Privacy notice
Last updated: 10 October 2026
In short: we collect only what we need to give you the service you ask for. Birth details and religious preferences are used only for that service, never for advertising, and never sold. The first replies on WhatsApp come from an AI assistant. You can ask us for a copy of your data or to delete it at any time by emailing [email protected] or messaging us on WhatsApp.
- Who we are
- What we collect
- How we use it, and our legal basis
- Our AI assistant
- Who we share it with
- International transfers
- How long we keep it
- How we protect it
- Your rights
- Cookies and this website
- Children
- Consumer health information
- Changes
1. Who we are
VidhiRoots is a brand of Lambryx Tech Innovations Private Limited (CIN U62013JH2025PTC025831), registered office 177/A, Dahu Toli, Hatma, Kanke Road, Ranchi, Jharkhand 834008, India ("we", "us"). We decide how and why your personal data is used, so we are the controller of it.
Contact for anything about your data: [email protected].
Grievance officer (India): Kanchan Devi, Director, Lambryx Tech Innovations Private Limited (email [email protected], or WhatsApp +1 201 584 7322 and write 'grievance'). This person is also our privacy officer and data protection officer for every country we serve.
2. What we collect
| Data | Where it comes from |
|---|---|
| Your name, phone number and country (worked out from your phone number) | Your WhatsApp or other messaging profile when you message us |
| Your messages to us | You |
| Date, time and place of birth, for you and anyone you ask about (for example a prospective match) | You, only after you agree |
| Religious details needed for a puja, such as family names and gotra | You, only after you agree |
| Booking details: service, date, time zone, and the name and email address you give when you book a consultation time | You and our booking system (Cal.com) |
| Payment details: amount, currency, status and a reference. We never see your full card number | Razorpay |
| Your answers to our optional research questions, and any rating you give | You, if you choose to answer |
| Your choices: agreement to our terms, consent to sensitive data, STOP requests | Recorded when you make them |
| If you apply to work with us as an astrologer, pandit or temple: your name, role, services, languages, experience, location, availability and email | You, when you apply on WhatsApp |
| If you work with us: your address, PAN, bank account details, signature record, customer ratings, quality reviews and order history. We use them to run our agreement with you, pay you, deduct and report tax and check quality. They are stored on our servers in Germany and in our e-signature system, and shared only with our bank, payment and tax authorities and our accountant | You, and our systems |
| Your request to hear from us when we open in your country (NOTIFY) | You |
If you give us details about another person, such as a family member or a prospective match, please make sure they are happy for you to do so. We collect their details from you, not from them. We hold them only for your order, and they have the rights in section 9: they can ask us what we hold about them by emailing [email protected].
Sensitive data. Birth details used for astrology and religious details can reveal your religious beliefs, which Canadian and Australian privacy law and several US states treat as sensitive. We ask for your explicit consent before we collect them, use them only to give you the service you ask for, and never sell or share them for advertising.
3. How we use it, and our legal basis
| Purpose | Why we are allowed to |
|---|---|
| Answering your messages and arranging the service you ask for | Taking steps at your request before a contract, and performing the contract |
| Using birth and religious details to prepare your reading, matching, muhurat or puja | Your explicit consent. You can withdraw it at any time |
| Reviewing an application to work with us and, if we accept it, arranging that work | Taking steps at your request before a contract |
| Taking payments, issuing invoices, keeping accounts and tax records | Contract and legal obligation |
| Keeping records of consent, STOP requests and our own actions, and preventing fraud and misuse | Legal obligation and legitimate interests (being able to show we followed the law) |
| Checking the quality of our AI assistant's replies and of our service | Legitimate interests (a safe, accurate service). You can object |
| Passing you to a person when you raise health, grief, legal matters or your safety | Legitimate interests and, where your life may be at risk, vital interests |
| Learning what families need, from research answers and ratings (an AI groups the answers into themes; no decisions are made about you) | Legitimate interests. You can skip the questions |
We only send you messages after you have messaged us first. We don't send marketing messages unless you have separately agreed. Type STOP at any time to stop all messages.
4. Our AI assistant
The first replies on WhatsApp are written by an AI assistant, and it says so at the start. It answers questions about our services and helps arrange bookings. It does not give astrological readings, decide anything that significantly affects you, or build a profile of you for advertising. A person from our team reviews conversations and takes over when you type HUMAN, and always when you raise health, grief, legal matters or your safety.
The AI model we use runs under business terms that forbid the provider from using your messages to train its models. We don't use your personal data to train AI models, and we don't sell it to anyone who does. We keep the text of AI requests and replies for 90 days to check quality, then delete it.
5. Who we share it with
We never sell your personal data or share it for advertising. We use these service providers, who may only use it to provide their service to us:
| Who | Why |
|---|---|
| WhatsApp (Meta Platforms) | Carrying messages between you and us |
| Our hosting provider, with servers in Germany | Running our systems and storing your conversation and booking records |
| Cloudflare | Secure network access to our systems, encrypted backups, and this website |
| Google Cloud (Vertex AI), with Cloudflare Workers AI as a backup | The AI assistant (see section 4) |
| Razorpay | Taking payments and refunds |
| Zoho (email) | Our hello@ mailbox, and sending your order details to your astrologer or temple |
| Cal.com | Booking session times |
| Our astrologers | Preparing and giving your consultation, matching or muhurat. They are bound by confidentiality, and delete your details within 7 days after your order, as their agreement requires |
| Temples and pandits in India | Performing your puja. They receive only the names and details needed for the sankalp |
We may also disclose data when the law requires it, or to protect someone's safety.
