Privacy Policy

1. Who we are

The Website is operated by TARINI INNOVATION HUB LLP. Tarini computes personalised Hindu muhurat (auspicious timing) and panchang (almanac) guidance from your birth details and/or location, read against Vedic astrology. For any privacy question, or to exercise your rights, you can contact us at contact@tarini.app.

2. Data we collect

• Account & identity: phone number (verified via WhatsApp OTP), full name and email address.
• Panchang & muhurat inputs: your geolocation (latitude/longitude) or a manually selected city, state and country, and a date. Muhurat products also use birth details — date, time and place of birth.
• Transaction data: orders you place and payment confirmation status. Payments are handled by Razorpay; we do not collect or store your full card numbers.
• Marketing attribution: UTM parameters captured from the URL you arrive through.
• Usage & device data: analytics events and cookies set by Google Analytics 4 (see our Cookie Policy).

3. How and why we use your data

• To generate and deliver your muhurat and panchang guidance.
• To create and secure your account and authenticate you via OTP.
• To process orders and payments through Razorpay.
• To provide customer support and respond to your enquiries.
• To understand usage and improve the Website through analytics.
• To attribute marketing activity and, for logged-in users, maintain our customer records in HubSpot.
• To comply with legal, tax and regulatory obligations.

4. Legal basis and consent

We process your personal data under the Digital Personal Data Protection Act, 2023 (India) and applicable rules under the Information Technology Act, including the SPDI Rules. We rely on your consent, given when you provide your details or use a feature, and on the necessity of processing to deliver a service you have requested or to meet a legal obligation. You may withdraw consent at any time as described in "Your rights" below; withdrawal does not affect processing already carried out.

5. Sharing and subprocessors

We do not sell your personal data. We share it only with the service providers ("subprocessors") that make the Website work, each for the limited purpose listed:

• Cloudflare — website hosting and content delivery.
• Supabase — authentication, database and edge functions.
• Google Cloud (Cloud Run) — the astrology computation backend.
• Google Analytics — website usage analytics.
• HubSpot — customer relationship management and marketing attribution for logged-in users.
• Razorpay — payment processing.
• Resend — transactional email (contact and order confirmations).
• Notion — blog content delivery.

6. Cookies and analytics

The Website uses Google Analytics 4, which sets cookies to measure usage. For the full list of cookies and local storage we use, and how to opt out, please read our Cookie Policy.

7. Data retention

We keep your personal data only for as long as needed to provide the service, maintain your account, meet legal, tax and accounting obligations, and resolve disputes. When data is no longer required, we delete or anonymise it.

8. Security

We use reasonable technical and organisational measures — including encrypted connections and access controls at our infrastructure providers — to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights under the DPDP Act, 2023

• Access — obtain a summary of the personal data we process about you.
• Correction — have inaccurate or incomplete data corrected or completed.
• Erasure — have your personal data deleted where it is no longer needed.
• Grievance redressal — raise a complaint with our Grievance Officer (see below).
• Nomination — nominate another individual to exercise your rights in the event of death or incapacity.
• Withdraw consent — withdraw consent to processing at any time.

To exercise any of these rights, email contact@tarini.app.

10. Children's data

The Website is not directed at children under 18. We do not knowingly collect personal data from children, and where we process a child's data we do so only with verifiable consent from a parent or lawful guardian, as required by the DPDP Act, 2023. If you believe a child has provided us data without such consent, contact us and we will delete it.

11. International transfers

Some of our subprocessors — including Google, HubSpot and Razorpay — may process personal data on servers located outside India. Where they do, we rely on their contractual and security commitments and on transfers permitted under applicable Indian law.

12. Grievance Officer

In accordance with the DPDP Act, 2023 and the IT Act, you may contact our Grievance Officer for any concern relating to your personal data at contact@tarini.app. We will acknowledge and respond to grievances within the timelines prescribed by law.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where appropriate, by notifying you. Your continued use of the Website after a change takes effect constitutes acceptance of the revised policy.