Privacy Policy

Last updated: 27th July 2026

This Privacy Policy is in continuation of the Terms and Conditions on our Platform (as defined below) and shall be read together with them. All capitalized terms used but not defined here shall have the meaning given to them in the Terms and Conditions.

Spandha Private Limited, a private company incorporated under the Companies Act, 2013, having its registered office at F-1, Sector 3, Noida, Gautam Budh Nagar, UP - 201301 (“CosmicSync”, “We”, “Us” or “Our”) operates a platform that provides users (“Clients”, “You”, “Your” or “User”) with Vedic astrology and timing-related informational services as described in our Terms and Conditions. These Services are made available to you through our website [cosmicsync.app] and our mobile applications and any related or connected media channels owned by us (“Platform”).

This Privacy Policy (“Policy”) explains the kinds of information we collect from you when you access or use the Platform, the reasons and methods for collection, how we use and disclose it, and the practices we follow to safeguard it. By accessing and using the Platform, you agree to be bound by this Policy, which is deemed to create a legal contract between you and CosmicSync.

This Policy must be read in conjunction with all applicable laws of the jurisdiction from which you access the Platform, including the Digital Personal Data Protection Act, 2023 (India) and rules made thereunder, the (Indian) Information Technology Act, 2000 and its rules, and other similar laws recognised in your jurisdiction.

We reserve the right to amend, change or update this Policy at our discretion. Any material change will be notified to your registered email address. Your continued use of the Platform after such notice constitutes acceptance. Please keep your registered email accurate and active.

Definitions

  1. “Account” shall have the meaning given in the Terms and Conditions.
  2. “Non-personal Identification Information” includes browser name, device/computer type, and technical information about your connection (operating system, ISP, and similar information used in connection with access to the Platform).
  3. “Personal Identification Information” means information voluntarily shared by you from which your identity can reasonably be ascertained, including name, email address, phone number and residential address provided when creating an Account or using the Platform and Services.
  4. “Astrological / Birth Data” means the birth details you provide for the Services to function — including your date of birth, time of birth and place of birth — together with data derived from them (e.g. nakshatra, tithi, bird/element, planetary positions, charts and readings). You acknowledge that this data is central to the Services and cannot be provided by us without it.
  5. “Sensitive Personal Data or Information” / “SPDI” means information capable of

identifying you directly or indirectly, including: (i) Platform credentials; (ii) financial information; (iii) physical, physiological and mental-health condition; (iv) sexual orientation; (v) medical records and history; (vi) biometric information; and (vii) any other category treated as sensitive under applicable law.

  1. “Third Party” means any party other than you and CosmicSync.

Non-personal Identification Information, Personal Identification Information, Astrological/Birth Data and SPDI are together referred to as “Information”.

Information We Collect

  1. Information you provide voluntarily, including Account creation details and any additional Information provided during use of the Services.
  2. Birth and astrological details — your date, time and place of birth, provided so the Platform can compute your nakshatra, tithi, elemental/bird profile, charts and personalised readings.
  3. Information from Third-Party sign-in — if you register using Google, Facebook, Instagram or a similar Third-Party account, you may link that account by providing login information or authorising access. It is your responsibility to review the policies of that Third-Party service.
  4. Cookies — small data files stored by your browser. We use cookies to extend functionality and analyse usage. No information personally identifying you is stored in cookies. You may configure your browser to reject cookies, though this may prevent parts of the Platform from working.
  5. SPDI — depending on how you use the Platform you may be asked to provide certain SPDI. We protect such information under reasonable security practices and applicable privacy law.
  6. Aggregated data — we may study demographics, interests, locations and usage patterns in aggregated, de-identified form and use or share such aggregate statistics; it does not contain your personal information.
  7. Device and usage information — device type/family, operating system, carrier, unique device id, time zone, browser type/version, language, login date/time, features used, and (where you consent) approximate location.
  8. Push notifications — you may disable these in your device settings.
  9. Verification — we may require additional information to confirm your identity before granting access to, correcting, or deleting your Information.

