Privacy Policy

GrahAI ("Platform", "we", "us") is operated by GRAH AI SYSTEMS (OPC) PRIVATE LIMITED, a One Person Company incorporated under the Companies Act, 2013 (CIN: U62099KA2026OPC221190), with its registered office at Ahad Excellencia, Choodasandra, Carmelram, Bengaluru 560035, Karnataka, India. We are the data fiduciary responsible for your personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act).

Personal Information (provided by you):

• Name, email address
• Phone number (optional)
• Gender (optional)
• Date of birth, time of birth, place of birth
• Marital status, primary concern (optional)

Payment Information:

• Processed securely by Razorpay or PayPal. We do NOT store credit/debit card numbers or banking details.
• We retain: transaction ID, plan purchased, amount, date for our records.
• If you subscribe to GrahAI Plus/Annual in INR, Razorpay holds the standing authorization used to process each renewal charge — GrahAI never sees or stores your payment credentials. You can revoke this at any time from Account → Cancel auto-renewal.

Usage Data (collected automatically):

• Pages visited, features used, time spent
• Device type, browser, screen size
• IP address, approximate location
• Referral source (how you found us)

Cookies & Tracking:

• Google Analytics (website analytics)
• Microsoft Clarity (session recordings & heatmaps)
• Google Ads (conversion tracking)
• Meta (Facebook) Pixel (advertising measurement)
• Microsoft Advertising UET (advertising measurement)
• Firebase Analytics (app usage)

We collect and process your data for:

• Service delivery: Generate Kundli, reports, predictions, matching results
• AI processing: Birth data is sent to our AI providers to generate personalized astrological interpretations
• Payment processing: Complete transactions via Razorpay or PayPal
• Communication: Send service-related emails (welcome, receipts, notifications)
• Analytics: Improve platform experience, understand usage patterns. This includes our own first-party funnel measurement: a random session identifier (stored in your browser) and which steps of the site you reach. It contains no name, email, or birth details — the endpoint rejects personal fields by design — and is never shared with advertising platforms.
• Advertising: Measure ad campaign effectiveness (Google Ads conversion tracking)

We process your data based on your consent as defined under the DPDP Act, 2023. By creating an account or using our services, you consent to the collection and processing described in this policy. You may withdraw consent at any time (see Section 8).

We share your data with the following third parties, solely for the purposes described:

We do NOT sell your personal data to third parties.

• Active accounts: Data retained while your account exists
• Inactive accounts: Data purged after 3 years of inactivity
• Payment records: Retained for 8 years (tax/legal compliance)
• Analytics data: Aggregated and anonymized after 26 months

Your data may be processed on Google Cloud and other service provider servers located outside India (primarily United States and Singapore). Under the DPDP Act, 2023, cross-border transfers are permitted unless the Indian government restricts transfers to specific countries. As of the date of this policy, no such restrictions apply to our service providers.

As a data principal, you have the right to:

• Access: Request a summary of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your account and all personal data
• Withdraw consent: Withdraw consent for data processing at any time
• Nominate: Nominate a person to exercise your rights in case of death or incapacity
• Grievance: File a complaint with our Grievance Officer

To exercise any of these rights, email: grievance@grahai.com

Visitors in the EEA, United Kingdom and Switzerland: in addition to the above, you have the rights granted by the GDPR / UK GDPR / Swiss FADP — access, rectification, erasure (see Section 9 for the self-serve deletion flow), restriction of processing, data portability, and the right to object. Our lawful basis is the performance of our contract with you (delivering the readings you request), and consent for advertising and analytics cookies — which we only set after you accept the cookie banner shown in your region. You can withdraw that consent at any time via the "Privacy choices" link in the footer, and you may lodge a complaint with your local supervisory authority.

You can delete your account and all associated personal data yourself, at any time, from your Account page — deletion begins with a 14-day grace period (during which you can change your mind by signing back in), after which all personal data is permanently purged. See Delete my data for a step-by-step guide.

You may also request deletion by emailing grievance@grahai.com; emailed requests are processed within 30 days of verification. Note: we may retain payment records as required by tax law.

We implement industry-standard security measures including: HTTPS encryption for all data transmission, Firebase Security Rules for database access control, secure authentication via Firebase Auth, and regular security reviews. However, no method of electronic transmission or storage is 100% secure.

GrahAI is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware of such collection, we will promptly delete the data.

We use cookies and similar technologies for analytics, advertising measurement, and platform functionality:

If you visit from the EEA, the United Kingdom or Switzerland, the analytics and advertising cookies above are set only after you accept the cookie banner; declining leaves the site fully usable. Change your mind any time via the "Privacy choices" link in the footer. Everywhere, you can also manage or clear cookies through your browser settings — disabling strictly-necessary cookies may affect sign-in and currency display.

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users within 72 hours of becoming aware of the breach, as required by the DPDP Act, 2023.

Name: Rahul Dubey

Designation: Grievance Officer, GRAH AI SYSTEMS (OPC) PRIVATE LIMITED

Email: grievance@grahai.com

Address: Ahad Excellencia, Choodasandra, Carmelram, Bengaluru 560035, Karnataka, India

Complaints will be acknowledged within 24 hours and resolved within 15 days.

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.

For questions about this Privacy Policy: support@grahai.com