LifeAstroAPILifeAstroAPI

Privacy Policy

Last updated: 22 May 2026

This Privacy Policy explains how Ayanshu Life (“we”, “us”, “Company”), the operator of LifeAstroAPI, collects, uses, and protects your information when you use our website, APIs, and related services (the “Service”). We comply with India's Digital Personal Data Protection Act, 2023 (DPDP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data we collect

  • Account information: name, email address, billing country, organisation (optional).
  • Payment metadata: transaction ID, amount, currency, payment method type. Full card numbers, UPI VPAs, and bank account details are processed directly by our payment partners and never touch our servers.
  • API request metadata: endpoint, timestamp, HTTP response code, duration, IP address (for rate-limiting and abuse prevention). We do not log the request body or response body.
  • Cookies and analytics: session cookies for authentication, and Google Analytics cookies on our public pages to understand which pages are visited and how visitors find us. Analytics is not loaded on the dashboard, admin, login, signup or checkout pages, and we do not send your account details or API inputs to it.
  • Edge geolocation: we use Cloudflare's edge network to detect your country (not exact location) so we can display localized currency, tax rules, and payment methods on the website. The country code is processed in your browser, used only to render the page, and never stored on our servers.

2. How we use your data

  • To authenticate API keys and operate the Service.
  • To meter usage for billing and to send receipts, invoices, and service notifications.
  • To investigate abuse, fraud, and security incidents.
  • To comply with our legal and tax obligations in India.

We do not sell your personal data to third parties. We do notuse the calculation parameters you send to the API (birth date, time, coordinates, names) for any purpose other than computing the requested result.

3. Third-party processors

We share the minimum data necessary with the following processors:

  • Razorpay — Indian payment processing (INR).
  • PayPal — international payment processing (USD).
  • Cloudflare — CDN, DDoS protection, edge security.
  • Google Analytics — anonymous website usage statistics on public pages.
  • Resend — transactional email delivery.
  • Cloud hosting provider — to run the API and dashboard infrastructure.

4. Data retention

  • Account data: retained while your account is active and for up to 90 days after closure (or longer if required for tax/legal compliance).
  • Billing records: retained for 8 years to comply with Indian tax law.
  • API request metadata: retained for 30 days for operational and abuse-prevention purposes.

5. Your rights

Subject to applicable law, you have the right to:

  • Access and obtain a copy of your personal data.
  • Correct inaccurate data.
  • Request deletion of your account and associated data (subject to legal retention requirements).
  • Withdraw consent for processing where consent is the lawful basis.
  • Lodge a complaint with the Data Protection Board of India (DPDP) or your local supervisory authority.

You can export or delete your account data at any time from your dashboard, or by emailing [email protected].

6. Security

We use TLS for all data in transit, encrypt sensitive data at rest, scope API key permissions, and follow industry best practices for access control and incident response. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify affected users and the appropriate regulators within the timelines required by applicable law.

7. International data transfers

We are based in India. If you access the Service from outside India, your data may be transferred to and processed in India and in regions where our hosting and processor partners operate. We rely on appropriate safeguards (including standard contractual clauses where required) for such transfers.

8. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to the address on your account, and the “Last updated” date above will be revised.

10. Contact / Grievance Officer

For any privacy questions, data requests, or grievances under DPDP / GDPR, contact the Grievance Officer at [email protected]. You can also reach us through the Contact Us page.