1.1 Information You Provide

• Authentication: Email address (for OTP-based login).
• Tool Inputs & Reports: Name, date/time/place of birth, astrological parameters, or reflections — processed to generate results, and saved to your private User Dashboard Vault for your personal access and review.
• Purchases: Name, email, billing details submitted via Graphy/Razorpay or Shopify/PayU. We do not directly store full card details.
• Communications: Emails, support messages, feedback.
• Community: Posts, comments, messages in community features.

1.2 Automatically Collected

• Device data: IP address, browser type, OS, device type, language.
• Usage data: Pages visited, tools used, time spent, referral URLs.
• Cookies: Session cookies, auth tokens, analytics cookies, advertising pixels.
• Approximate location: City/region from IP (no GPS).

1.3 From Third Parties

• Payment processors (transaction status, subscription info).
• Analytics partners (aggregated/pseudonymized insights).

1.4 Images You Upload (Face, Palm & Other Vision Tools)

1.5 Sensitive Information

1.6 Expert Consultations & the LIV AI Companion

• Consultations: when you consult an AI or human expert, we process your messages, intake answers and any files you share to deliver that consultation and keep your history. For a human expert, the content of the consultation is shared with that expert so they can help you — share only what is necessary.
• Recording: audio/video consultations are not recorded unless a feature enables it and the required participants consent; where made, recordings/transcripts are access-controlled, retained per policy, and can be subject to your data rights.
• LIV companion: to keep conversations continuous, LIV may store your chats and remember details you tell it (a "memory"). This is used only to personalise your companion for you. You can view, reset or delete your companion and its memory at any time, and deletion of your account removes it.
• AI processing: consultation and companion inputs may be sent to third-party AI providers to generate responses, as described in Section 4. We do not use your consultation or companion content to train AI models without a separate, explicit lawful basis, and we never use it for advertising.

1.7 Organisation / Enterprise Access

• Locations: Our servers (India), Graphy (India), Shopify (international with DPA).
• Retention: Saved tool results and reports are stored in your private User Dashboard Vault where you can review or delete them at any time. Membership records and credit transaction ledgers are retained for accounting and statutory compliance.
• Security: HTTPS/TLS, HMAC-SHA256 OTP hashing, secure tokens, access controls. No method is 100% secure.
• Breach: We notify affected users and authorities within 72 hours as required by law.

We do not sell your personal data.

• Payment processor: PayU (for credit-pack purchases) and Graphy (for memberships). We do not store full card details.
• AI providers: To generate readings, chat replies and image/report analysis, the inputs you submit to those specific tools (for example birth details, questions, or an uploaded image) may be sent to third-party AI services (such as OpenAI, Google Gemini and Groq) for processing. Uploaded images are processed and then deleted; only the resulting text/observation is retained per your retention window.
• Human experts: when you book or consult a human expert, the information needed for that consultation (your messages, relevant intake details and any files you share) is shared with that expert to provide the service. Experts are contractually required to keep it confidential and use it only for your consultation.
• Organisation administrators: if you use organisation access, your organisation's administrators receive usage/analytics about the organisation's members as described in Section 1.7.
• Realtime, media & payout providers: live consultations may use a realtime messaging and/or audio-video provider to connect the session; expert payouts use a payout provider. These process only the data needed for their function.
• Email & notifications: Email delivery (e.g. Brevo) for one-time codes and service messages; web-push notifications if you enable them.
• Analytics, tag management & advertising (consent-gated): We use Google Analytics 4 and Google Tag Manager (to load and manage measurement tags) and, for marketing, Google Ads (conversion tracking and remarketing) and Meta (Facebook/Instagram) Pixel. These load only after you opt in via our on-site consent banner (Google Consent Mode v2; storage defaults to denied). They are off by default. Where enabled with your consent, they may set cookies/identifiers used to measure usage and to show you relevant ads (including remarketing) on Google and Meta platforms. You can withdraw consent at any time by re-opening the banner.
• Legal requirements: When required by law, regulation, or to enforce our Terms.
• Business transfer: In case of merger/acquisition, data may transfer to successor entity.

Essential cookies are always active (they are required to run the site and keep you signed in). Non-essential categories — functional, analytics and advertising — are OFF by default and load only after you grant permission in our on-site consent banner. You can change or withdraw your choices at any time by re-opening the banner (your latest choice is recorded). The analytics/advertising cookies listed above are only set if you opt in; several are not currently active on the platform.

Consent is recorded with a version and timestamp so we can honour and evidence your choice.

Data may be processed outside India (Google/Meta in US, Shopify globally). Transfers rely on Standard Contractual Clauses or your explicit consent.

Email [email protected] with subject "Data Rights Request." Verified within 30 days.

• Under India's DPDP Act 2023, a "child" is anyone under 18 years. Kriyasya is an adults-only (18+) service and is not directed to anyone under 18.
• We do not knowingly collect personal data from anyone under 18. Because we do not operate a verifiable parental-consent mechanism, under-18s must not use the Platform.
• We do not perform behavioural tracking of, or targeted advertising directed at, children.
• If we learn that a child's data was collected, we will delete it promptly. Contact [email protected].

How credits work: Credits are non-refundable, non-transferable, non-cash prepaid advances used to access AI, vision and expert features. They are consumed at the point a result is delivered (a failed generation is not charged, or is refunded to your credit balance). Some tools instead grant a time-boxed pass (unlimited use for a set number of days once purchased). Credits and passes have no cash value and cannot be withdrawn or exchanged for money. See How credits & membership work for details.

• Duplicate payment — charged twice for the same transaction due to technical error.
• Technical failure — confirmed payment but access never granted and unresolvable.
• Damaged physical product — report within 48 hours with photos. Replacement/credit only.

Contact [email protected] within 7 days with your transaction ID.

• Cancellation does not entitle a refund for the current period.
• Auto-renewal can be cancelled via your Graphy account before the next billing date.
• Filing a chargeback without contacting us first is a Terms violation and may result in account termination.
• Expert consultations: a scheduled booking cancelled before the stated cut-off is refunded to your credit balance; after the cut-off, a partial or no refund applies as shown at booking. If you do not attend, the session may be forfeited. If the expert fails to attend, or a genuine technical failure prevents a live session from connecting, the corresponding credits are refunded. An instant live request that no expert accepts within the connection window is not charged. Full terms are in the Experts Marketplace & Expert Agreement.