Privacy Policy
Effective Date: December 26, 2024
Last Updated: December 26, 2024
In Short:
- We only collect what's needed for reports
- We don't sell your data
- No humans read your charts
- You can request deletion anytime
1. Australian Privacy Principles (APP) Compliance
AstroSetu complies with all 13 Australian Privacy Principles (APPs) set out in Schedule 1 of the Privacy Act 1988 (Cth). This section explains our compliance with each principle:
APP 1: Open and transparent management of personal information
We maintain this Privacy Policy and make it readily available on our website. We implement practices, procedures, and systems to ensure compliance with the APPs and to enable us to deal with privacy inquiries and complaints.
APP 2: Anonymity and pseudonymity
Wherever possible and lawful, you may interact with us anonymously or using a pseudonym. However, some services (such as account creation, payments, or personalized reports) require personal information to function.
APP 3: Collection of solicited personal information
We only collect personal information that is reasonably necessary for our functions or activities. We collect personal information by lawful and fair means and, where reasonable and practicable, directly from you. We do not collect sensitive information (such as health information) unless you consent and it is reasonably necessary for our services.
APP 4: Dealing with unsolicited personal information
If we receive personal information we did not solicit, we will determine whether we could have collected it under APP 3. If not, we will destroy or de-identify it as soon as practicable, provided it is lawful and reasonable to do so.
APP 5: Notification of the collection of personal information
At or before the time we collect personal information (or as soon as practicable after), we notify you about: the purposes of collection, who we may disclose it to, our Privacy Policy, and how to access and correct your information. You provide consent when you use our services or create an account.
APP 6: Use or disclosure of personal information
We only use or disclose personal information for the primary purpose for which it was collected, or for related secondary purposes where you would reasonably expect such use or disclosure. We may also use or disclose it with your consent, or as required or authorized by law.
APP 7: Direct marketing
We may use personal information for direct marketing only where you would reasonably expect it, you have consented, or we provide an opt-out mechanism. You can unsubscribe from marketing communications at any time by contacting us or using the unsubscribe link in our emails.
APP 8: Cross-border disclosure of personal information
Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the APPs (unless an exception applies). We use contractual arrangements to protect your information when using overseas service providers.
APP 9: Adoption, use or disclosure of government related identifiers
We do not adopt, use, or disclose government related identifiers (such as tax file numbers or Medicare numbers) as our own identifier, except in limited circumstances permitted by law.
APP 10: Quality of personal information
We take reasonable steps to ensure the personal information we collect, use, and disclose is accurate, up-to-date, complete, and relevant. You can request corrections to ensure your information remains accurate.
APP 11: Security of personal information
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorized access, modification, or disclosure. This includes encryption, secure servers, access controls, and regular security reviews. We destroy or de-identify personal information when it is no longer needed.
APP 12: Access to personal information
Upon request, we provide you with access to your personal information we hold, subject to exceptions under the Privacy Act. We respond to access requests within 30 days and may charge a reasonable fee for providing access.
APP 13: Correction of personal information
We take reasonable steps to correct personal information to ensure it is accurate, up-to-date, complete, relevant, and not misleading. If we correct information, we notify third parties where reasonable and practicable. If we refuse a correction request, we provide written reasons.
Making a Privacy Complaint
For privacy-related requests, contact privacy@mindveda.net. This is an automated compliance mailbox. AstroSetu does not provide live support. Please refer to FAQs and policies. Valid requests will be processed as required by law.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
2. Information We Collect
We may collect:
- Name (optional)
- Date of birth
- Time of birth
- Place of birth
- Email address (if you create an account)
- Usage data (pages viewed, features used)
- Device and browser information
- Payment information (processed securely by third parties)
When We Collect: We collect information when you use our services, create an account, make a purchase, or contact us.
3. How We Use Your Information
We use your data to:
- Generate astrological charts and insights
- Improve app accuracy and performance
- Process subscriptions (if applicable)
- Send service-related communications (with your consent for marketing)
- Comply with legal obligations
- Prevent fraud and ensure platform security
Legal Basis (GDPR - EU Users): We process your data based on: (1) your consent, (2) contractual necessity, (3) legitimate interests, or (4) legal obligations.
4. Astrology & AI Processing
Birth details are processed by:
- Astrology calculation engines
- AI systems that generate interpretations
This processing is automated and informational only. Calculations may use internal engines or trusted third-party services, which are bound by their own privacy policies.
