Privacy Policy

Sankalp Sutram ("we", "us") operates sankalpsutram.com ("Platform"). We determine the purposes and means for which personal data collected through the Platform is processed and, where applicable, act as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act).

This Policy sets out how we collect, use, store, and share personal data, and the obligations we accept under the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). Provisions of the DPDP Act and the rules made under it come into force in stages; we follow those that apply to us as they take effect. By using the Platform, you agree to the collection, storage, and use of your data as described here.

At the time of account registration you are asked to accept this Policy and our Terms of Service, and are told what categories of personal data we collect and the purposes for which we process them. Where consent is required under applicable law, we obtain and record your consent for the relevant purposes. You may withdraw consent where permitted by law (see Section 7).

• •To create and manage your account.
• •To generate astrological charts, Dasha timelines, Panchang, and related calculations.
• •To generate AI readings — both Jyotika AI answers and the AI-written Kundli life report. Values computed from your chart, your question, and your recent questions and answers are sent to our AI provider. Section 4.2 sets out exactly what is sent.
• •To process payments and send booking confirmations.
• •To send transactional emails (password resets, receipts).
• •To send promotional messages — only where you have expressly opted in at registration or via account settings. You may withdraw consent at any time via the unsubscribe link in any marketing email or through account settings.
• •For platform security, fraud prevention, and legal compliance.

We do not sell your personal data. On pages where the Platform displays advertising (see Section 4.4 and Section 8 for details), our advertising partner may process limited technical data — such as your IP address and an advertising cookie identifier — to select and measure the ads shown to you. We do not share your birth data, chat messages, or any other Platform-specific personal data with our advertising partner.

• •Account and profile data (name, email, purchase history): for the life of your account, plus a period after deletion so that we can deal with any legal claim or dispute arising from your use of the Platform. Birth data associated with an account is deleted or anonymised when the account is deleted, subject to information that we are permitted or required to retain under applicable law or for legitimate legal, accounting, security, or dispute-resolution purposes.
• •Astrological charts: for the life of your account.
• •AI Q&A conversations: 3 years from the session date.
• •Payment, order, and invoice records: retained for as long as reasonably necessary for tax, accounting, legal, dispute-resolution and compliance purposes, after which the identifying details on them are removed.
• •Server logs: 90 days.
• •Blog comments: kept for as long as the post they appear on is published. A comment that is never confirmed by email, or that we do not approve, is not published and is removed. You may ask us to delete a published comment at any time.
• •Certain registration or transaction information may be retained for a limited period after account deletion — separately from your account and inaccessible through the Platform — where reasonably necessary for legal compliance, fraud prevention, dispute resolution, or responding to lawful requests from authorities.

Once retention periods expire, data is securely deleted or anonymised. You may request earlier deletion (see Section 7).

• •Data in transit is encrypted using TLS 1.2/1.3.
• •Personal data is protected using appropriate technical and organisational security measures. Sensitive fields in our database — including birth details, email, and phone number — are encrypted at rest.
• •Access is restricted to authorised personnel on a need-to-know basis.
• •We perform periodic security reviews.

No system is completely breach-proof. If an incident is likely to affect your data, we will notify you and the relevant authority within the timeframe required by law.

Under the DPDP Act and applicable law, you may:

• •Request a summary of the personal data we hold about you.
• •Correct inaccurate or incomplete personal data.
• •Request erasure of data that is no longer necessary for the purpose it was collected. Note: testimonials, reviews, and blog comments you have published remain visible under the name you submitted them under, even after account deletion — this is content you chose to publish, not account data. Ask us and we will take a published comment down.
• •Ask us about birth details someone else has entered for you. Where a chart on this Platform describes you rather than the account holder, write to us and we will locate it and correct or delete it, after taking reasonable steps to establish that it is yours.
• •Withdraw consent for data processing — note that certain features require birth data and cannot function without it.
• •Request a portable copy of data you have provided to us.

We do not use cookies to track you across unrelated third-party websites for our own purposes, and we do not use cookies for cross-site tracking beyond what Google AdSense itself requires to serve and measure ads as described above.

You can contact our Grievance Officer about this Policy, your personal data, or any complaint about the Platform:

We aim to acknowledge complaints within 24 hours and ordinarily resolve them within 15 days, depending on the nature and complexity of the complaint.

The Platform is intended solely for persons who are 18 years of age or older. We do not knowingly collect or process personal data from any person under the age of 18. If you are under 18, you may not register or use the Platform.

If we discover that we have inadvertently collected personal data from a person under 18, we will delete that data without undue delay. If you believe a minor's data has been collected, please contact us at support@sankalpsutram.com.

This Policy is governed by, and construed in accordance with, the laws of the Republic of India, including the DPDP Act 2023, the IT Act 2000, and the Consumer Protection Act 2019.

Sankalp Sutram is operated from Bangalore, Karnataka, and serves users within the territory of India. This Policy does not restrict where you may raise a complaint or seek redressal.

Nothing in this Policy limits any rights or remedies available to you under applicable law.