Privacy notice

Who is responsible

Jodiac AI, Betul, Madhya Pradesh, India. GSTIN 23GBFPP0093E1ZU. Udyam registration UDYAM-MP-08-0026805. We decide why and how your personal data is used. Contact for privacy questions and requests: contact@jodiac.in.

What we collect

• Account (paid API): the e-mail address you sign up with, and your company, billing country, GSTIN and state if you give them.
• Sign-in: handled by Amazon Cognito. We never see or store your password.
• Usage (paid API): for each key, day and endpoint, the number of calls, credits used and errors. We do not record what you asked.
• Security records: when you or an administrator change something on your account (create or revoke a key, change billing details, activate a plan) we record who, what and when, with the IP address the change came from.
• Payments and invoices: payment references, amounts, invoice numbers and the details printed on invoices (name or company, e-mail, country, state, GSTIN). Card and bank details are entered on the pages of our payment providers (Razorpay and PayPal) and never reach us.
• Report orders: the e-mail address, your name if you give it, and the birth details (date, time, place) of the people in the report, your language, the consent you gave, and the order and payment records.
• Contact messages: your name, e-mail address and message.
• Abuse protection: with report orders and contact messages we keep a one-way (keyed) hash of your network address, never the address itself, to stop automated misuse.
• Website visits: a few page-view and order-step counts without cookies and without storing your network address. We honour the Global Privacy Control signal. There is no advertising and there are no third-party scripts on this site.

Birth details

Paid API: dates, times and places of birth sent to the chart, panchang and match calls are used only to compute the answer. We do not store them and do not write them to logs. They travel in the request body over HTTPS. You are responsible for having the right to send them.

Report orders: we keep your birth details only to prepare, deliver and, if needed, repeat your report. They are deleted 30 days after delivery. The finished PDF, which contains them, is kept for 90 days so that you can download it again, and is then deleted.

Why we use it

To provide what you asked for (compute results, prepare and deliver reports, take payment, issue invoices, answer you), to keep the service secure, and to meet legal duties such as tax records. We do this with your consent or because it is needed to provide the service you requested. We do not sell personal data and do not use it for advertising.

Where it is kept and who helps us

Data is kept in Amazon Web Services in Mumbai, India (ap-south-1). Amazon Web Services and Amazon Cognito process data for us. E-mails are sent through Amazon SES, which for report mails runs in the United States, so your e-mail address and the download link pass through it. Razorpay (India) and PayPal process payments under their own privacy notices. We share data with authorities only where the law requires.

How long

• Birth details of report orders: 30 days after delivery. Report PDFs: 90 days.
• The e-mail address and records of a report order: up to 365 days, then removed from the order.
• Contact messages: 180 days. Website visit counts: 90 days.
• Invoices, credit notes and payment records: 8 years, because tax law requires them. When an order is erased we replace your name and e-mail address on its invoice with a neutral label; the amounts and numbers stay.
• Paid API account, usage and security records: while the account is open and for the period tax law requires afterwards.

Your rights

You can see and correct your billing details on the account page. Under the Digital Personal Data Protection Act, 2023 and other Indian law you can ask us for a copy of your data, to correct it, or to erase it, and you can withdraw consent. Write to contact@jodiac.in from the e-mail address you used and give your order number if you have one; we aim to answer within 7 days. We erase what we are allowed to erase and tell you what we must keep (for example invoices). If you are not satisfied, you can also complain to the authority that Indian law provides for this.

Security

API keys are stored only as one-way hashes. Connections use HTTPS. Administrator access needs a second factor. Report downloads use short-lived links.

Children

The service is not meant for people under 18 acting alone. If you are under 18, please ask a parent or guardian to order for you.

Changes

We will post changes here with the date, and for important ones tell account holders by e-mail.