Legal

Privacy Policy

Last updated: 9 July 2026

Orsa ("we", "our", or "us") is operated by Bhavy Rastogi, registered at WZ 09 U/G Om Vihar Phase 4, Uttam Nagar, New Delhi - 110059. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and your rights over it.

By creating an account or using Orsa, you acknowledge that you have read and understood this policy. If you do not agree, please do not use the service.

1. Data We Collect

Account Information

Name, email address, and hashed password when you register with email. If you sign in with Google, we receive your name, email, and profile picture from Google.

Birth Data

Date and time of birth, city and country of birth, and the resulting geographic coordinates (latitude/longitude) and timezone. This data is the core input for Orsa's astrological calculations. This is sensitive personal data. We collect it only to provide the service.

Life Events

Descriptions of personal life events (career changes, relationships, health, etc.) that you voluntarily submit through the Pattern Detector feature. These are stored and used to identify astrological correlations.

Vakra Chat History

All messages sent to and received from Vakra (our AI guide) are stored to maintain conversation continuity and generate a life context profile that improves future responses. Vakra automatically summarises your chat history into a short "Life Context" note every few messages.

Payment Information

We do not store card numbers or banking credentials. Payments are processed by Razorpay. We store only the Razorpay transaction ID, order ID, subscription ID, and subscription status to manage your access tier and credit balance.

Usage Data

Standard server logs including IP addresses, browser type, pages visited, and timestamps. Error events are captured by Sentry for debugging purposes.

Consent Records

When you create an account, we record a timestamp of your acceptance of these policies. This record is retained for compliance purposes.

2. How We Use Your Data

To compute your Vedic natal chart and generate personalised astrological insights, forecasts, and red flags.
To power Vakra your birth chart, life context profile, and recent chat history are used to generate personalised responses.
To generate your Cosmic Calendar (30-day planetary forecast) and Decoded (natal chart analysis).
To manage your account, subscription, and credit balance.
To send transactional emails such as verification codes, password resets, and payment confirmations.
To detect and debug technical errors in the service.
To comply with legal obligations.

3. How Your Data Powers Your Experience

Orsa uses advanced language processing technology to generate personalised astrological and behavioural content. When you interact with Vakra, request a forecast, or use any personalised feature, the following data is processed by our platform and technology partners to generate your response:

Your birth date, time, and computed planetary positions
Your current Dasha (planetary period) timeline
Your Life Context profile (a short auto-generated summary of your sessions)
Recent Vakra chat messages (a sliding window of recent exchanges)
Life event descriptions you have submitted

Our primary technology partner for content generation is Google. We may also work with OpenAI or Anthropic as additional partners. All partners operate under their own data processing agreements. Your data is used solely to generate your personalised response and is not used to train or improve their systems under our agreements with them.

4. Third-Party Services

SupabaseDatabase and file storage. Your data is stored on Supabase-hosted PostgreSQL servers.

GoogleSign-in via Google account. Powers personalised content generation across the platform.

RazorpayPayment processing for subscriptions and one-time purchases.

UpstashRedis-based rate limiting to protect the service from abuse.

Hostinger EmailTransactional email delivery over SMTP for verification codes and password resets.

SentryError monitoring and performance tracing. Error events may include request metadata.

VercelHosting and serverless infrastructure. Handles request routing and logs.

5. Data Retention

We retain your data for as long as your account is active. Specifically:

Account and birth data: retained until you delete your account.
Vakra chat messages: automatically pruned after 1,000 messages. Older messages are deleted on a rolling basis.
Life events and pattern data: retained until you delete individual events or your account.
Payment records: retained for 7 years as required by Indian tax regulations.
Consent records (terms acceptance timestamps): retained for the lifetime of the account plus 3 years after deletion.
Server logs and error reports: retained for up to 90 days.

6. Your Rights

Under India's Digital Personal Data Protection Act 2023 (DPDP Act) and applicable law, you have the following rights:

Access: Request a copy of all personal data we hold about you.
Correction: Request correction of inaccurate data (e.g. wrong birth details).
Erasure: Request deletion of your account and all associated personal data. We will fulfil this within 30 days, except data we are legally required to retain.
Withdrawal of consent: You may withdraw consent for data processing at any time by deleting your account. Withdrawal does not affect lawfulness of processing before withdrawal.
Grievance redressal: You may raise a complaint with our data protection contact.

To exercise any of these rights, email us at legal@orsa.in.

7. Security

We implement industry-standard security measures: passwords are hashed with bcrypt, all data is transmitted over HTTPS, database access is restricted to server-side processes using encrypted credentials, and rate limiting is applied to authentication and AI endpoints. No system is perfectly secure. If you discover a vulnerability, please contact us responsibly at support@orsa.in.

8. Age Restriction (18+)

Orsa is available only to individuals who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe that a minor has provided us with personal data without verifiable consent, please contact us at legal@orsa.in and we will promptly delete the account and associated data.

9. Changes to This Policy

We may update this policy as the service evolves. Material changes will be communicated by email or by a prominent notice in the app. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Orsa after changes constitutes acceptance.

10. Contact

For privacy-related queries, data requests, or complaints, contact us at:

Bhavy Rastogi

WZ 09 U/G Om Vihar Phase 4, Uttam Nagar, New Delhi - 110059

legal@orsa.in