Legal · effective 2026-01-01 · v2.0 · DPDP-compliant

Privacy. Terms. Refunds. What we refuse.

Plain language, structured. Birth data is sensitive personal information under the Digital Personal Data Protection Rules, 2025 (notified 2025-11-14). This page is also our compliance disclosure for GDPR (EU/UK) and CCPA/CPRA (California) visitors.

1 · What we collect, why, and how long

Category Examples Lawful basis Retention
IdentityName, email, phone (optional)Contract performance · DPDP §7(a)7 years (for tax + statutory audit)
Birth data (sensitive)Date · time · placeExplicit consent · DPDP §6Until you ask for erasure (30-day window)
The paragraphYour question, in your own wordsExplicit consentUntil erasure
PaymentRazorpay order ID · payment ID · amountContract · GST 7-year retention rule7 years (GST §36)
Reading deliverablesAudio recording · written summary · chartsContract performance2 years, then auto-purged unless retainer
Functional logsIP (truncated /24) · timestamp · pathLegitimate interest · security90 days

We do not collect: card numbers (Razorpay processes them on its own PCI-DSS surface, we never see the PAN), passwords, biometrics, location beyond the city you give for the chart, advertising identifiers, social-graph data, browser fingerprints, or anything from third-party advertising trackers. There are no advertising trackers on this site.

2 · Where it lives

  • Database: Supabase (Mumbai region). AES-256 at rest. Encrypted backups, retained 18 months.
  • Email: Resend (transactional). Reading deliverables sent end-to-end over TLS 1.3.
  • Payments: Razorpay (PCI-DSS Level 1, ISO 27001).
  • Hosting: Vercel (edge cache · global · TLS 1.3 forced · HSTS preload-eligible).
  • Birth data: one row per user, per request. We do not aggregate, we do not enrich, we do not enrich-then-aggregate.

Cross-border transfer happens only to the extent the above vendors operate outside India. We rely on the Standard Contractual Clauses (EU) and the corresponding India-DPDP cross-border-transfer rules for the legitimate-interest path.

3 · What we never do

  • We do not sell, rent, or barter your data. Ever.
  • We do not share with advertising platforms.
  • We do not use your birth data, paragraph, or reading to train machine-learning models.
  • We do not aggregate readings for cohort analysis without explicit, separate consent.
  • We do not have a "permission to email you marketing" assumption — every list is a separate, named opt-in.
  • We do not use dark patterns. Unsubscribe is one click in every send. Refunds do not require a phone call.

4 · Your rights — DPDP, GDPR, CCPA

The same rights, named differently across the three regimes. We treat them as one set:

  • Right to access (DPDP §11 · GDPR Art. 15 · CCPA §1798.100). We reply with everything we hold within 7 days, free of charge.
  • Right to correction (DPDP §12 · GDPR Art. 16). Reply within 7 days.
  • Right to erasure (DPDP §12 · GDPR Art. 17 · CCPA §1798.105). Reply within 30 days, with proof of identity. Tax-mandatory records (payment receipts) cannot be erased before the GST 7-year window — we will tell you which fields were retained and why.
  • Right to data portability (DPDP §11(2) · GDPR Art. 20). JSON export within 30 days.
  • Right to object / restrict (GDPR Art. 21–22). You can object to any further processing, including auto-deletion of recordings, with one email.
  • Right to opt out of "sale" (CCPA §1798.120). N/A — we do not sell. Any "Do Not Sell My Personal Information" request is auto-honoured.
  • Right to grievance (DPDP §13). Write to privacy@lunarluxury.in; reply within 36 working hours.

If you are unhappy with our response, you may approach the Data Protection Board of India (DPDP §27) or your local supervisory authority (EU/UK).

5 · Cookies & trackers

Strictly functional only. We do not set advertising cookies. We do not set analytics cookies by default. The only first-party storage we use is a ll_consent entry recording your cookie-banner choice, and a session token if you opt to keep your inquiry draft across pages.

  • No Google Analytics by default. (If you ever see one, we are running an opt-in analytics page-test — same banner controls it.)
  • No Facebook Pixel.
  • No Hotjar / FullStory / session replay.
  • No third-party ad networks.

You can clear all first-party storage at any time from the bottom of this page or via your browser settings.

6 · Terms of service

By using this site, by paying for a sitting, or by submitting a paragraph, you agree to the following.

6.1 What you are buying

A sitting is a 60–90 minute private conversation, recorded for your archive only, followed by a written summary. We do not warrant a specific outcome of any decision you take after the sitting. The Sanskrit four-tier ladder (Darśana / Saṃvāda / Sannidhi / Saṅkalpa) is described at /lunarluxury/services; pricing on that page is binding for the financial year of booking.

