Free email report and eligibility
The free report and one question answer store encrypted name, email, birth details and question in the order pipeline. Each person may receive one free report in their lifetime. HMAC identifiers of birth details, email and any supplied phone are retained without expiry to prevent repeat claims; these identifiers do not reveal the original details. A daily IP HMAC and count also control abuse.
Data and purposes
Name and email support order handling and delivery; phone is optional. Birth date, time, coordinates and questions support calculation and personalised interpretation. Matching requires both adults’ consent. Birth details and questions never go to ads or analytics.
Recipients and service providers
Cloudflare Pages hosts the website; Workers, KV and D1 process and store orders, payment state and private reports. Razorpay handles cards, UPI and netbanking payments. We never see or store full card numbers. Resend sends report emails from [email protected]. Anthropic receives chart facts and questions with personal identifiers removed to assist writing; we do not send names, email or phone. Chart facts can still be personal data. Only if you allow analytics cookies, Mixpanel receives page views, clicks, scrolling and purchase events (page, button text, language, product and price), relayed through grahwala.in, to help us improve the site; never what you type, names, email, phone or birth details. Only if you allow ads cookies, Meta receives conversion events for advertising. Providers may process data outside India.
How reports are written
Our software computes the charts. Text is written by our software from those chart facts, using a writing service from Anthropic. Reports are not individually reviewed by an astrologer. Astrology is a traditional interpretation; outcomes are not guaranteed.
Retention and deletion
In KV, ordinary order and contact objects expire 30 days after each write; generation-attempt and pipeline objects expire after 90 days. This does not mean the complete order, D1 records or backups are erased. Download links expire after 24 hours and email tracking links after 30 days; link expiry is not data deletion. No universal automatic deletion period is implemented for the remaining order, financial, security or backup records. We delete on request — email [email protected]. If payment or legal records must remain, we explain why.
Saved form on your device
Unsaved details last 30 minutes in this tab. You may explicitly save an encrypted form on this device for 24 hours, protected by an unlock phrase that we never store or recover. After expiry it cannot be unlocked and is removed on your next visit. Use the save / delete control to remove it sooner. Avoid shared devices. Browser deletion does not erase a server order.
Finish-later email and feedback
Separate permission enables a private email link to finish later. The encrypted form expires after 24 hours, with at most one reminder. Anyone holding the link can open the form; the email contains no birth details. Unsubscribe deletes this saved form. Feedback is optional; publishing first name and city requires separate permission and approval. Share links contain no birth details.
Privacy rights and complaints
For information or a copy of your data, correction, deletion or withdrawal of consent, email [email protected] with subject “Privacy / deletion” and your private order ID. We verify access through the order email. Do not post birth details publicly. Grievance contact: Anuj Sharma, [email protected]. We reply within 2 working days.
Withdrawing optional consent
Use Cookie choices in the footer to withdraw ads and analytics permission at any time. Reset also clears the saved form on this device. Email support to withdraw marketing or service-processing consent. Removing service data may prevent personalised generation or renewed downloads. Withdrawal stops future use; it does not reverse lawful past processing.
Advertising and cookie choices
Advertising and analytics permission is separate and optional. Meta Pixel/Conversions API are used for ad measurement only with consent. After consent, Meta, Google Analytics and Google Ads may receive event names, product codes, INR values and shared event IDs. Email and phone use normalized SHA-256 hashes; hashes remain personal data. Meta may receive browser identifiers, click cookies, IP and user agent. We never send names, birth details (date, time, place), chart, questions, report contents or download links. Withdraw permission using Cookie choices in the footer. Withdrawal stops future events; it cannot recall data already sent. For privacy questions or deletion requests, email [email protected].
Seller & grievance
Grahwala is operated by Anuj Sharma (individual), India.
Support and complaints: [email protected]
We reply within 2 working days.
Grievance contact: Anuj Sharma · Email: [email protected]
Astrology is a belief system, not science. Nothing here is certain. Our software writes from your chart facts. This is not medical, legal, money or mental-health advice. For adults 18+.