Privacy Policy

1. Who we are

Hishree (“we”, “us”, “our”) provides an AI-assisted Vedic astrology and mental well-being web application at hishree.com and related domains. This Privacy Policy explains how we process personal data when you use our services, including paid chat extensions processed through Razorpay.

We design our practices to align with the Digital Personal Data Protection Act, 2023 (India), the Information Technology Act, 2000 and applicable SPDI Rules, and internationally recognised principles under GDPR/UK GDPR where they apply to users outside India.

2. Data we collect

• Account data: email address used for OTP login, account identifiers, and authentication tokens.
• Birth / Kundali data: name you provide for a chart, sex, date and time of birth, place of birth, and coordinates/timezone derived from that place.
• Chat data: messages you send, AI replies, session titles, selected life area, conversation summaries, and related Gemini interaction identifiers.
• Payment data: payment status, amount, Razorpay QR / payment references, and timestamps. We do not store your full UPI PIN, card number, or CVV. Card/UPI credentials are handled by Razorpay / your payment app.
• Technical data: approximate device / browser information, IP-related logs needed for security, and service diagnostics.

3. Why we use your data

• To create and authenticate your account (OTP by email).
• To generate Kundali charts via our astrology computation provider.
• To power empathetic AI guidance and resume prior conversations.
• To process micro-payments for paid chat time and prevent fraud.
• To meet legal, tax, accounting, and dispute-resolution obligations.
• To improve safety (including crisis / self-harm response pathways).

Legal bases (where GDPR applies): contract performance, legitimate interests (security, product integrity), consent (where required), and legal obligation. Under India’s DPDP Act, we process personal data for the lawful purposes described above and for which you have given consent or which are necessary to provide the requested service.

4. Sharing with processors

We share data only as needed with:

• Google Gemini (generative AI replies and optional conversation state).
• Our PyJHORA / AstroAPI service for chart calculation.
• Razorpay for payment collection and settlement in India.
• Email / SMTP providers for OTP delivery.
• Hosting, database, and logging infrastructure providers.
• Authorities when required by law or valid legal process.

We do not sell your personal data. International transfers (for example to AI or cloud providers) are limited to what is necessary to run the service and are subject to contractual and technical safeguards.

5. Retention

• Account and profile data: while your account remains active.
• Chat transcripts and summaries: retained to show history and resume context; older inactive chats may be purged on a scheduled retention cycle.
• Payment records: retained as required under Indian tax and accounting rules (typically up to 8 years where applicable).

You may request account deletion; we will erase or anonymise personal data except where retention is legally required (for example payment audit trails).

6. Your rights

Subject to applicable law, you may request:

• Access to personal data we hold about you.
• Correction of inaccurate data.
• Deletion / erasure of your account and chats.
• Withdrawal of consent where processing is consent-based.
• Export of your data in a commonly used format (where feasible).
• Complaint to your local data protection authority / India’s Data Protection Board.

Contact [email protected] or [email protected]. We aim to respond within timelines required by applicable law (for example up to 72 hours acknowledgement for certain GDPR requests, and as prescribed under DPDP for Indian residents).

7. Security

We use TLS in transit, access controls, encryption of sensitive fields at rest where configured, and least-privilege production access. No method of transmission or storage is perfectly secure; please use a strong unique email account for login.

8. Children

Hishree is intended for users aged 18 or above. We do not knowingly collect data from children. If you believe a minor has created an account, contact us and we will delete it.

9. Sensitive well-being content

Chats may include personal or emotional information. Our AI is not a licensed therapist, doctor, or emergency service. If our safety systems detect acute self-harm risk, we may interrupt the session and surface crisis helpline information. That processing is for your vital interests and safety.

10. Changes

We may update this Policy to reflect product, legal, or payment-provider changes. Material updates will be posted on this page with a new “Last updated” date. Continued use after changes constitutes acceptance where permitted by law.