CALLMYASTRO PRIVACY POLICY

Effective Date: March 8, 2025

1. INTRODUCTION

CallMyAstro ("Platform"), operated by CMA Solutions LLP ("we," "us," "our"), is committed to safeguarding your privacy in compliance with applicable laws, including the Information Technology Act, 2000 (India), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Digital Personal Data Protection Act, 2023 (DPDP Act). This Privacy Policy governs the collection, processing, storage, and disclosure of your Personal Data through our website (www.callmyastro.com) and mobile application.

By accessing or using the Platform, you expressly consent to the practices described herein. Continued use constitutes unconditional acceptance of this Policy. If you do not agree with any terms, please refrain from using the Platform.

2. LEGAL BASIS & DEFINITIONS

Personal Data: Any information that identifies you directly or indirectly (e.g., name, phone number, email address, birth details).

Sensitive Personal Data (SPD): Includes financial information, biometric data (e.g., voice recordings), and religious beliefs (e.g., astrological data).

Consent: Freely given, specific, informed, and unambiguous agreement to process your data.

Data Controller: CMA Solutions LLP, responsible for determining the purposes and means of processing your data.

Data Processor: Third-party service providers (e.g., payment gateways, cloud storage) who process data on our behalf.

3. DATA COLLECTION

3.1 Personal Data Provided by You

Mandatory for Registration:

• Full name and email address
• Phone number (used only for OTP verification)
• Payment information (processed securely via third-party payment gateways; we do not store complete card data)

Optional: You can use our services without providing this information:

• Date, time, and place of birth (provided only if you wish to receive personalized astrological consultations)
• Gender and profile photo (entirely optional)
• Location data (only accessed with your explicit permission and only while using the app)

3.2 Automatically Collected Data

Technical Data: IP address, device ID, browser type, operating system, cookies (see Section 8).

Usage Data: Pages visited, session duration, clickstream patterns, and interactions with the Platform.

3.3 Voice Recordings

Purpose: Voice recordings are used solely to facilitate voice-to-text functionality for astrological queries.

User Control: You can disable microphone access at any time through your device settings.

Retention: All voice recordings are encrypted using AES-256 encryption and automatically deleted after 30 days.

Access Limitations: Recordings are accessible only to authorized personnel for service improvement and troubleshooting.

Opt-Out: You can use text-based consultation options without using voice features.

4. LEGAL PURPOSES FOR PROCESSING

We process your data to:

• Fulfill Contractual Obligations: Provide astrology consultations, process payments, and deliver services.
• Comply with Legal Mandates: Adhere to tax laws, court orders, and regulatory requirements.
• Protection of Vital Interests: In extremely rare circumstances, we may process data where we have a good-faith belief that access, use, preservation, or disclosure of information is reasonably necessary to:
  • Comply with applicable law or respond to valid legal process
  • Detect, prevent, or address fraud, security, or technical issues
  • Protect against imminent harm to the rights, property, or safety of CallMyAstro, our users, or the public as required or permitted by law
• Pursue Legitimate Business Interests: Improve services, prevent fraud, and conduct analytics.

5. DATA SHARING & DISCLOSURE

We do not sell your data. Disclosures are limited to:

5.1 Third-Party Processors

• Payment gateways (e.g., RazorPay, Stripe)
• Cloud storage providers (e.g., AWS India)
• Analytics tools (e.g., Google Analytics, anonymized data only)

5.2 Legal Authorities

To comply with subpoenas, DPDP Act requests, or prevent imminent harm.

5.3 Affiliates/Partners

Only with explicit consent (e.g., promotional offers).

5.4 Third-Party Libraries and SDKs

Our app utilizes the following third-party services that may collect data:

• Firebase Analytics: Anonymous usage statistics
• Razorpay SDK: Payment processing
• Agora SDK: Audio/video call functionality

Each third-party service operates under its own privacy policy. We recommend reviewing these policies for complete information on their data practices.

6. DATA RETENTION & SECURITY

6.1 Retention Period

• Personal Data: Retained for 5 years post-account deletion for legal compliance.
• Payment Records: 7 years (per Indian tax laws).
• Voice Recordings: 30 days (deleted thereafter).

