Privacy Policy

Effective date: 28 August 2026.

1. Introduction and scope

This Privacy Policy ("Policy") is issued by AstroVed.com Pvt. Ltd. ("Company", "we", "us" or "our"), a company registered in India with its registered office at Prince Info Park, Plot No: 81-B, A-Block, 4th Floor, 2nd Main Road, Ambattur Industrial Estate, Chennai 600 058, and the entity that owns and operates Suited by AstroVed (the "Platform" or the "Service"), a Vedic marriage-compatibility service.

This Policy describes how the Company collects, uses, discloses, stores and protects Personal Data in connection with the Service, and the rights available to individuals under applicable Indian law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 ("Intermediary Rules"). This Policy applies to every visitor and registered User of the Platform, whether or not a purchase is made, and forms part of, and should be read together with, the Terms and Conditions.

2. Definitions

• "Company" means AstroVed.com Pvt. Ltd., its successors and permitted assigns.
• "Platform" or "Service" means the Suited by AstroVed website and application, and all related features made available by the Company.
• "User" or "Data Principal" means an individual who accesses or uses the Platform, or about whom Personal Data is submitted to the Platform, including a partner whose birth details a User enters.
• "Personal Data" means any data about an individual who is identifiable by or in relation to such data, whether recorded in a digital or any other form.
• "Sensitive Personal Data" means personal data or information as defined under the SPDI Rules. Certain data collected by the Platform, including exact date, time and place of birth when combined with other identifiers, may warrant heightened care even where it does not fall within a statutorily enumerated category.
• "Processing" means any wholly or partly automated operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, and erasure.
• "Payment Processor" means Razorpay Software Private Limited and its affiliates, the Company's third-party payment gateway for the Service.
• "Credits" means the prepaid, non-transferable units described in the Terms and Conditions that unlock premium compatibility checks on the Platform.
• "Grievance Officer" means the officer designated by the Company under clause 15 of this Policy to address privacy and data-protection grievances.

3. Information we collect

The Company collects the following categories of Personal Data in connection with the Service:

• Account and identity data. Your email address, and a password if you register with email and password (stored only in irreversibly hashed form and never held or viewed by the Company in plain text). If you register by one-time passcode, the Company retains a record that the code was verified, not the code itself once it has expired.
• Profile and astrological data. The name, date of birth, exact time of birth, place of birth and gender you submit for yourself, and the corresponding details you submit for a prospective partner in order to run a compatibility check. This category may constitute Sensitive Personal Data and is collected and processed with corresponding care.
• Compatibility results and chat content. The Ashtakoot Guna Milan score, Mangal and Nadi dosha findings, birth chart and dasha data, remedy suggestions, and any questions or messages exchanged through the on-match chat feature, each stored against the relevant match.
• Transaction and Credit records. The Credit packs purchased, the date and amount of each transaction, and how Credits were spent, refunded or returned to the wallet. Full card, UPI or net-banking credentials are not part of this record; see clause 6.
• Technical, device and usage data. IP address, browser and device type, application version, crash and performance logs, and the limited cookies strictly necessary to operate the Platform, described further in clause 11.

Some of the categories above, in particular profile and astrological data, may constitute Sensitive Personal Data or otherwise warrant heightened protection under the SPDI Rules, and the Company processes such data with corresponding safeguards.

4. Lawful basis and consent

The Company processes Personal Data on the basis of the User's free, specific, informed and unambiguous consent, given by creating an account, submitting birth details, or otherwise using the Service, in accordance with the DPDP Act. Where a User submits a prospective partner's birth details, the User confirms, as a condition of using the Service, that the User has obtained that person's consent and has the authority to submit their information for the purpose of a compatibility check.

A User may withdraw consent to optional Processing at any time by contacting the Company as set out in clause 15. Withdrawal of consent does not affect the lawfulness of Processing carried out before withdrawal, and may limit or prevent continued use of some or all of the Service, including features that depend on the withdrawn data.

5. Purposes of processing

• To create, authenticate and secure a User's account.
• To calculate compatibility scores, doshas, birth charts, dasha timelines and remedy suggestions.
• To generate written interpretations and to power the on-match chat, using automated analysis and third-party processing services described in clause 6.
• To process purchases, maintain a Credit balance, and keep an accurate purchase and refund history.
• To provide customer support and respond to requests directed to the Company.
• To maintain the security of the Service, prevent fraud and abuse, and comply with legal, regulatory and accounting obligations.
• To send service-related communications, such as confirmation of a purchase or a completed check. The Company does not send marketing communications without a clear opt-in.

