Privacy Policy · Version 1.2 · Effective on publication (draft) · Back to Legal

Privacy Policy

DevDarsha ("we", "us", "our") operates the DevDarsha API products — including the Panchang API, Horoscope API, Numerology API, and future API products — through panchang.devdarsha.com and the platform website at platform.devdarsha.com. This policy explains what data we collect, why, and your rights over it.

Overview

We collect minimal personal data. We do not sell your data. We do not use third-party advertising trackers. This policy applies to all visitors to our website and all users of the DevDarsha API products (Panchang API, Horoscope API, Numerology API, and future API products).

Data We Collect

Account data

When you create an account: your name, email address, and hashed password. On paid plans, payment information is handled by Razorpay and is never stored on our servers.

API usage data

For each API request we log: your API key ID, request timestamp, endpoint called, HTTP status returned, and coarse request parameters. We do not log the full query string or the request body, and we do not retain the personal inputs you pass to compute endpoints.

Product input data

Each DevDarsha API product processes the inputs you send to compute a result. These inputs are processed to return the response and are not retained as personal profiles:

  • Panchang API may process date, time, location, coordinates, timezone, and calendar-related inputs.
  • Horoscope API may process birth date, birth time, birth place, coordinates, timezone, chart inputs, and generated Jyotish outputs.
  • Numerology API may process name, romanized name input, date of birth, calculated numerology numbers, and generated interpretation outputs.

Technical & security data

For security, abuse prevention, and account protection we record a device/security fingerprint for API requests and sign-in events. This consists of: a one-way salted hash of your IP address, a one-way salted hash of your User-Agent, your approximate location (country and approximate city, derived from an offline IP-geolocation database), your browser, operating system, and device type, and request latency. We do not store your raw IP address — only its salted hash is retained. Approximate location is an estimate and may be inaccurate. This fingerprint is used to detect compromised keys, fraud, and abuse, and is visible to our staff only through an access-controlled internal console.

Feedback

When you submit feedback via POST /v1/feedback or the website form, we store your name, email, plan, and message text.

Cookies

We use a single session cookie for authentication and one analytics cookie if you consent. See our Cookie Policy.

For users in the European Economic Area (GDPR) and India (DPDP Act 2023):

  • Contract performance: Account creation, API key management, billing.
  • Legitimate interest: Security monitoring, abuse prevention, usage analytics.
  • Consent: Non-essential cookies and marketing emails.
  • Legal obligation: Retention of accounting and transaction records as required by applicable Indian law.

How Data Is Used

  • Provisioning and managing your API key and account.
  • Enforcing rate limits and quota restrictions.
  • Detecting and preventing abuse and fraudulent activity.
  • Sending transactional emails (key rotation alerts, quota warnings, invoices).
  • Improving the accuracy and performance of the Panchang engine.

Sharing & Disclosure

We do not sell personal data. We share data only with:

  • Razorpay (India): Payment processing for paid plans. Razorpay processes payment-instrument data on our behalf in India under its own privacy policy and DPDP-aligned terms; we do not store full card or other payment-instrument details on our servers.
  • Cloud / hosting infrastructure (India region, cloud provider's ap-south-1-equivalent zone): Hosting and database services. Personal data normally remains in India.
  • Law enforcement: Only when required by applicable Indian or international law, after legal review.

Cross-border transfers. Personal data is normally hosted within India. Limited cross-border processing may occur through email/operational tooling vendors or international payment-network routing for Razorpay; in such cases we rely on the contractual and organizational safeguards required by applicable law and transfer the minimum data necessary.

Data Retention

  • Account profile (name, email, hashed password, plan): retained for the life of the account; on a verified deletion request, processed within 30 days and removed within 90 days subject to legally-required holds described below.
  • API usage logs: 90 days, then deleted.
  • Aggregated usage / quota counters (no raw request payloads): up to 24 months for trend reporting.
  • Billing & transaction records: retained as required by applicable Indian accounting, tax, and company law.
  • IP addresses: never stored in raw form — only a one-way salted hash is kept.
  • Security/device fingerprints & audit records (hashed IP, hashed User-Agent, approximate location, browser/OS/device, and staff action logs): retained for security, fraud-prevention, and accountability purposes; deleted with the account on a verified deletion request, subject to legally-required holds.
  • Feedback submissions and support records: up to 24 months from closure.

Records that we are legally required to retain are kept only for the period required and are isolated from active service data after account deletion.

Your Rights

You have the right to:

  • Access a copy of your personal data.
  • Correct inaccurate data via your dashboard.
  • Delete your account and data (see account deletion flow).
  • Port your data in a machine-readable format on request.
  • Withdraw consent for non-essential cookies or other consent-based processing at any time.

To exercise any right, email [email protected] (privacy queries and DPDP data-rights and grievance contact). For DPDP-specific requests, see the Indian Users — DPDP Act 2023 section below for the response window.

Withdrawing consent: email [email protected] from your registered email address. We stop processing tied to that consent within 7 days of verification. Records that we are legally required to retain (for example, billing and transaction records) continue to be held under our retention rules above.

Indian Users — DPDP Act 2023

Under India's Digital Personal Data Protection Act 2023, you have the right to:

  • Know what personal data we process and the purpose.
  • Correct or erase your personal data.
  • Nominate a representative to exercise your rights.
  • Withdraw consent for processing that relies on consent.
  • Approach the Data Protection Board of India if your rights are not addressed.

Data Rights / Grievance Contact

For data-rights requests, grievances, or queries about how DevDarsha handles personal data under the DPDP Act 2023:

  • Email: [email protected]
  • Response window: within 90 days of receipt, in line with the DPDP Rules.

If your data-rights request is not resolved through this channel, you may approach the Data Protection Board of India under the procedures notified under the DPDP Act 2023.

Personal Data Breach Notification

In the event of a personal-data breach, DevDarsha will notify affected users and the relevant authority where and as legally required, including under the DPDP Act 2023 breach-intimation obligations. Notifications include, where known, the nature of the breach, the data categories involved, likely consequences, and the measures we have taken or propose to take.

Cookies

We use a strictly necessary session cookie and, with your consent, one analytics cookie. Full details in our Cookie Policy.

Security

All data is transmitted over TLS. Passwords are bcrypt-hashed. API keys are stored as SHA-256 hashes. We undergo periodic security reviews and maintain a responsible disclosure policy.

Contact

Privacy queries: [email protected]
Data Rights / Grievance contact (DPDP): [email protected]
Security: [email protected]
Legal: [email protected]

Company Identity

  • Brand / service: DevDarsha (sole-proprietorship brand operating Panchang Engine and the DevDarsha API).
  • Correspondence address: Kolkata, West Bengal, India.
  • Contact email: [email protected]
  • Governing law / jurisdiction: Laws of India; courts at Kolkata, West Bengal.
Cookie Policy Back to Legal