Privacy Policy

Last updated: 19 August 2026

This policy explains what personal information BabaSays collects, why it is collected, where it is stored, and your rights. We collect only what is needed to generate your birth chart and deliver a personalised daily brief.

1. What we collect

• Identity & contact: your name, WhatsApp number, and email address.
• Birth details: date of birth, time of birth (optional), and birth city. These are used to compute your Vedic chart.
• Onboarding questionnaire: life stage, field of work, focus areas, current concern, and up to three free consult questions. Used to tailor the tone and focus of your brief.
• Payment metadata: Razorpay subscription id, customer id, and mandate status. We do not see or store your card number, UPI PIN, or bank credentials — these stay with Razorpay.
• Delivery logs: whether each daily brief was sent, and delivery timestamps.

2. Where it is stored

Personal data is stored on Supabase (PostgreSQL) in the Mumbai region (ap-south-1). Access is restricted to the sole operator via a service-role key held in a private server environment. Data is encrypted at rest and in transit.

3. Who we share it with

• Razorpay Software Pvt Ltd — to process payments and manage the recurring mandate. Governed by Razorpay's privacy policy.
• OpenAI — your birth chart derivations and questionnaire snippets are sent to generate the daily brief. Payloads are configured to not be used for training.
• WhatsApp / Meta — the finished daily brief is delivered via WhatsApp.
• Supabase — our storage provider.
• Government authorities — only if required by valid legal process.

We do not sell your data. We do not run advertising trackers or third-party analytics on the signup form.

4. How long we keep it

While your subscription is active and for up to 12 months after cancellation, to support renewals, dispute handling, and tax records. Delivery logs and financial records may be retained longer where Indian tax law requires it.

5. Your rights

• Access, correct, or update your personal data.
• Delete your account and personal data (subject to legal retention above).
• Withdraw the UPI/card mandate at any time via Razorpay or by contacting us.
• Ask what data we hold about you.

Send any request to preity.o@gmail.com. We aim to respond within 7 business days.

6. Cookies

The BabaSays website does not set marketing or analytics cookies. Razorpay's checkout modal may set cookies within its own frame — those are governed by Razorpay's policy.

7. Children

BabaSays is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If a minor's data reaches us, we will delete it on notice.

8. Changes to this policy

Material changes will be posted on this page with an updated date. Continuing to use BabaSays after a change means you accept the updated policy.

9. Grievance contact

For privacy grievances, write to preity.o@gmail.com with the subject "Privacy Grievance". Full contact details on the Contact page.