedicmindai.com so we can delete it.

13. Cookies

We use cookies and similar technologies. Please refer to our separate Cookie Policy for details on the types of cookies used and how you can manage them.

14. Third-party links

The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their policies separately.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last Updated” date. Significant changes will be notified through the Platform or by email where appropriate.

16. Contact us