Privacy Policy
Last updated: 2026-10-11
The short version
We keep your birth details so we can compute your chart. We keep your email only if you sign in with Google, subscribe, or write to us. We use standard third-party services for analytics, hosting, and AI-generated readings. We don't sell or rent your personal information, we don't run ads, and we don't email you unless you subscribe. You can ask us to delete your data anytime by writing to us.
What we collect and why
Required to compute your Vedic birth chart. Stored in a signed browser cookie so you don't re-enter them each visit. If you sign in, they persist across your devices. The × on a saved chart on the home page removes that chart from this browser and, if you are signed in, from your account. "Forget all charts" there, and clearing your browser cookies, clear this browser only: if you are signed in, the copy in your account comes back at your next sign-in until you ask us by email to delete it (see "Your rights").
Used only to save your charts + reading history across devices. Google handles authentication; we never see your password. We request only your basic profile — no access to Gmail, Calendar, Drive, or Contacts.
When you use the Ask feature, your question is sent (with your chart data) to an AI language-model provider to generate an answer. The question and answer are also written to our 30-day activity log (below), and the answer is cached in temporary server storage so re-asking the same question is instant. Never used to train any AI model.
So we can spot errors and see what is used, we keep a private activity log, and we only read entries from the last 30 days. For each chart generated it records the language, the AI model used, the three signs (Lagna, Moon, Sun), an approximate age band, your birth city, and a keyed one-way hash of your birth details. It does not record your name, birth date, birth time or full place. If you are signed in it also records your email address. For each question you ask it records the question, the answer, and your email address if you are signed in.
If you press "Share on WhatsApp" on a Kundli reading, we store the birth details you entered (name, date, time and place) and the full reading text behind a public link. Anyone who has the link can read it, with no sign-in. The link stops working after 30 days. If you were signed in, your Google account ID is stored with it. Pressing that button is the only thing that creates one.
We use standard third-party analytics to understand which features people actually use — page views, feature clicks, aggregate patterns. No birth details, no email, no question text is included. A tracker-blocking browser extension will opt you out; the site still works.
One signed session cookie (your birth details, language preference, sign-in state, and the counter for the daily 3-free-questions Ask limit). A couple of analytics cookies set by our analytics provider. No advertising cookies. No cross-site tracking.
Who we share data with
To operate the site we rely on a small number of standard third-party services: cloud infrastructure (hosting + logs), AI language-model providers (chart-reading + Ask generation), Google Sign-In (if you sign in), email delivery (Brevo, used only to send you something you subscribed to or asked us to email, and to forward feedback to us), and analytics (anonymous usage patterns). Each receives only what it needs; none are permitted to use your data to train models or serve you ads.
We do not sell or rent your personal information to anyone. We do not run advertising. We do not share your personal details with astrologers, matrimonial services, or any other third party outside the operational vendors above.
Notifications to the site operator. When you submit a question, send feedback, subscribe, or sign in, a notification containing that text or your email address is sent to the site operator through Telegram (a sign-in notification also includes the name on your Google profile). A muhurat search sends the event type and city, plus your email if you are signed in. If something goes wrong on a page, an error notice is sent with the page address, technical error details and, if you are signed in, your email. Birth details (name, date, time, place) are never included. Chart, matching, dosha and numerology notifications carry only the three signs, language, AI model, cost figures and a short one-way code.
How long we keep it
- • Browser cookies: kept for 365 days from the last time something is saved to it (saving a chart, switching language, asking a question, signing in). Visits that only read it do not extend it.
- • Signed-in account data: until you request deletion.
- • Cached Kundli readings: kept indefinitely in cloud storage, keyed to a one-way fingerprint of the birth date, time and place. The reading's text can include the name you entered. Other cached answers (Ask, matching) live in temporary server storage that is cleared when the server restarts.
- • Activity log: we only read entries from the last 30 days. Older entries are not automatically deleted from storage; ask us to delete them if you want them gone.
- • Shared reading links: a link created with "Share on WhatsApp" stops working after 30 days. The copy in storage is not removed by our code at that point, so email us if you want it deleted sooner.
- • Operational logs: a few weeks for debugging, then discarded.
- • Analytics data: the provider's default retention window.
Your rights
- See your data. Visit /account when signed in to see your profile and saved charts. For anything else, such as the activity log or cached readings, email us at contact@shubhagya.com.
- Correct your data. Re-enter your birth details from the home page or Kundli page to overwrite what we have.
- Delete your data. Email contact@shubhagya.com and we'll delete it within 7 days. If you never signed in, we hold no email address for you: anonymous use is keyed to a one-way fingerprint of your birth details, not to who you are. To remove a cached reading, send us the birth date, time and place so we can compute the fingerprint and find it.
- Withdraw sign-in consent. Click "Sign out" on the /account page. You can also revoke Shubh Bhagya's Google access at myaccount.google.com/permissions.
Security
All traffic runs over HTTPS. Your session cookie is HttpOnly, SameSite=Lax and Secure. It is signed so it can't be tampered with, but signed is not encrypted: the contents can be read by anyone who has the cookie. We take reasonable industry-standard precautions; no online service can guarantee absolute security, so treat your birth details as you would any personal record online.
Children
Shubh Bhagya isn't directed at children under 18. If a parent submits a child's birth details for a Kundli, that data is treated the same as adult data. Please don't have a child under 18 create an account.
Changes & contact
If we materially change this policy, we'll update the "Last updated" date at the top and, where we can, tell people who have emailed us. Minor edits happen silently.
Questions, requests, or concerns: email contact@shubhagya.com, or use the Feedback button in the bottom-right corner of any page. A human replies, usually within 48 hours.
Written to be readable and honest. If anything reads ambiguously, please write to us and we'll clarify.