How We Use Your Information

  1. We use the Information to provide, personalise and improve the Services — including computing your astrological/timing readings from your Birth Data — and to respond to your queries. If you provide information for a specific purpose, we use it for that purpose.
  2. Automated processing. The Platform generates readings and timing insights through automated calculation and, in some features, AI-assisted processing based on the Birth Data and inputs you provide. Where required by applicable law, you have the right to information about, and to object to, decisions based solely on automated processing.
  3. Except as described here, we will notify you before sharing your Information with any Third Party and give you the opportunity to decline. Declining certain sharing may limit the

Services available to you.

Disclosure of Information

CosmicSync does not sell your Information. We may disclose Information only as follows:

  1. Service providers. We use trusted Third-Party service providers to operate the Platform — including external computation/API providers used to derive certain astrological outputs (for example, planetary-position and chart calculations). Where such providers process your Birth Data on our behalf, they are bound by confidentiality and data-protection obligations and may use it only to deliver the relevant service.
  2. Business transfers. Information may be transferred as part of a merger, acquisition, reorganisation, financing or sale of assets, subject to this Policy.
  3. Personalised readings. Your Information is used to generate personalised readings. Where a reading is shared or made visible (e.g. compatibility features), your gender, date of birth and place of birth are not disclosed.
  4. Communications. You agree to receive transactional and, where permitted, promotional messages by SMS/RCS, email or WhatsApp. You may opt out of promotional messages. Your mobile number and SMS consent data will not be shared with third parties or affiliates for their own marketing purposes.
  5. Legal requirement. We may disclose Information where required for a lawful purpose or to comply with a legal obligation.

Data Retention

  1. We retain your Information only for as long as necessary to provide the Services, comply with legal, tax or statutory obligations, resolve disputes and enforce our agreements. On Account deletion we delete or de-identify your personal and Birth Data within [90] days, except where retention is required by law (in which case it is isolated and retained only for that purpose).

Account & Data Deletion

  1. You can delete your Account and associated personal and Birth Data at any time:

On deletion we remove your profile, Birth Data and derived readings within [90] days, subject to the legal-retention exception above. Some anonymised, aggregated data that can no longer identify you may be retained.

Security

  1. We implement reasonable physical, electronic and managerial safeguards to protect your Information against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is fully secure, and we cannot guarantee absolute

security.

  1. You are responsible for keeping your credentials confidential. Notify us immediately of any unauthorised use of your Account.
  2. Access to personal data is restricted to trained employees bound by confidentiality obligations who need it to perform their duties.

Children

  1. The Services are intended for users 18 years and older. Under the Digital Personal Data Protection Act, 2023, any individual under 18 is a child, and processing a child’s personal data requires verifiable parental/guardian consent. We do not knowingly collect personal data from children without such consent. If you believe a child has provided us data without consent, contact us and we will take steps to delete it.

Your Rights

  1. Subject to applicable law, you have the right to: access your personal data; correct or complete inaccurate/incomplete data; request erasure; restrict or object to processing; data portability; and to be informed of rectification or erasure. You may also nominate another individual to exercise these rights in the event of death or incapacity, as provided under the DPDP Act, 2023. To exercise any right, contact our Grievance Officer below. Certain requests may be subject to verification and statutory retention obligations, and a reasonable fee may apply where permitted.
  2. If you use the Services from outside India, you consent to your Information being processed in India, where data-protection laws may differ from those of your country.

Advertising & Promotions

  1. Any advertising or promotional material we publish for CosmicSync’s astrology and timing services adheres to the Advertising Standards Council of India (ASCI) guidelines and the Consumer Protection Act, 2019. We include clear disclaimers that readings and timing insights are for informational and entertainment purposes and carry no guaranteed outcomes.

User Declarations

You confirm that you understand: (a) Information is being collected; (b) the purpose of collection; (c) the intended recipients; (d) that you may choose not to provide the Information sought; and (e) that you may withdraw consent in writing, in which case we may be unable to provide the related Services.

Grievance Redressal

  1. In accordance with the DPDP Act, 2023, the Information Technology Act, 2000 and rules thereunder, you may raise any grievance regarding your Information with our Grievance Officer:

We will acknowledge grievances within [24–48 hours] and endeavour to resolve them within the timelines prescribed by applicable law.

BY AGREEING TO THIS POLICY, YOU CONSENT TO OUR PROCESSING OF YOUR INFORMATION FOR THE PURPOSES SET OUT HEREIN.