Privacy Policy & DPDP Act 2023 Notice

At Vedic Timeline (accessible at vedictimeline.com), we hold the sacred sanctity, confidentiality, and security of your personal birth data in the highest regard. This Privacy Policy sets forth our practices regarding the collection, processing, storage, and protection of digital personal data in strict adherence with the Digital Personal Data Protection (DPDP) Act, 2023 (Act No. 22 of 2023, Republic of India), the Information Technology Act, 2000, and applicable electronic data protection rules.

1. Data Fiduciary Identification & Contact

Under Section 2(i) of the DPDP Act 2023, the platform Vedic Timeline operates as the Data Fiduciary that determines the purpose and means of processing your personal data.

2. Categories of Personal Data Collected

We adhere strictly to the principle of Data Minimization (Section 6(1) of the DPDP Act 2023) and collect only information strictly necessary to calculate Vedic planetary ephemeris, render Janma Kundli charts, and manage your account:

• Astrological Birth Coordinates: Full name, gender, birth date, exact birth time, birth city, geographic coordinates (latitude and longitude), and timezone offset. These details are required to compute Lahiri (Chitra Paksha) Ayanamsha, Ascendant (Lagna), Navamsha, and 120-year Vimshottari Dasha periods.
• Contact Identifiers: Email address and optional mobile telephone number for account authentication, visual life journey report dispatch, password recovery, and billing receipts.
• Account Credentials: Salted and hashed passwords encrypted with bcrypt. We never store plain-text passwords.
• Transactional & Payment Metadata: Razorpay order ID, payment transaction ID, timestamp, and verification signature. Note: We never collect, process, or store sensitive credit card numbers, debit card PINs, CVV codes, or netbanking passwords. All payment transactions are processed directly by RBI-authorized payment aggregator Razorpay.
• Technical Telemetry: Anonymized server access logs, device screen dimensions (for responsive layout rendering), and user-selected language preferences (English or Hindi).

3. Lawful Grounds & Purpose of Data Processing

Under Section 4 and Section 6 of the DPDP Act 2023, your personal data is processed solely based on your explicit, informed consent for the following specified lawful purposes:

• Synthesizing factual, mathematical Vedic astrological timelines and personalized life journey milestones.
• Generating authentic Lo Shu Grid planes, Chaldean name vibration analyses, and Remedial blueprints.
• Persisting your calculated birth profiles securely in encrypted storage so you can access them across sessions via your dashboard.
• Delivering requested astrological report summaries and customer support communications.
• Verifying payment authentications for ₹99 and ₹249 digital report unlocks via Razorpay.

4. Statutory Rights of Data Principals (Your Rights under DPDP Act 2023)

As a Data Principal under Chapter III of the DPDP Act 2023, you enjoy full statutory control over your personal data:

• Right to Access Summary (Section 11): You have the right to request a complete summary of your personal data being processed, the processing activities undertaken, and the identities of any authorized service partners (such as transactional email providers).
• Right to Correction & Updating (Section 12): You may at any time edit, update, or correct your birth place, coordinates, name, or contact details directly from your User Dashboard.
• Right to Erasure & Deletion / "Right to be Forgotten" (Section 12(3)): You have the absolute right to demand the permanent deletion and erasure of your profile, birth charts, account, and all associated astrological data. Deletion requests can be initiated via the Dashboard or by emailing info@vedictimeline.com with the subject "Data Erasure Request". Data will be permanently wiped within 7 business days.
• Right of Grievance Redressal (Section 13): You have the right to readily available grievance redressal in respect of any act or omission regarding your data rights.
• Right to Nominate (Section 14): You have the right to nominate an individual who, in the event of death or incapacity, shall exercise your rights as a Data Principal.

5. Protection of Children’s Personal Data (Section 9 DPDP Act)

In strict compliance with Section 9 of the DPDP Act 2023:

• We do not knowingly process personal data of individuals under the age of 18 years without verifiable consent of their parent or lawful guardian. Parents or guardians creating a birth chart for their child do so under lawful parental authority.
• We do not undertake any tracking, behavioral monitoring, or targeted advertising directed towards children, nor do we process any data likely to cause detrimental effects on child well-being.

6. Security Safeguards & Data Storage

In accordance with Section 8(5) of the DPDP Act 2023, we implement reasonable technical, physical, and administrative security safeguards to prevent personal data breaches:

• End-to-End Encryption in Transit: All HTTP network traffic is enforced via TLS 1.3 encryption (HTTPS with 256-bit encryption keys).
• Database Encryption: Stored personal data is isolated in secure PostgreSQL clusters protected with role-based access control and firewalls.
• Authentication Hardening: Passwords are encrypted utilizing multi-round salted bcrypt algorithms. Session tokens are digitally signed with cryptographic secrets.

7. Data Retention & Erasure Policy

Personal data is retained only for as long as your registered account remains active and necessary for the specified purposes of astrological consultation. If an account remains inactive for an extended period or upon receipt of a deletion request from the Data Principal, all associated personal data is permanently shredded and purged from active production servers.

8. Cross-Border Data Transfers

Your personal data is stored and processed on secure cloud server infrastructure. Any transfer of data outside India complies fully with Section 16 of the DPDP Act 2023 and the guidelines issued by the Central Government of India.

9. Statutory Grievance Redressal Mechanism

If you have any questions, concerns, complaints, or wish to exercise any of your statutory rights as a Data Principal under the DPDP Act 2023, please contact our designated Grievance Redressal Officer:

Grievance Officer Name	Vedic Timeline Support Team
Designation	Statutory Grievance & Data Protection Officer
Dedicated Email	info@vedictimeline.com
Platform Email	info@vedictimeline.com
Acknowledgment SLA	Within 48 hours of receipt
Resolution SLA	Within 7 business days (exceeding statutory 30-day mandate)

If your grievance is not satisfactorily redressed within the specified period, you maintain the statutory right under Section 13(3) of the DPDP Act 2023 to submit a formal complaint to the Data Protection Board of India.