Privacy & AI Data Policy

Kriyasya respects your personal privacy and is committed to transparent, lawful data processing. This Privacy & AI Data Policy describes how Kriyasya (Operated by Kriyasya) ("Kriyasya", "we", "us"), acting as the Data Fiduciary, collects, uses, stores, and protects personal data across our digital ecosystem.

1. OPERATING DATA FIDUCIARY

The responsible Data Fiduciary for Kriyasya is Kriyasya (Operated by Kriyasya), located at East Delhi, Delhi – 110092, India. For privacy inquiries, consent management, or statutory data rights requests, contact our Data Privacy & Grievance Desk at [email protected].

2. CATEGORIES OF DATA WE PROCESS

Account & Authentication: Email address, mobile telephone number (for OTP authentication), profile display name, and preferred system language.

Transactional & Entitlements: Order histories, membership tier records, credit wallet balances, transaction identifiers, and tax invoices processed securely through licensed payment aggregators (PayU).

Astrological & Calculation Inputs: Names, dates, times, and geographic coordinates of birth, entered solely to generate personalized astrological, numerological, and horoscope charts.

AI Vision & Multimodal Uploads: User-submitted images of floor plans, handwriting samples, signatures, palm impressions, or facial photographs uploaded explicitly to run specialized AI Vision tools.

Technical & Telemetry Data: IP addresses, browser and device specifications, access timestamps, and session security cookies necessary for user authentication, fair usage tracking, and fraud prevention.

3. PURPOSES AND LAWFUL GROUNDS FOR PROCESSING

In accordance with the Digital Personal Data Protection Act, 2023, data is processed under the lawful grounds of affirmative user consent or legitimate platform operations:

• Provisioning requested digital tools, astrological calculations, and educational materials.

• Maintaining credit wallet balances, transaction ledgers, and Fair Usage Policy (FUP Usage) tracking.

• Enforcing platform cybersecurity, preventing fraudulent queries, and complying with statutory tax obligations.

4. ARTIFICIAL INTELLIGENCE & VISION PROCESSING

Kriyasya utilizes state-of-the-art computational algorithms and enterprise AI models (such as Google Gemini and specialized vision engines) to analyze uploaded media and generate interpretive reports. Customer personal prompts and uploaded biometric imagery are processed via private, secure enterprise APIs and are never sold to data brokers, used for behavioral advertising, or submitted to public datasets for foundational model training.

5. DATA RETENTION SCHEDULE

We retain personal data strictly for as long as necessary to fulfill the purposes for which it was collected, or as mandated by Indian statutory legislation:

• Temporary AI Vision Uploads: Source images uploaded for vision analysis are automatically purged from processing caches within 24 to 72 hours following report generation.

• Generated PDF Reports: Saved reports remain accessible in your authenticated account history for permanent personal access until you choose to delete them.

• Daily FUP Usage Logs: Retained for 90 days to monitor fair usage compliance and bot abuse, after which historical records are automatically archived or purged.

• Financial & Tax Invoices: Retained for up to 8 years in compliance with Indian GST and commercial accounting regulations.

• Security & Access Logs: Maintained in compliance with directions issued by the Indian Computer Emergency Response Team (CERT-In).

6. COOKIES AND LOCAL PREFERENCES

Kriyasya employs essential functional cookies for user session management, authentication security, and language selection (e.g., English or Hindi). Non-essential analytics and advertising trackers remain subject to user preference controls and can be adjusted through browser settings.

7. YOUR STATUTORY DATA RIGHTS & LEGAL EXCLUSIONS

Under the Digital Personal Data Protection Act, 2023, users enjoy statutory rights regarding their personal data:

• Right to Access: Request a summary of personal data processed by Kriyasya.

• Right to Correction: Request the rectification of inaccurate or outdated information.

• Right to Erasure: Request the deletion of personal data no longer required for lawful processing. Note: Statutory tax records, accounting invoices, fraud prevention records, and CERT-In security logs are maintained under mandatory legal obligations and are exempt from unilateral erasure upon user request.

• Right to Withdraw Consent: Revoke previously granted consent for non-essential processing at any time.

To exercise these rights, submit a verified request to [email protected].

8. DATA SECURITY SAFEGUARDS AND INCIDENT PROTOCOLS

We maintain comprehensive technical, physical, and administrative safeguards compliant with Section 43A of the Information Technology Act, 2000 and the DPDP Act, including TLS/HTTPS encryption in transit, encrypted database storage, strict role-based access controls, and continuous vulnerability monitoring. In the event of a verified cybersecurity incident, Kriyasya executes immediate containment protocols and notifies the Indian Computer Emergency Response Team (CERT-In) and affected users in accordance with applicable statutory mandates.

9. POLICY UPDATES AND COMMUNICATIONS

Any updates to this Policy will be published on this page with a revised effective date. For significant material revisions, we will provide conspicuous notification across the platform or via registered email communications.

10. GOVERNING LAW AND SOLE JURISDICTION

This Privacy Policy and all personal data inquiries are governed by the laws of India. All disputes arising from privacy or data handling are subject to mandatory pre-litigation grievance redressal with our Grievance Officer and the sole and exclusive jurisdiction of the competent courts in Delhi, India.