◈ Privacy · Data handling
Privacy policy.
Last updated: 2026-04-26 · TRIKĀLA · plain-English first, legal-precise second. Birth data is sacred — we treat it like an oath.
1 · What we collect
For the Free Reading tier:
- Email + name — captured on the form, stored in our Supabase contacts table for you to retrieve your reading later.
- Birth details (date, time, place, lat/lng, timezone) — used to compute the chart in your browser, NOT stored on our servers. The URL after submit is the only persistent record (and it is shareable to you, not to us).
For paid tiers (Q1, Deep-Dive, consults, Tools-99-pack), we additionally collect:
- Phone number — for WhatsApp delivery and consultation scheduling.
- Razorpay payment record — payment ID, tier, amount. We do NOT see your card or UPI details — Razorpay handles those.
- Birth details (same as free) — and for consult tiers, we retain these for the duration of the engagement (90 days post-session) for follow-up Q&A. Deleted on request.
2 · What we never collect
- Card numbers, CVV, UPI PINs — Razorpay handles payment, never us.
- Bank account numbers, IFSC, IBAN — never.
- Aadhaar, PAN, passport, government ID — never.
- Health, biometric, or genetic data — never.
- Browsing history outside trikala.lunarluxury.in — never.
3 · How we use it
- Birth data → compute the chart and the report.
- Email → deliver the report + retrieve past readings via sign-in magic-link (Supabase Auth).
- Phone → WhatsApp scheduling for consult tiers, delivery confirmation for paid PDFs.
- Aggregate analytics → understand which tiers are popular, which pages convert. We do NOT use Google Analytics or Facebook Pixel for tracking; only first-party logs.
4 · Who we share with
- Razorpay (payment processor) — required to process your payment.
- Supabase (database) — your contact record, encrypted at rest.
- Vercel (hosting) — request logs (IP, user-agent), retained 30 days.
- That's it. We do NOT sell, rent, or share your data with marketing networks, brokers, or third-party advertisers. Ever.
Birth data oath: Your janma-kuṇḍalī is sacred. We never treat it as marketing data. If you ever want it deleted, email us — we delete within 7 days.
5 · Cookies + local storage
We use minimal, first-party-only cookies:
- Supabase auth session — keeps you signed in (httpOnly, expires in 7 days).
- UI preferences (e.g. dark mode, last-tier-viewed) — stored in localStorage, never sent to server.
No third-party cookies. No advertising trackers. No fingerprinting.
6 · Your rights
- Access — request a copy of all data we hold on you.
- Correction — fix any incorrect data.
- Deletion — delete your account + all associated data.
- Portability — receive your data in JSON format.
Email hello@lunarluxury.in with the request — we respond within 7 working days.
7 · Data retention
- Contacts (free + paid) — until you request deletion or 5 years of inactivity.
- Payment records — 7 years (statutory accounting requirement under Indian Companies Act).
- Consultation notes / audio recordings — 90 days post-session, then deleted unless you request retention.
- Server logs — 30 days, then auto-purged.
8 · Children
TRIKĀLA is not intended for users under 16 (some jurisdictions: 13). We don't knowingly collect data from minors. If you believe we have collected such data, email us and we will delete immediately.
9 · International users
Data is stored on Supabase + Vercel infrastructure (typically AWS / GCP regions in Mumbai-ap-south-1 or Singapore-ap-southeast-1). If you are an EU/UK resident, you have GDPR rights as listed above. If you are in California, you have CCPA equivalent.
10 · Updates to this policy
If we make material changes, we will email all registered users 30 days before the change takes effect. The current version is always live at trikala.lunarluxury.in/privacy.
11 · Contact
Operator: Pardeep Sehrawat (काल गैंग) · TRIKĀLA · A Lunar Luxury initiative
Email: hello@lunarluxury.in
Site: trikala.lunarluxury.in