6.2 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption: All data in transit is protected using TLS 1.2+ encryption. Stored data is encrypted using AES-256 encryption.
• Access Controls: Only authorized personnel with a need-to-know basis can access user data, protected by multi-factor authentication.
• Regular Security Audits: We conduct quarterly security assessments and annual penetration testing.
• Data Backups: Encrypted backups are stored in secure environments with strict access controls.
• Breach Response: In the event of a data breach, we will notify affected users and relevant authorities within 72 hours of discovery.

While we implement strong security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. USER RIGHTS

7.1 GDPR (EU Users)

• Right to access, rectify, erase, restrict processing, and data portability.
• Right to withdraw consent at any time (email: info@callmyastro.com).

7.2 CCPA (California Users)

• Right to opt out of data "sale" (we do not sell data).
• Right to know/delete Personal Data collected in the past 12 months.

7.3 DPDP Act (India)

• Right to correction, grievance redressal, and nominate a representative.
• Data Localization: All SPD is stored on servers in India.

7.4 Exercising Rights

Submit verifiable requests to Mr. Harish (Grievance Officer) at info@callmyastro.com. We will respond within 30 days.

8. COOKIES & TRACKING TECHNOLOGIES

8.1 Types

• Session Cookies: Essential for Platform functionality.
• Analytics Cookies: Track usage patterns (e.g., Google Analytics).
• Advertising Cookies: Serve personalized ads (opt-in).

8.2 Consent Management

Adjust preferences via browser settings or our cookie banner.

8.3 App Tracking Transparency

In compliance with Apple's App Tracking Transparency framework, we request permission before tracking your activity across other companies' apps and websites. You can change your tracking preferences at any time by:

• Going to Settings > Privacy > Tracking on your iOS device
• Selecting CallMyAstro and toggling "Allow Tracking" on or off

When you opt out of tracking, we will not use your data for targeted advertising purposes or share your Identifier for Advertisers (IDFA) with third parties.

9. MENTAL HEALTH & ACCURACY DISCLAIMER

Non-Medical Service: CallMyAstro provides astrology consultations only and is NOT a substitute for professional medical, psychiatric, psychological, or financial advice. If you are experiencing a medical or mental health emergency, please contact your local emergency services immediately (dial 911 in the US, 112 in the EU, or your local emergency number).

Astrology Disclaimer: All astrological readings, predictions, and interpretations are provided for entertainment and informational purposes only. We make no claims about the accuracy of predictions, and users should not make important life, health, financial, or legal decisions based solely on information received through our Platform. Users assume full responsibility for how they interpret and act upon the information provided.

10. CHILDREN'S PRIVACY

Age Restriction: The Platform is intended for users 18 years and older. We do not knowingly collect personal information from anyone under 18 years of age.

Verification: If we discover we have collected information from a person under 18, we will delete that information immediately.

Parental Rights: Parents or legal guardians who believe we might have collected information from a child under 18 can contact us at info@callmyastro.com to request its deletion.

11. GRIEVANCE REDRESSAL

Grievance Officer:

• Name: Mr. Harish
• Email: info@callmyastro.com
• Address: CMA Solutions LLP, 316/274, Ground Floor, Front Side Saidulajab, Western Marg, Near Lane No. 3, Delhi, India - 110030.
• Role: Resolve data-related complaints per DPDP Act Rule 4(2) and IT Rules, 2021.

12. POLICY UPDATES

Material changes will be communicated through the Platform or via email notification. We encourage you to periodically review this Policy for the latest information on our privacy practices.

Version Control:

• March 2025: Updated with App Tracking Transparency information, enhanced security details, and improved clarity on data collection.

13. CONTACT INFORMATION

For questions or data requests:

• Email: info@callmyastro.com
• Postal Address: CMA Solutions LLP, 316/274, Ground Floor, Front Side Saidulajab, Western Marg, Near Lane No. 3, Delhi, India - 110030.

14. APPLE SERVICES INTEGRATION

Our app does not access or integrate with Apple HealthKit, HomeKit, ClassKit, or similar Apple frameworks that contain sensitive user data.

If future versions of our app include such integrations, we will update this policy and request appropriate permissions.

The privacy "nutrition label" provided in our App Store listing accurately reflects our data collection practices as described in this policy.