5. Data Storage & Security
- We use reasonable security measures (encryption, secure servers, access controls) to protect your data
- Data is stored on secure servers with industry-standard protections
- We do not guarantee absolute security, but we take all reasonable steps to protect your information
- Sensitive data is not sold to third parties
- We regularly review and update our security practices
Data Retention:
- We retain your personal information for as long as necessary to provide services and comply with legal obligations
- Account data is retained until you request deletion or your account is inactive for 3 years
- After deletion requests, data is removed within 30 days, except where retention is required by law (e.g., tax records)
- Anonymous usage data may be retained for analytics purposes
5A. Data Breach Notification
Under the Privacy Act 1988, we are required to notify you and the Office of the Australian Information Commissioner (OAIC) if we experience a data breach likely to result in serious harm.
What constitutes a data breach? A data breach occurs when personal information is accessed, disclosed, or lost in circumstances likely to result in serious harm.
Our Response: If we become aware of a data breach, we will:
- Contain the breach and assess potential harm
- Notify affected individuals as soon as practicable
- Report to the OAIC if required
- Take steps to prevent future breaches
For privacy requests: privacy@mindveda.net. For data breach notices: security@mindveda.net. These are automated compliance mailboxes. AstroSetu does not provide live support. Valid requests will be processed as required by law.
For detailed information, see our Data Breach Notification Policy.
6. Third-Party Services & Cross-Border Disclosure
We may use trusted third-party services for:
- Hosting (may be located outside Australia)
- Analytics (Google Analytics, etc.)
- Payment processing (Razorpay, Stripe, etc.)
- Astrology calculations (internal engines or trusted services)
Cross-Border Disclosure (APP 8): Your data may be stored or processed outside Australia. We take reasonable steps to ensure overseas recipients comply with privacy obligations similar to the APPs, including through contractual arrangements.
These services are bound by their own privacy policies, which we encourage you to review.
7. Cookies & Analytics
AstroSetu may use cookies or similar technologies to:
- Improve user experience
- Understand usage patterns
- Remember your preferences
- Provide personalized content
You may disable cookies in your browser, but some features may not work. See our Cookie Policy for more details.
8. Your Rights
Under Australian Privacy Principles (APPs) and applicable privacy laws, you have the right to:
- Access (APP 12): Request a copy of your personal information we hold. Valid requests will be handled as required by law and may charge a reasonable fee for providing access.
- Correction (APP 13): Request correction of inaccurate, incomplete, outdated, irrelevant, or misleading information. Valid requests will be handled as required by law where reasonable.
- Deletion: Request deletion of your personal information, subject to legal requirements (e.g., tax retention obligations).
- Withdraw Consent: Withdraw consent for processing where applicable (e.g., marketing communications).
- Complain: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or relevant privacy authority.
To Exercise Your Rights:
For privacy-related requests, contact privacy@mindveda.net. Include your request details and verification information. This is an automated compliance mailbox. AstroSetu does not provide live support. Valid requests will be processed as required by law. No response timeline is guaranteed.
8A. Your Rights (GDPR - EU Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right of Access: You can request a copy of your personal data
- Right to Rectification: You can request correction of inaccurate data
- Right to Erasure: You can request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: You can request limitation of processing
- Right to Data Portability: You can request your data in a machine-readable format
- Right to Object: You can object to processing based on legitimate interests
- Right to Withdraw Consent: You can withdraw consent at any time
To exercise these rights, contact privacy@mindveda.net. This is an automated compliance mailbox. AstroSetu does not provide live support. Valid requests will be processed as required by law. No response timeline is guaranteed.
You also have the right to lodge a complaint with your local data protection authority.
9. Children's Privacy
AstroSetu is not intended for children under 13 (or 16 in the EU). We do not knowingly collect data from children without parental consent.
If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information promptly.
10. Contact Information & Privacy Officer
Data Controller & Privacy Officer:
- Business Name: MindVeda
- Trading As: AstroSetu AI
- ABN: 60 656 401 253
- Business Structure: Sole Trader
- Privacy Requests: privacy@mindveda.net (Privacy Act requests, data access, correction, deletion)
- Consumer Law: support@mindveda.net (Australian Consumer Law compliance)
- Legal Notices: legal@mindveda.net (Legal notices, formal correspondence)
- Data Breach: security@mindveda.net (Data breach notifications)
- All email addresses are automated compliance mailboxes. AstroSetu does not provide live support. Valid requests will be processed as required by law.
- Jurisdiction: Australia (Primary). India (Operational support only). All legal matters are governed by Australian law.
External Privacy Authority:
Australian Users: Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au or 1300 363 992
11. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Continued use after changes implies acceptance.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
AstroSetu AI is a fully automated astrology guidance platform.
Operated by MindVeda.
This platform is fully automated and provides educational guidance only.