1. Who we are
PanditTalk ("we", "us") operates a mobile app and related web services that connect users with pandits/astrologers for consultations and astrology tools.
- App / site: www.pandittalk.com
- API: api.pandittalk.com
- Support: support@pandittalk.com
- Data Fiduciary / privacy questions: grievance@pandittalk.com
This Privacy Policy explains how we process personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law.
This notice is separate from our Terms & Conditions. Agreeing to Terms does not replace the need for clear privacy consent for data processing.
2. What personal data we collect
Based on how the product works today, we may process the following categories of personal data:
A. Account & identity
- Mobile number (required for OTP login; India +91 format)
- Name / first name / last name (profile)
- Email (optional)
- Gender, marital status (optional / profile)
- Profile photo (optional; stored on our media storage when uploaded)
- Account flags such as profile completed / active status
- Wallet coin balance (in-app credits)
B. Birth / astrology inputs
- Date of birth, time of birth, place of birth (profile and/or tool forms)
- Derived fields such as zodiac sign where generated
- Tool inputs for kundli / matching / horoscope (may include names and birth coordinates sent to astrology calculation providers)
- Saved report summaries / payloads you generate in-app
C. Palm / AI tool inputs
- Palm images you upload for palm reading (sent to an AI vision provider for analysis; not stored as a long-term palm gallery in our database today)
- Text prompts / readings for tools such as tarot or compatibility narratives
D. Consultations & communications
- Booking details (pandit, format chat/audio/video, timing, price in coins, status)
- Chat messages for consultation sessions (stored in our chat database)
- In-app notification records (booking / session / message related)
- We do not record or store voice/video call media in the product today (live sessions use a third-party meeting service)
E. Payments
- Coin package purchases via Razorpay
- Payment/order identifiers, amounts, status, and wallet transaction history
- We do not store card numbers, UPI PINs, or bank passwords
F. Technical / security data
- OTP verification state (temporary, in cache)
- Auth session metadata (including IP address and user agent for refresh sessions on web)
- Rate-limit related request metadata (to prevent OTP abuse)
G. Guest browsing
You may browse some screens as a guest without creating an account. Booking, wallet, and many tools require login. Guest mode does not create a backend user by itself.
H. What we do not currently collect
- Marketing email newsletters
- Server-side marketing push (device reminders today are largely local on-device)
- Call recordings
- Contacts list / precise always-on location tracking as a product feature
3. Why we use your data
| Purpose | Examples |
|---|---|
| Account & security | OTP login, session management, fraud/abuse prevention |
| Profile & astrology services | Kundli, horoscope, matching, palm/tarot tools |
| Consultations | Match you with a pandit; chat / audio / video session |
| Payments & wallet | Coin recharge, debit for bookings/tools, in-app refunds |
| Support & operations | Respond to support requests; investigate failures |
| Legal compliance | Retain transaction/booking records where required |
We process data based on: your consent, performance of the service you request, and compliance with law.
6. Retention
We keep data only as long as needed for the purposes above, including:
- Active account data while your account is open
- Booking, wallet, and payment records for accounting, dispute, and fraud prevention
- Chat messages for the related consultation history
- Temporary OTP data for a short period (minutes)
When you delete your account in-app, we deactivate the account and remove/anonymise core profile fields (including replacing the phone number so it cannot be reused on that row). Some operational records (bookings, transactions, saved reports, chat history) may remain for legitimate/legal reasons.
7. Security
We use reasonable technical and organisational measures appropriate to our stack (encrypted transport, authenticated APIs, hashed OTPs/sessions, cloud access controls). No method of transmission or storage is 100% secure.
8. Your rights (DPDP)
Subject to applicable law, you may:
- Access information about your personal data
- Correct / update inaccurate data (profile settings)
- Request erasure / account deletion (in-app: Settings → Delete Account)
- Withdraw consent (may limit features that need that data)
- Nominate another person to exercise rights where the law allows
- Raise a grievance with our Grievance Officer
Consent withdrawal / rights requests: email support@pandittalk.com or the grievance contact below. Under DPDP Rules, withdrawal of consent should be as easy as giving it.
You may also have the right to approach the Data Protection Board of India as provided under the Act/Rules.
9. Children
PanditTalk is intended for users 18+. We do not knowingly offer accounts to children. If you believe a minor created an account, contact us and we will take steps to close it.
10. International processing
Some providers (for example AI or cloud subprocessors) may process data on servers outside India. Where that happens, we rely on contractual/security arrangements consistent with applicable law.
11. Grievance Officer
For privacy and data-protection grievances under applicable law:
- Email: grievance@pandittalk.com
- Alternate support: support@pandittalk.com
We aim to acknowledge and resolve grievances within the timelines required under applicable law and rules.
12. Changes
We may update this Policy. Material changes will be shown in the app/website. Where required, we will ask for fresh consent.
13. Contact
- Privacy / data questions: support@pandittalk.com (and grievance@pandittalk.com)
- Website: www.pandittalk.com