6. International transfers
We are based in India, and our astrologers, pandits and temples are in India. Our servers are in Germany, and some providers above process data in the United States and other countries. While your data is in another country, it may be accessed by the courts, law enforcement and national security authorities there. Wherever your data goes, we remain responsible for it. Everyone we share it with is bound by a contract, or by their published business terms, to protect it at least as well as the law where you live requires (for Australia, Australian Privacy Principle 8). You can ask us about these safeguards.
7. How long we keep it
| Data | Kept for |
|---|---|
| Conversations | 180 days, then anonymised |
| Research answers and ratings | 180 days, then deleted |
| Text of AI assistant requests and replies | 90 days (after that we keep only usage and cost figures) |
| Birth and religious details, bookings | Until you ask us to delete them, and no more than 2 years after your last contact with us |
| Consent and STOP records | While you are in contact with us, then 2 years, so we can show we respected your choices |
| Internal record of actions taken by our systems and team | 2 years |
| Applications to work with us | While you work with us. If we don't accept it or you withdraw it: 180 days after that decision. An unfinished application: 180 days after your last reply |
| Daily website totals (section 10), which identify no one | 2 years |
| Payments and invoices | 8 years after the end of the financial year, as Indian company and tax law requires |
| Practitioners' address, PAN, bank details, signed agreement, ratings and reviews | 8 years after our agreement with you ends |
| Your NOTIFY request | 12 months, or until we open in your country and send you one message, whichever is first, then deleted |
8. How we protect it
Our systems are not reachable directly from the internet: administrative access goes through Cloudflare with sign-in checks. Data is encrypted in transit, and backups are encrypted. Each tool has only the access it needs. Every action is written to a tamper-evident log. Internal alerts to our team contain only a link to the conversation, never your name, number or messages. If a security breach is likely to affect you, we will tell you, and the authorities the law requires, without undue delay.
9. Your rights
Wherever you live, you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct it;
- delete it (we keep only what the law requires, such as invoices);
- stop using it, or object to how we use it;
- give it to you in a portable format;
- withdraw any consent you've given, without affecting what we did before.
Email [email protected] or message us on WhatsApp. We reply within one month (45 days where US state law allows). We may need to confirm it's you. There's no charge.
We'd like the chance to help first, but you can also complain to a regulator.
United States: we do not sell or share personal data for targeted advertising, and we process sensitive data only with your consent. If we refuse a request, you can appeal by replying to our answer, and we will respond within the time your state's law sets. If we refuse your appeal, you can complain to your state's Attorney General (in Connecticut: portal.ct.gov/AG).
Canada: you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Australia: you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
New Zealand: you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
Singapore: you can complain to the Personal Data Protection Commission (pdpc.gov.sg).
India: you can contact our grievance officer named in section 1. From 13 May 2027 the Digital Personal Data Protection Act, 2023 gives you further rights, including to nominate someone to act for you and to complain to the Data Protection Board of India.
10. Cookies and this website
This website sets no cookies of its own, has no tracking pixels or analytics scripts, and loads nothing from other companies. Cloudflare, our network provider, may set one strictly necessary security cookie to block automated attacks. Our free tools (family dates, birth star and the home puja planner) run a script from this website in your browser: what you type into them is worked out on your device and is not sent to us or anyone else, except as described next. The home puja planner has an optional ask box. If you type a question there and press Ask, the question is sent to our website and answered by an AI model that runs on Cloudflare Workers AI, using only the text of that puja plan. We don't store or log the question. To limit use, we keep a daily count per connection under a scrambled (hashed) form of the IP address, which is deleted after two days. Everything else in the planner works in your browser, and your checklist ticks stay on your device. The family dates list is kept in your browser's storage until you remove it or clear your browser data. Our network provider, Cloudflare, processes your IP address to deliver the pages and protect them from attacks. From its records Cloudflare gives us daily totals only: how many times each page was viewed and each WhatsApp button was pressed, which countries and websites the visits came from, and an estimate of the number of visitors. We never receive IP addresses or anything about an individual visitor.
11. Children
Our services are for adults. You must be 18 or over to book. If you give us a child's birth details, for example for a naming ceremony muhurat, you must be their parent or guardian. We never track children's behaviour or show them advertising.
Consumer health information (Washington, Nevada, Connecticut)
We don't ask for health information. If your health, or a family member's, comes up in a conversation, we use it only to reply to you and to pass you to a person on our team. We don't send it to an astrologer or temple unless you ask us to, and we never sell it or use it for advertising. We delete or anonymise it with the conversation after 180 days. We collect it from you, and share it only with the providers named in section 5, as our processors. Your rights are in section 9.
12. Changes
If we change this notice, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you before it takes effect.