Privacy Policy

1. Introduction & Statutory Scope

This Privacy Policy describes how TradeWithAstro ("we", "us", or "our") collects, stores, processes, uses, and protects personal data obtained from users ("Data Principals") of our website (https://tradewithastro.com) and related services.

We operate as a Data Fiduciary in strict compliance with the laws of India, including the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. What Personal Data We Collect

We adhere to the principle of data minimization and collect only the data necessary to provide and manage our services:

• Account & Identity Data: Your full name and email address when you register for an account or contact our support team. Passwords are never stored in plaintext; they are securely transformed using one-way cryptographic salt-hashing (bcrypt).
• Transaction & Subscription Data: Subscription tier, activation dates, expiration dates, invoice amounts, and payment transaction references generated through our payment gateway. Important: TradeWithAstro does not collect, process, or store credit/debit card numbers, CVVs, net banking credentials, or UPI PINs. All payment transactions are securely handled by our PCI-DSS certified, RBI-licensed payment aggregator partner, Razorpay Software Private Limited.
• Technical & Log Data: Internet Protocol (IP) addresses, browser type and version, operating system, time zone setting, and access timestamps recorded automatically in server logs for security, DDOS prevention, and debugging purposes.
• Authentication Cookies & Storage: We use essential local storage tokens (astrotrade_token) strictly necessary to keep you authenticated during your session. We do not use third-party tracking cookies or cross-site advertising trackers.

3. Lawful Purpose of Data Processing

We process your personal data solely for the following specified, lawful purposes:

• Creating, authenticating, and administering your user account.
• Calculating and rendering mundane financial astrology forecasts and daily market timing calendars.
• Processing subscription payments, managing renewals, and generating statutory tax receipts.
• Sending critical transactional communications (such as password reset links, billing confirmations, and essential system notifications).
• Enforcing our Terms of Service, preventing fraudulent signups, and maintaining platform security.
• Complying with statutory obligations under Indian tax and corporate law.

4. Explicit, Affirmative Opt-In Consent

Under Section 6 of the DPDP Act 2023, consent must be free, specific, informed, unconditional, and unambiguous with a clear affirmative action.

At the time of account creation, you are presented with an un-ticked opt-in checkbox requiring your affirmative action before registration can be completed. We do not use pre-ticked boxes, dark patterns, or bundled consent.

You have the right to withdraw your consent at any time by emailing us at info@tradewithastro.com. Upon receipt, we will cease processing your personal data, subject to legal data retention obligations.

5. Data Security & Storage

We implement rigorous technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure:

• All network transmissions are encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
• Database access is restricted, behind firewalled infrastructure, and protected by strict authentication.
• Passwords are stored using industry-standard salted bcrypt hashing.

6. Third-Party Service Providers

We never sell, rent, or lease your personal data. We share minimal personal data strictly with trusted service providers who are bound by confidentiality and data protection obligations:

• Razorpay: To facilitate secure subscription payment processing and statutory invoicing.
• Cloud & VPS Hosting: Secure cloud infrastructure hosting our web servers and encrypted database.
• Transactional Email Services: To deliver system notifications, password resets, and account verification emails.

7. Rights of Data Principals (Your Legal Rights)

Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

8. Grievance Officer & Redressal Mechanism

In accordance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and Section 12 of the DPDP Act 2023, the details of our Grievance Redressal Officer are as follows: