Privacy Policy

1. Eligibility (18+ or Legal Guardian)

You must be at least 18 years of age to submit birth details, create an account, or request a report on TrikonVeda. If birth details of a minor (under 18) are entered—for example in a family or child chart—only the minor's parent or legal guardian may submit that information and provide consent on their behalf.

2. What We Collect

Depending on which features you use, our server routes store the following categories of information in our PostgreSQL database:

• Birth Details & Family / Compatibility Profiles: Name or display label, date of birth, time of birth (or confirmation that exact time is unknown), birth city/place, geographic coordinates (latitude/longitude), UTC offset / timezone, optional gender and relationship label, and saved calculation outputs (charts, reports, remedy logs, and compatibility results).
• Account & Session Data: When signing up with email and password, we store your name, email address, verification status, hashed password, role, and session records (session token, expiry, IP address, and browser user agent).
• Instant Intake & Concierge Lead Records: When you submit the /instant web form, we store your submitted free-text birth message, extracted name, parsed birth fields, your required delivery contact (WhatsApp number, Instagram handle, or email address used to send your report link, PDF dossier, and payment/refund notices), ambiguity review flags, and consent proof (consent timestamp and consent policy version, currently 2026-11-v2, confirming eligibility and agreement to automated and, where enabled, AI-assisted report generation).
• UPI Unlock & Verification Records: When requesting a paid report unlock via direct UPI link, we store order/unlock reference IDs, tier, amount, unlock passkey/question quota, optional contact info, and the 12-digit UPI Transaction Reference (UTR) you submit. We never collect or store bank account passwords, card numbers, CVVs, or UPI PINs.
• Guidance Chat & Palmistry Inputs (When Enabled): When interactive guidance features are active, typed questions and responses are saved in conversation history. Uploaded palm photos, when that feature is enabled, are transmitted only for real-time visual analysis and are not saved to database tables.
• First-Party Event Telemetry: We log first-party application events in our database (event name, category, page path, platform, and non-secret metadata; passwords, tokens, and credentials are stripped before storage).

3. Concierge Processing Mode & Geocoding

At launch, automated public engines are paused (concierge processing mode). Requests submitted via /instant are saved to our database queue without running automated instant calculations or external AI inference during submission. In concierge mode, the operator reviews your parsed birth details, resolves any flagged timezone or city ambiguities, and prepares your unlock link. Every report delivered is an automated software-generated report, not a manual human consultation, and concierge PDF reports contain no AI-generated text.

When you enter a birth city that is not present in our built-in city list, our backend sends only the place-name query string to OpenStreetMap Nominatim to resolve latitude, longitude, and country metadata.

4. AI Provider & Prompt Sanitization

Concierge requests submitted through /instant do not call third-party AI APIs during intake, AI-assisted chat features are disabled at launch, and concierge PDF reports contain no AI-generated text. When optional interactive AI commentary or mentor chat endpoints are enabled in the future with a configured API key, we use Google's Gemini API to generate narrative responses.

Before forwarding typed guidance questions to Google's Gemini API, our backend applies best-effort scrubbing to mask direct identifiers (such as your typed name, birth city, date of birth, email address, phone number, URLs, and handles). Your question text and computed chart indicators (or an uploaded palm photo when vision analysis is active) are still sent to Google's Gemini API to produce a response. AI-assisted chat features are off at launch, and concierge PDF reports contain no AI-generated text. If we enable optional AI features, the chart details needed for your question and the question you type are sent to Google's Gemini API; we try to remove names and contact details but cannot guarantee it.

5. Data Retention

We retain submitted birth details, concierge leads, consent logs, saved charts, chat history, and telemetry records for up to 90 days from your last activity (or until deletion is requested), unless a retention period of 2920 applies to payment/UTR audit records under Indian tax or accounting rules. Automated database backups expire within 30 days.

6. Your Rights & Data Deletion (Within 30 Days)

You may request access to, correction of, or deletion of your personal and birth data:

• Signed-in Users (In-App Account Deletion): Authenticated account holders can delete their user account, profiles, family members, birth charts, saved reports, remedy logs, chat history, and first-party telemetry from Account Settings.
• Concierge Leads & Deletion Requests by Email: Because /instant concierge leads are not tied to an account login, you may request deletion of any concierge lead, birth record, or account data by emailing privacy@trikonveda.com with the subject Data Deletion Request and the name, birth date, or contact used. Verified requests are completed within 30 days (excluding non-erasable statutory payment records, if any).

7. Security & Contact Information

API routes enforce session checks where authenticated, request schema validation, and rate limiting. No online system can guarantee absolute security.