6. Disclosure and data processors

The Company discloses Personal Data only to the extent necessary to operate the Service, to the following categories of recipients:

• Razorpay, as Payment Processor — to process one-time Credit-pack payments made in Indian rupees.
• Automated analysis and third-party processing services — engaged to generate written interpretations, chart narratives and chat responses from the birth and match data a User provides.
• Cloud hosting and infrastructure providers — engaged to store data securely and operate the Platform.
• Regulators, courts and law-enforcement authorities — where disclosure is required or permitted by applicable law, legal process or a competent regulator.

Each such recipient is bound by contractual or statutory obligations of confidentiality and data protection appropriate to the data disclosed. The Company does not sell Personal Data, and does not share Personal Data with third parties for their own independent marketing purposes.

7. Cross-border data transfers

The Company's hosting and processing partners, including the Payment Processor and the automated analysis and third-party processing services referred to in clause 6, may store or process Personal Data on servers located outside India. Any such transfer is made subject to applicable law, including the DPDP Act and any conditions or restrictions the central government may notify from time to time, and subject to contractual safeguards intended to ensure a comparable standard of protection to that provided under this Policy.

8. Data retention

The Company retains account and profile data for as long as an account remains active. Compatibility results, birth charts and chat history for a premium match are retained as part of the Service so that a User may revisit that match, consistent with the permanent-history feature described in the Terms and Conditions. Where a User requests deletion of their account, the Company will delete or anonymise the associated Personal Data within a reasonable period, except where retention of particular records, including payment and transaction records, is required to meet legal, regulatory or accounting obligations.

9. Security safeguards

The Company implements reasonable security practices and procedures within the meaning of the SPDI Rules and section 43A of the IT Act, including encryption of data in transit using industry-standard transport security, access controls restricting Personal Data to personnel and systems that require it, and adherence to the Payment Processor's security requirements for anything payment-related. No method of transmission or storage is completely secure, and while the Company works to protect Personal Data using appropriate technical and organisational measures, it cannot guarantee absolute security.

10. Rights of the Data Principal

Subject to applicable law, a User may exercise the following rights in relation to their Personal Data:

• Right to access a summary of the Personal Data held by the Company and the Processing carried out.
• Right to correction and completion of inaccurate or incomplete Personal Data, such as a mistyped birth detail.
• Right to erasure of Personal Data that is no longer necessary for the purpose for which it was collected, subject to the retention exceptions in clause 8.
• Right to grievance redressal through the Grievance Officer named in clause 15.
• Right to nominate another individual to exercise these rights on the User's behalf in the event of death or incapacity, as provided under the DPDP Act.
• Right to withdraw consent at any time, as described in clause 4.

To exercise any of these rights, contact the Company using the details on the Contact us page, or reach the Grievance Officer directly at [email protected]. The Company will respond within the time limits prescribed by applicable law.

11. Cookies and local technologies

The Platform uses a limited set of strictly necessary cookies to keep a User signed in and to maintain session state. Authentication cookies are set by the Company's servers as http-only cookies that are not readable by client-side scripts, and a separate token is used to protect against cross-site request forgery. The Platform does not use browser local storage or session storage to hold a User's identity or Personal Data. A service worker is registered to make the application installable, but it does not cache or store any account, profile, match or chat data on the device. The Platform does not use third-party advertising trackers and does not sell data to advertising networks.

12. Children and minors

The Service is intended for individuals who are at least eighteen years of age and the Company does not knowingly collect Personal Data from anyone under that age. Where the processing of a child's Personal Data is otherwise required under applicable law, the Company will obtain verifiable parental or guardian consent before such Processing, as required under the DPDP Act. If the Company becomes aware that Personal Data has been submitted by or about a minor without appropriate consent, it will take reasonable steps to remove that data.

13. Data breach handling

In the event of a Personal Data breach, the Company will take reasonable steps to contain and investigate the incident, mitigate its effect, and notify the Data Protection Board of India, affected Users and any other authority to the extent, and within the timelines, required by applicable law.

14. Changes to this policy

The Company may update this Policy from time to time to reflect changes to the Service or to applicable law. The "Last updated" date at the top of this page will change whenever this Policy is revised, and where a change is material the Company will make reasonable efforts to notify registered Users.

15. Grievance officer and contact

Pursuant to the Intermediary Rules and the DPDP Act, the individual named above is designated as the Company's Grievance Officer for privacy and data-protection grievances. For questions about this Policy, or to raise a grievance, use the details above or visit Contact us.

16. Governing law

This Policy is governed by the laws of India. Any dispute arising out of or in connection with this Policy is subject to the exclusive jurisdiction of the courts at Chennai, India, without prejudice to any right of a Data Principal to approach the Data Protection Board of India or another competent regulator.