Avyra

Draft — last updated 28 September 2026. This text is awaiting legal review.

Privacy Policy

This policy explains what personal data Avyra collects, why, where it is processed, how long it is kept and how you can exercise your rights under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Avyra is operated by AVYRAPVT.LTD, SECTOR 48 NOIDA (the "Data Fiduciary").

1. Data we collect

  • Account: your email address (for sign-in codes) and the date you signed up.
  • Birth details you enter for a report: full name (and its English spelling for name numerology), date of birth, time of birth, place of birth (city, country and coordinates) and, optionally, gender. You may enter these for yourself or, with their permission, for another person.
  • What we calculate from them: the birth chart, dasha periods and numerology numbers, and the written report.
  • Your questions to Ask Avyra and the answers.
  • Palm photos (palm reading feature, 18+ only): the photos are analysed but never stored — only a structured description of the visible palm features is kept.
  • Feedback you send (ratings, comments and an optional reply email).
  • Technical data: a session cookie, product analytics events without names or birth details (e.g. "report generated"), AI usage records (token counts and cost, no content) and error records (where and which error code, no content).

2. Why we use it

  • To calculate your chart and numbers and write your report, PDF and answers — the service you ask for.
  • To sign you in and keep your account secure (sign-in codes, sessions, rate limits).
  • To improve quality and fix problems (aggregated analytics, error records, feedback).
  • We do not sell your data, do not use it for advertising and do not use it to train AI models.

3. Where it is processed (processors)

We use these service providers to run Avyra. Some of them may process data outside India.

  • Neon — database hosting (all stored data).
  • Vercel — application hosting.
  • OpenAI — writes the report sections and answers from the calculated data (your first name, age and calculated chart / numerology data, which is derived from your birth details). For palm readings it analyses the photos. Requests are sent through the OpenAI API with storage turned off; OpenAI states that API data is not used for training and that abuse-monitoring logs are kept for up to 30 days unless the law requires longer, and that image inputs are scanned for child sexual abuse material (source: https://developers.openai.com/api/docs/guides/your-data, checked 2026-09-25).
  • Resend — sends the sign-in code emails (your email address only).
  • Place search (GeoNames or Google Places, whichever is configured) — receives only the city text you type, to find the place.

4. How long we keep it

  • Account, birth details, reports, questions and feedback: until you delete your account.
  • Sign-in codes: stored only as a one-way hash and valid for a few minutes. Sessions expire automatically.
  • Palm photos: never stored (they exist only during the analysis). The structured palm description is kept until you delete the reading or your account.
  • AI usage, analytics and error records contain no names, birth details or content; when you delete your account their link to you is removed.
  • OpenAI may keep abuse-monitoring logs for up to 30 days (see section 3).

5. Your rights (DPDP Act 2023)

  • Access: all your reports are in "My reports"; you can download each as a PDF.
  • Correction: create a new report with corrected details, or write to us to correct your account data.
  • Erasure: delete your account at any time from the Account page — this deletes your profiles, charts, reports, questions, palm readings, feedback and sessions.
  • Withdraw consent: deleting your account withdraws it; you can also write to us.
  • Grievance redressal and nomination: contact the Grievance Officer below.

6. Children

Avyra accounts are meant for adults. A report about a child or teenager may only be created by their parent or legal guardian, who gives consent on the child's behalf. Such reports are written for the parent and never contain romantic or marriage content.

The palm reading feature is only for people aged 18 or older.

7. Security

Data is sent over HTTPS. Sign-in uses one-time codes stored as hashes; sessions use a random token stored as a hash. The AI key is used only on the server. Access to other people's reports is blocked; administrators can view reports only for support.

8. Grievance Officer and contact

  • Grievance Officer: AMIT THAKUR — AMITTHAKUR42059@GMAIL.COM
  • General contact: amitthakur42059@gmail,com
  • Operator: AVYRAPVT.LTD, SECTOR 48 NOIDA

9. Changes

We will update this page when our practices change. Material changes get a new consent version (currently terms-privacy-2026-09-28) and we will ask you to agree again.