1. Scope
This policy covers kundlireports.com and the reports we sell. It is written to meet the Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025, the Information Technology Act, 2000 and the SPDI Rules, 2011, and the basic requirements of the EU/UK GDPR for international customers.
2. What we collect
| Data | When | Why |
|---|---|---|
| Name, email address, phone (optional) | Checkout | To deliver the report, send the receipt and handle support |
| Date, time and place of birth; derived latitude, longitude and time zone | Checkout | To calculate the chart for your report |
| Partner’s birth details | Kundli Milan only | To compare two charts |
| Child’s birth details (name optional) | Baby Name Report only | To find the nakshatra and name syllables |
| Name spellings | Numerology Report only | To calculate name numbers |
| UPI transaction reference (UTR), amount, order ID; the payer name shown in our bank statement | Payment step | To verify your payment, issue refunds, prevent fraud and keep tax records |
| Basic technical logs (IP address, browser, time) | Any visit | Security and abuse prevention |
You pay by UPI through your own bank or UPI app. We do not receive your UPI PIN, card or bank login details. If card payments are added later through Razorpay, Razorpay will process them under its own privacy policy and we will update this page.
The free kundli tool runs entirely in your browser. Birth details typed there are not sent to us.
3. Legal basis and consent
We process birth details on the basis of your explicit consent, given through an unticked checkbox and a standalone Consent Notice at checkout, and to perform the contract you enter into. Payment and tax records are kept to comply with law.
4. How we use data
- Generate and email your report, and resend or correct it on request
- Respond to support requests and grievances
- Meet legal, tax and accounting obligations
- Protect the service against fraud and abuse
We do not sell personal data, share it for advertising, build marketing profiles from birth data, or use it to train AI models. We will only email you marketing if you separately opt in, and you can unsubscribe at any time.
5. Retention and deletion
- Birth details and report PDFs: deleted automatically 90 days after delivery, unless you tick the optional box asking us to keep them for re-orders (then until you ask us to delete them).
- Invoices and payment records: kept for the period required by Indian tax law.
- Security and processing logs: kept for at least one year, as required by the DPDP Rules.
- Download links in delivery emails expire after 7 days.
6. Who processes data for us
| Provider | Purpose |
|---|---|
| Cloudflare | Website hosting, order storage, email routing, cookieless analytics |
| Our bank / UPI network | Receiving UPI payments (we see the UTR, amount and payer name) |
| GitHub (Microsoft) | Temporary compute to generate the PDF (data is fetched for the job and not stored in logs) |
| Resend | Sending order notifications and the delivery email |
Some providers may process data outside India. We choose providers with strong security practices and limit what each receives to what it needs.
7. Children
We do not knowingly sell to anyone under 18. Children’s data (Baby Name Report) is provided by a parent or guardian, is used only to create the report, and is never used for tracking, profiling or targeted advertising.
8. Your rights
- Access a summary of your data and how it is processed
- Correct or complete inaccurate data
- Erase your data (subject to legal retention of tax records)
- Withdraw consent at any time — this will not affect processing already done, and an undelivered report cannot then be generated
- Nominate another person to exercise your rights in case of death or incapacity
- Raise a grievance with us, and then complain to the Data Protection Board of India
Email support@kundlireports.com. We respond within the timelines in our Grievance policy. EU/UK residents may also complain to their local supervisory authority.
9. Security
HTTPS everywhere, encrypted storage, access limited to what is needed, signed webhooks, secrets kept out of code, and automatic deletion. If a personal-data breach occurs, we will inform affected users and the Data Protection Board as required by law.
10. Cookies
We use no advertising or tracking cookies. Analytics, if enabled, are cookieless (Cloudflare Web Analytics). Our payment provider may set strictly necessary cookies during checkout.
11. Changes
We will post updates here with a new date. Material changes affecting consent will be notified before they apply.
Questions about this page? Email support@kundlireports.com. A Hindi summary is available on request; the English version governs.