6.2 Eligibility

You must be 18 or older to book. We do not knowingly accept inquiries from children. If a parent or guardian is asking on behalf of a minor, we will say so and proceed only with their explicit consent.

6.3 Intellectual property

The reading we deliver is yours, in confidence, for personal use. The chart math, the substrate, the propositional catalogue, and the published research (Zenodo DOIs 20024273, etc.) remain the IP of the practice. You may quote a sitting in your private journal; you may not republish, broadcast, or train a model on it without our written consent.

6.4 Confidentiality (both ways)

Sannidhi and Saṅkalpa tiers begin with a mutual NDA, signed before the first sitting. For lower tiers, confidentiality is contractual but not separately notarised. We never publish a client name without written consent; case studies are scrubbed and signed off.

6.5 Acceptable use

You agree not to: scrape this site at a rate above the published rate-limit (12/min on the public API); reverse-engineer the engine; impersonate a practitioner; submit data on a third party without their consent; or use a sitting to harm a third party. Violation voids the contract and any pending refund.

7 · Refunds & the substrate-cert promise

  • Full refund if a sitting fails the substrate-cert at the moment it is given. The cert runs before the chart — if the engine cannot certify its own state, the sitting does not happen and the money is returned within 7 working days.
  • Pro-rated refund for an unused window in a quarterly or annual retainer.
  • No refund for a delivered, dated reading. The reading is the deliverable; once it is in your inbox it cannot be returned.
  • Auto-refund on a refused sitting (see §8 below). No phone call required.
  • Razorpay-side reversal time is 5–7 working days for cards, 24 hours for UPI, after our confirmation.

To request a refund: reply to your receipt email with "refund · [order ID] · [reason]". Reply within 36 working hours, processed within 7.

8 · Disclaimer — what we are not

A reading is a structural reading of time, not advice. We are not licensed financial advisors, registered investment advisors, medical practitioners, mental-health professionals, or attorneys. Nothing on this site or in any sitting constitutes financial advice, investment advice, medical advice, legal advice, or psychiatric care.

For decisions with regulatory consequence — health, money, law — please consult a licensed professional in addition to (never instead of) any reading we deliver. The Securities and Exchange Board of India (SEBI), the Medical Council of India, and the Bar Council of India each maintain registers of qualified professionals; we will recommend categories, never individuals.

Astrological prediction is a probabilistic art with a public falsifiability ledger (/lunarluxury/ledger). 47 logged predictions · 34 hits · 9 partials · 4 misses · Brier score 0.18 · 72.3% hit rate as of the last public update. We surface misses with the same weight as hits because that is the only honest way to operate.

9 · What we refuse — and refund

Some questions we will not answer regardless of price. These are listed in the method page; the operative ones for legal purposes are:

  • We will not predict the date of death of any specific person.
  • We will not predict harm or misfortune to a third party.
  • We will not read the chart of a third party without their consent.
  • We will not issue a "yes/no" verdict on a litigation, an indictment, or a contested custody.
  • We will not read a chart for a child below 12 without explicit guardian consent.
  • We will not accept any sitting that requires us to break the method as published.

If you book a sitting that turns out to require a refusal, the sitting is converted to a 30-minute scoping conversation and the balance is refunded inside 7 working days.

10 · Disputes, jurisdiction, force majeure

Governing law: laws of India, applicable to the Union Territory of Delhi. Exclusive jurisdiction: the courts of Delhi. We will pursue mediation through the Delhi International Arbitration Centre for any commercial dispute above ₹5 lakh before any court filing.

For EU/UK consumers: the Indian forum-selection clause does not displace mandatory consumer-protection rules of your home jurisdiction. You retain the right to bring a consumer claim where you reside.

Force majeure: war, sanctions, internet partition, Razorpay-level outage, data-protection regulator order, or comparable event excuses delay but never the obligation to refund.

11 · Grievance & contact

  • Privacy / data-protection officer: privacy@lunarluxury.in · reply within 36 working hours.
  • Refunds: concierge@lunarluxury.in · reply within 36 working hours.
  • Press & legal correspondence: legal@lunarluxury.in · reply within 5 working days.
  • Postal address: available on request to a verified party · sent over WhatsApp business after a one-line ask.
  • Indian Data Protection Board: dataprotection.gov.in (escalation route).
  • EU/UK supervisory authority: your local data-protection authority retains jurisdiction.

You can also open the cookie-consent settings to revoke consent or change your preferences.

Last updated · 2026-05-09 · v2.0 Effective · 2026-01-01 Privacy contact · privacy@lunarluxury.in