Privacy Policy

Effective Date: July 5, 2026 · Version 1.0

This Privacy Policy describes how AskNapoleon ("we", "us") collects, uses, stores, protects, and discloses information from users of the AskNapoleon website, platform, and mobile application (the "Platform"), in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable IT rules. By using the Platform, you consent to the practices described here.

Note on scope: AskNapoleon currently offers the traditional Oraculum casting ritual, a Dream Dictionary, and an AI-driven "Ask Anything" feature. We plan to introduce Vedic Astrology, Numerology, and Vastu Shastra analysis features in the future. Section 1.2 below describes how we will handle birth data once those features launch — we do not collect Date, Time, or Place of Birth today.

1. Information We Collect

1.1 Account Information

When you register or use the Platform, we currently collect:

Username and a securely hashed password (we never store your password in plain text).
Your chosen security questions and hashed answers, used only for password recovery.
Your preferred language (Marathi, Hindi, or English).
Billing/payment references (Razorpay order and payment IDs, and top-up amounts) — processed through Razorpay; we do not receive or store your card, UPI, or net-banking credentials.

If you contact us directly (WhatsApp, SMS, or email), we also collect the contact details and content of that communication — see Section 1.4.

1.2 Sensitive Birth and Astrological Data (Planned Feature — Not Yet Collected)

To provide Vedic Astrology, Numerology, and Vastu Shastra analysis once those features launch, we will collect your Date of Birth, exact Time of Birth, and Place of Birth (city, country). This is sensitive personal data. Consistent with the DPDP Act's requirement that consent be specific and informed, we will obtain your explicit, separate consent for this data at the time you choose to use one of these features — agreeing to this Policy at registration does not itself authorize collection of birth data. This data will be used exclusively to generate the astrological, numerological, or Vastu output you request, and will not be repurposed without further consent.

1.3 Technical and Usage Data

We automatically collect:

IP address, browser type/version, operating system and device type.
Pages visited, features accessed, referring/exit URLs, and access timestamps.
Crash reports and error logs.
The Oraculum questions you cast, Dream Dictionary searches, and "Ask Anything" questions and answers, together with timestamps — kept so you can see your own history and so we can diagnose issues.

This data is used for analytics, security, and Platform improvement, and is not linked to your identity beyond what's needed for those purposes.

1.4 Communication Data

If you contact us via WhatsApp, SMS, email, or any other channel, we retain records of that communication — including message content, your contact details, and timestamps — to respond to your query, resolve disputes, and improve our support.

1.5 Cookies and Local Storage

The Platform stores your login session token and language preference in your browser's local storage, so you don't have to log in or reselect a language on every visit. We do not currently use third-party advertising cookies or ad-tracking technologies. If we introduce analytics cookies in the future, we will update this section before doing so.

2. How We Use Your Information

We use the information above to:

Create, maintain, and manage your account and wallet.
Deliver Oraculum, Dream Dictionary, and Ask Anything answers, and (once launched) astrology/numerology/Vastu analysis.
Process and reconcile wallet top-up payments via Razorpay.
Provide customer support and respond to queries.
Send service-related communications (account notices, payment confirmations).
Detect, investigate, and prevent fraud or abuse.
Improve and develop the Platform.
Comply with applicable legal obligations.

We do not use your personal or birth data for advertising profiling or behavioural targeting without your explicit, separate consent.

3. Confidentiality

Questions you ask, answers you receive, and (once collected) your birth data are treated as confidential. We commit that this data:

Will not be sold, rented, traded, or disclosed to any third-party marketing, advertising, or data-broker firm.
Is accessible only to authorised personnel on a need-to-know basis, who are bound by confidentiality obligations.

We may use anonymised, aggregated data derived from user interactions for research, statistics, and service improvement.

