Privacy Policy

1. What we collect

Phone number

Used for one-time password (OTP) authentication. Required to create an account. Delivered via SMS (Twilio).

Birth data

Date, time, and place of birth — entered voluntarily to compute your Vedic chart. This data is tied to your account and used solely for chart calculation and to prepare your consultation.

Session and device data

Standard server-side logs: IP address, browser type, pages visited, timestamps. Used for security, rate limiting, and diagnosing technical issues. Not used for advertising.

Appointment notes

Vipin may keep brief practitioner notes after a session. These are append-only, encrypted at rest, visible only to Vipin, and never surfaced to third parties or shown to you on the platform.

Payment data

When payment is enabled, card and transaction details will be handled directly by a PCI-compliant payment processor (to be named). We will not store raw card numbers.

2. How we use it

• Authenticate you via OTP and maintain your session.
• Compute and display your Vedic birth chart.
• Allow Vipin to prepare for and conduct consultations.
• Operate, secure, and improve the platform (logs, error tracking, rate limiting).
• Process payments and issue receipts when payment is live.

We do not use your data for advertising, profiling, or sale to third parties.

3. Storage and third parties

Data is stored in MongoDB hosted on servers in India (Vercel region bom1). The platform is deployed on Vercel (Vercel Inc., USA) under their standard data processing terms.

Third-party processors we use:

• Twilio — delivers OTP SMS messages. Receives your phone number for the duration of message delivery.
• Vercel — hosts the application and may retain access logs per their privacy policy.

4. Retention

Session tokens expire after 7 days of inactivity. OTPs expire after 10 minutes. Birth data and account information are retained until you request deletion. Server logs are retained for 30 days.

5. Your rights

Under Indian law (IT Act 2000, IT Rules 2011) you may request access to, correction of, or deletion of your personal data. To exercise any of these rights, email us at the address below. We will respond within 30 days.

6. Children

This service is intended for adults (18+). We do not knowingly collect data from minors. If you believe a minor has provided data, contact us and we will delete it promptly.

7. Changes to this policy

We may update this policy. The effective date at the top will reflect the latest revision. Material changes will be surfaced on the site.

8. Contact

Privacy queries and data requests: vipin@vipinkaushik.com
Vipin Kaushik · C-29, Omaxe City Centre, Sohna Road, Gurugram 122001, Haryana, India.