Legal · How we handle your data

Privacy Policy

Last updated · 12 July 2026

Your privacy matters to us. This Privacy Policy explains what information Cosmic Palm collects, how we use it, and the rights you have over it. By using this Service you consent to the practices described below.

1. Who is the Data Controller?

Cosmic Palm is operated as a sole-proprietorship by an individual based in India. For all privacy-related queries, the data controller can be reached at vabsoldigitalsolution@gmail.com. We will respond to verified requests within the timelines required by applicable Indian law (including the Digital Personal Data Protection Act, 2023) and, where applicable, the EU GDPR.

2. Information We Collect

2.1 Information you provide directly

  • Birth details — full name, date of birth, time of birth and place of birth — used to compute your sidereal chart.
  • Payment metadata — name and (optionally) email at checkout. Card / UPI details are handled entirely by Razorpay; we never see them.
  • Palm capture — a still image of your palm captured (or uploaded) in-browser is used to derive line and mount scores. The raw image is processed in-browser and is not persisted on our servers unless required for diagnostic support.

2.2 Information we collect automatically

  • A geocoded latitude/longitude derived from the place of birth (via OpenStreetMap Nominatim) and the corresponding timezone.
  • Approximate IP address and basic request metadata, used solely for rate-limiting and abuse prevention.
  • Anonymous usage analytics (e.g., page views, feature usage) to improve the product.

3. How We Use Your Information

  • To compute your Vedic chart (Lagna, Moon Nakshatra, Vimshottari Dasha) and palmistry scores.
  • To generate and deliver your personalised Destiny Report PDF.
  • To verify your payment via Razorpay's cryptographic signature.
  • To respond to support enquiries.
  • To comply with legal and regulatory obligations.

4. Third-Party Services

We rely on a small number of trusted processors:

  • Razorpay — payment processing (PCI-DSS certified).
  • Anthropic Claude (via Emergent integrations) — AI generation of the report content. Only your computed chart values and palm scores are sent — not raw images.
  • OpenStreetMap Nominatim — birthplace geocoding.
  • Google Places API — autocomplete for the birthplace field.
  • MongoDB Atlas / Emergent infrastructure — hosting and database storage, located in India / Asia-region data centres.

We do not sell, rent or trade your personal data to advertisers or data brokers.

5. Data Retention

Your reading record and generated PDF are retained for up to 24 months from purchase to allow re-downloads and support. Payment ledger entries are retained for as long as required by Indian taxation and accounting law (typically up to 8 years). You may request earlier deletion at any time — see Section 7.

6. Cookies

We use a small number of strictly necessary cookies and localStorage entries to remember your language preference and your in-progress checkout session. We do not use third-party advertising cookies.

7. Your Rights

Subject to applicable law (including the Indian Digital Personal Data Protection Act, 2023 and the EU GDPR where it applies), you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal retention obligations on payment records).
  • Object to or restrict certain processing.
  • Withdraw consent at any time.

To exercise any of these rights, email us at vabsoldigitalsolution@gmail.com from the address associated with your reading.

8. Security

We use HTTPS everywhere, HMAC-SHA256 for payment-signature verification, encrypted database connections, and Razorpay's PCI-DSS infrastructure for card processing. No system is 100% impenetrable, but we apply industry-standard safeguards.

9. Children

Cosmic Palm is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has submitted data, contact us and we will delete it.

10. Changes to this Policy

We may update this policy periodically. Significant changes will be highlighted on this page with a new "Last updated" date.

11. Contact

For any privacy concern, write to vabsoldigitalsolution@gmail.com.

Made with Emergent