4. Data Sharing and Third-Party Disclosure

We do not sell, rent, or trade your personal information. We share data only in these circumstances:

Service providers: hosting/infrastructure providers, Razorpay (payment processing), and email/SMS/WhatsApp communication providers, each contractually restricted to using your data solely to provide services to us.
Legal compliance: if required by law, regulation, or valid legal process, or to protect the rights, property, or safety of AskNapoleon, our users, or the public. Where legally permitted, we will take reasonable steps to notify you of such a request.
Business transfers: in a merger, acquisition, or asset sale, your data may transfer to the successor entity, who will be bound by this Policy or an equivalent one. We will notify you of any such change.
Cross-border transfer: to the extent we use infrastructure located outside India, your data may be processed there subject to appropriate safeguards. We will comply with any country-specific restrictions the Central Government notifies under the DPDP Act.

5. Data Security

We use industry-standard measures to protect your data, including:

Encrypted data transmission (SSL/TLS).
Password hashing and secure credential storage.
Access controls and role-based permissions for internal personnel.
Regular security review of the Platform.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. That said, as a Data Fiduciary under the DPDP Act, 2023, we will comply with our statutory data-breach notification obligations to the Data Protection Board of India and to affected users as required by law — nothing in this Policy is intended to, or does, waive those statutory duties.

6. Data Retention

We retain account and transaction data for as long as your account is active, and for a reasonable period afterward as required for accounting, tax, and legal compliance (for example, Indian tax law generally requires financial records to be retained for several years). You may request deletion of your account and associated data via our Contact Us page, subject to records we are legally required to keep.

7. Your Rights

Access and correction: view or correct your profile data via your account settings, or by contacting us for data not accessible there.

Deletion: you may request account deletion. This is subject to any legal retention requirements, results in immediate loss of access to the Platform, and does not refund unused wallet balance except as described in our Refund & Cancellation Policy.

Opt-out: you may opt out of non-essential (e.g. promotional) communications at any time; you cannot opt out of service-critical notices such as payment confirmations or security alerts.

Verification and limits: we may verify your identity before processing a rights request, and may decline requests that are manifestly unfounded, excessive, or repetitive. If we decline a request, we will tell you why, and you may ask our Grievance Officer (Section 14) to review that decision.

8. Children's Privacy

The Platform is not intended for use by anyone under 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will take reasonable steps to delete it promptly — please tell us via WhatsApp (Section 14) if you believe this has happened.

9. Third-Party Links and Services

The Platform may link to third-party websites, payment gateways, or other external services. We have no control over, and are not responsible for, the privacy practices of third-party sites. We encourage you to review the privacy policy of any third-party service you interact with through the Platform.

10. Analytics and Advertising

We do not display third-party advertisements on the Platform, and we do not share your personal or birth data with advertising networks or data brokers for targeted advertising. Analytics tools, if used, collect anonymised usage data governed by their own privacy policies.

11. Changes to this Policy

We may update this Policy from time to time; the "Effective Date" above will reflect the latest revision, and routine changes take effect once posted. Where a change materially affects how we collect or use sensitive personal data (for example, birth data for astrology/numerology/Vastu features), we will seek your renewed, specific consent before that change applies to you.

12. Governing Law and Jurisdiction

This Policy is governed by the laws of India. Courts at Nagpur, Maharashtra shall have exclusive jurisdiction over any disputes arising from this Policy, consistent with our Terms & Conditions.

13. Grievance Officer and Contact

For privacy-related queries, access/correction/deletion requests, or complaints:

Grievance Officer: [name and designation]
WhatsApp / SMS: +91 98224 27798
Email: [support email address]

We aim to acknowledge privacy-related requests within 2 business days and resolve them within 15 business days, subject to reasonable delay in exceptional circumstances. We encourage you to raise concerns with us directly before approaching a regulatory authority or consumer forum.

This document is a general-purpose template and has not been reviewed by a lawyer. Please have it reviewed against your actual data practices — and specifically against the DPDP Act, 2023 consent requirements for sensitive data — before the astrology, numerology, or Vastu Shastra features launch.