Privacy Policy

Important: these pages are not legal advice. Dummy company name, address, CIN, GSTIN, and officer names are placeholders — have qualified counsel verify them, align subprocessors and retention, and complete any India DPDP / intermediary registrations before you rely on them commercially.

This Privacy Policy explains how Tara (“Tara”, “we”, “us”, “our”), offered by Cosmo Tara Private Limited, handles personal data when you visit this website or use Tara-branded mobile apps and related online services (together, the “Services”). It should be read together with our Terms of Service, AI Policy, Cookie Policy, and Disclaimer.

1. Who we are

For personal data covered by this Policy, the data fiduciary / controller is Cosmo Tara Private Limited, trading as Tara.

Corporate identifiers (draft placeholders): U72999KA2026PTC000001 (placeholder CIN). 29AAAAA0000A1Z5 (placeholder GSTIN).

Registered office:

• Suite 402, Example Tech Park, 18th Main Road
• HSR Layout, Sector 3, Bengaluru 560102
• Karnataka, India

General and privacy-related queries: [email protected] or our Contact page.

Grievance Officer (India — placeholder): A. Sharma (placeholder Grievance Officer) — reach at [email protected]. We aim to acknowledge grievances within a reasonable period and resolve them per applicable law. A statutory Nodal Officer contact under applicable intermediary or telecom rules will be listed here when appointed.

2. Scope and agreement

By using the Services, you acknowledge that you have read this Policy. If you do not agree, discontinue use. Where applicable law requires a separate consent (for example for certain marketing or non-essential cookies), we will request it through the appropriate UI.

3. Definitions

• Chart inputs means the birth or event data you supply (for example date, time, and place) used to compute chart-style outputs.
• Account data means identifiers and profile fields tied to your account (for example phone number used for OTP, optional email, display name).
• Session content means text or voice-derived transcripts from conversations with Tara, support tickets, and similar communications.
• Technical data means logs and device metadata such as app version, coarse locale, IP address, and diagnostic identifiers needed to operate and secure the Services.
• Anonymized or aggregated data means information processed so it does not reasonably identify you, or statistical summaries derived from many users.

4. What we collect

4.1. You provide directly

• Account data and authentication factors you choose to enable.
• Chart inputs and preferences you set inside the product.
• Session content when you chat, speak, or contact support.
• Billing-related metadata when you pay or top up (payments are handled by processors such as Razorpay; we typically do not receive full card numbers).

4.2. Collected automatically

• Technical data and usage signals needed for reliability and fraud prevention.
• In-product interaction metadata (for example feature usage, timestamps) to improve quality and safety.

4.3. From third parties

We may receive limited information from analytics providers, sign-in partners you authorize, or fraud-prevention services, strictly as needed to run the Services.

5. Sensitive information and your responsibility

Chart inputs and health-adjacent topics you raise in chat can be sensitive. You choose what to share. Please avoid sharing government identifiers, payment card numbers in free text, passwords, or other data that the product does not require. We do not intend to build a comprehensive medical record from your use of Tara; if you share health information, you understand it may be processed by automated systems and subprocessors described below.

6. How we use personal data

• Provide, personalize, and improve Tara’s experiences.
• Authenticate users, prevent abuse, and secure accounts.
• Process payments, wallets, and entitlements where offered.
• Communicate service messages and, where permitted, product updates.
• Comply with law, enforce our terms, and defend legal claims.

7. AI, ephemeris software, and model providers

Tara combines computational chart context (for example Swiss Ephemeris–style libraries such as pyswisseph) with natural-language outputs from large language models (for example Google Gemini / Google AI services). To generate responses, relevant session content and chart context may be transmitted to those providers under their terms and security programs. We do not claim that outputs are deterministic or error-free. See our AI Policy for how we think about limitations and safety.

8. Automated decision-making

We do not use your personal data for solely automated decisions that produce legal or similarly significant effects about you, unless we describe a specific feature and lawful basis. General conversational guidance is assistive, not a binding determination.

9. Sharing, subprocessors, and lawful disclosure

We do not sell your personal data. We disclose information only as described here or with your direction.

• Infrastructure and engineering vendors (for example cloud hosts, databases, caches, realtime transports such as Socket.IO infrastructure) who process data on our instructions.
• Model and AI tooling providers (for example Google) that power language generation or safety filters.
• Payments partners (for example Razorpay) for charging and reconciling wallet balances.
• Messaging and notifications (for example SMS OTP or Firebase push) where enabled.
• Professional advisers (lawyers, auditors) under confidentiality obligations.
• Acquisitions or financing: data may transfer as part of a merger, acquisition, or asset sale, subject to confidentiality and continued protection consistent with this Policy.
• Legal and safety: we may disclose information if required by law, court order, or competent authority, or if we reasonably believe disclosure is necessary to protect rights, safety, or integrity of users or the public.

Tara is not a marketplace of human astrologers. We do not route your personal chart data to independent human readers as part of the core product.

10. International transfers

Our operators and subprocessors may be located outside your country, including in India and other regions. Where required, we implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) in line with applicable law.

11. Retention

We retain personal data only as long as needed for the purposes above, to meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data category; counsel should align these with your operational backups, audit needs, and regulatory duties. When retention ends, we delete or irreversibly anonymize information where feasible.

12. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is perfectly secure; we encourage strong device passcodes and prompt reporting of suspected account compromise.

13. Your rights and choices

Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain uses. You can manage some information in-app; you may also contact us at [email protected]. If you are in India, the Digital Personal Data Protection Act, 2023 (“DPDP Act”) may grant you rights including access, correction, erasure, grievance redressal, and appeal to the Data Protection Board of India where applicable. Use the Grievance Officer contact in Section 1; if you remain dissatisfied after our final response, you may explore the appeal mechanisms available under law once operational.

You may opt out of promotional communications by using unsubscribe links or in-product settings. Essential service messages may continue.

14. Children

Tara is not directed to children under the age required in your jurisdiction (commonly 18). If you believe we have collected data from a child without proper authority, contact us and we will take appropriate steps to delete it.

15. Cookies and similar technologies

This marketing site may use cookies or local storage as described in our Cookie Policy. Mobile apps use platform equivalents under OS permission models.

16. Third-party sites

Links to third-party websites or storefronts are governed by those parties’ policies. Review them before sharing personal data.

17. Changes to this Policy

We may update this Policy from time to time. We will revise the “last updated” date and, where changes are material and the law requires, provide additional notice (for example in-app or by email).

18. Contact

Questions or requests about privacy: [email protected] or Contact.