Privacy Policy

1. Scope and who we are

This Privacy Policy applies to the Santosh Guru public website, registered account areas, web services, and Santosh Guru mobile app. In this policy, “Santosh Guru” and “iSoftro” refer to the services and operations presented under those names.

It covers information you provide, information created by using the services, and limited information received from service providers that help us operate the platform. For privacy questions or requests, contact us at support@jyotishvedika.com.

2. Information we collect

The information depends on the features you use and the choices you make.

• Account and profile information. We may collect your name, email address, phone number, account status, email-verification status, and profile changes. We store passwords as password hashes rather than as readable passwords.
• Authentication and security. The web service uses a session cookie. The mobile service uses access and refresh sessions; refresh-token records include a hash, expiry, revocation state, and, when supplied, a device name. Password-reset and account-verification records are used for the requested security flow.
• Bookings and consultations. When you book, we process the selected Jyotish, package, date and time, booking reference, customer name and phone, meeting mode or link, status, cancellation or refund information, and any birth details or notes that you choose to submit.
• Wallet, top-ups and payment references. We process wallet balances, transaction references, amounts, payment status, booking or order payment records, and top-up information. A top-up may include the payment reference you enter and an optional uploaded payment proof. Do not send passwords, full card numbers, PINs, or other unnecessary financial credentials in a support message or upload.
• Shop and order information. If you use the shop, we may process cart, order, delivery/contact details, item, quantity, payment and order-status information needed to fulfil the order and provide support.
• Notifications and device tokens. The app may send a push-token, platform, app version, enabled state, and last-seen time so notifications can be delivered or disabled. We also store in-app notification titles, messages, links, and read status for your account.
• Support communications. When you contact us, we may receive your name, email, phone number, subject, message, and any booking, order, wallet, or other reference that you include.
• Logs, security and fraud prevention. For security, troubleshooting, abuse prevention, and accountability, the platform may record timestamps, IP addresses in administrative audit entries, authentication events, request or error details, and actions taken in the service. We do not use these records to ask for passwords or raw authentication credentials.
• Cookies and preferences. The website uses a session cookie for account and security state and may use a language-preference cookie. Your browser may also cache ordinary site assets such as fonts and stylesheets.

3. How we use information

• Create and maintain accounts, authenticate users, verify email addresses, reset passwords, and protect sessions.
• Show experts, calculate availability, create and manage bookings, provide consultation details, process cancellations or refunds, and send essential booking updates.
• Maintain wallet ledgers, review top-ups, record payment references, support orders, and prevent duplicate or unauthorised transactions.
• Deliver in-app notifications and push notifications that you enable, including booking, account, and service updates.
• Respond to support requests, investigate reported problems, maintain records, and communicate about the service.
• Monitor security, investigate suspected misuse, protect users and the platform, and maintain reliable infrastructure.

4. Sharing and disclosure

We share information only when needed to provide a requested feature, protect the service, or meet a lawful requirement. Depending on what you use, this may include:

• The Jyotish or service team involved in a booking, with the booking details needed to arrange and deliver the consultation.
• Payment channels or financial-service providers involved in a payment or top-up, limited to the information needed to identify and reconcile the transaction.
• Hosting, database, email-delivery, push-notification, security, and other infrastructure providers that process information on behalf of Santosh Guru or iSoftro.
• Authorities, advisers, or other parties when disclosure is reasonably necessary to comply with law, enforce terms, protect rights or safety, or investigate security incidents.

We do not sell personal information. Service providers may process information under their own privacy terms and only for the services they provide to us.

5. Security

We use safeguards appropriate to the service, including password hashing, access controls, scoped account queries, session protections, token expiry and revocation, prepared database statements, security headers, and audit records. No website, app, email, or transmission can be guaranteed completely secure, so keep your password and one-time codes private and tell us promptly about suspected unauthorised access.

6. Your choices and requests

• You can review or update available profile information through your account or by contacting support.
• You can disable push notifications in your device or app settings. Essential account, security, payment, or booking messages may still be sent when needed to provide the service.
• You can ask what information we hold about you, request correction, or request deletion by emailing support@jyotishvedika.com.
• For account-protection reasons, we may ask for information needed to verify that a request is from the account holder before completing it.

7. Retention and deletion requests

We keep information for as long as reasonably needed to provide the services, maintain account and booking history, complete payment or wallet reconciliation, handle support, resolve disputes, maintain security records, and meet applicable obligations. Retention periods vary by the type and purpose of the record.

You may request account or personal-data deletion at support@jyotishvedika.com. We will review the request, verify it where necessary, and delete or de-identify information where we can. Some records may need to be retained for security, fraud prevention, payment reconciliation, dispute handling, or other lawful reasons; we will limit retained information to that purpose where practical.

8. Third-party services and hosting

Santosh Guru relies on hosting, database, email-delivery, push-notification, payment, and security infrastructure to operate the website and mobile app. The specific providers or payment channels may vary over time and may have their own privacy policies. The website also requests font assets from Google Fonts for the site interface; your browser may share normal request metadata with that service.

We do not ask you to provide information to a third party unless it is part of a feature you choose to use or a service needed to operate the platform. Review the relevant provider’s terms before submitting information directly to that provider.

9. Children's privacy

The services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Santosh Guru, contact support@jyotishvedika.com so we can review and take appropriate action.

10. International users

You may access the services from outside Nepal. Information may be processed or stored in Nepal or another country where Santosh Guru, iSoftro, or a service provider operates. Those locations may have different data-protection rules. By using the services, you acknowledge this processing; contact us if you need more information about a particular request or transfer.

11. Changes to this policy

We may update this policy when the services, data flows, or legal requirements change. The “Last updated” date at the top will change when we publish an update. If a change is material, we will use an appropriate notice in the service where practical.