'/%3E%3Ccircle cx='16' cy='16' r='11' fill='url(%23fg)'/%3E%3C/svg%3E)
House of Planets
Privacy Policy
Last updated: 6 Jul 2026
The short version
House of Planets draws your Vedic birth chart and lets you talk to it. To do that we need a few things from you — and we are upfront about all of them.
- We collect your email, your birth details (date, time, place), and your chat history. That's the core of it.
- Your birth details and chats are sent to OpenAI to generate the readings — there is no chart and no conversation without that.
- We never see or store your card. Stripe and Razorpay handle payments.
- We do not sell your data. No advertising, no third-party tracking.
- You can delete your account anytime. It wipes your live data — a few things survive for legal reasons or sit in backups until they expire, and we say exactly what, below.
If you read one thing, read What we collect and Your rights.
What we collect
Everything we hold, why we hold it, and how long it stays.
| What | Why we have it | How long |
|---|---|---|
| Email address | Your login identity, account recovery, receipts | Until you delete your account |
| Password (bcrypt hash — never the plain text) | To log you in | Until you delete your account |
| Display name | To address you in the app | Until you delete your account |
| Birth details — date, time, place, derived coordinates | The exact input that computes your natal chart. Nothing else. | Until you delete your account |
| Your computed chart | So we don't recompute it every visit | Until you delete your account |
| Chat history & generated insights | Continuity in your conversation; we don't pay to regenerate the same reading | Until you delete your account |
| Usage records (tokens, model, cost per request) | Billing accuracy and abuse prevention | Kept as operational records |
| Payment records (purchases, subscriptions, processor customer IDs) | To give you what you paid for and manage refunds | Kept as financial records |
| GST invoices (Indian purchases) | Legally required tax documents | Per Indian tax law, even after deletion |
| Presence (whether you're online) | The live "online" indicator | Expires automatically |
| Feedback you submit | So we can act on what you tell us | Kept — anonymized after account deletion |
We do not collect your contacts, your location beyond the birth place you type, your browsing on other sites, or anything via advertising trackers. There are none.
Your birth details are sensitive — we treat them that way
Your date, time, and place of birth are the most personal thing you give us. They are permanent, they reveal personal chronology, and combined they are unique to you. We hold them to a higher standard than the rest:
- Stored only in your private chart record. Never on any public page or API.
- Never written into our logs, error messages, or crash reports in readable form.
- Only ever transmitted over an encrypted (HTTPS/TLS) connection.
- Sent to our AI provider only as the context needed to generate your reading — see below.
By creating a chart, you consent to this use of your birth details. If you withdraw that consent, delete your account and the chart goes with it.
Who we share data with
A small set of named providers. We do not sell your data to anyone, and we share it only where the service literally cannot work without it.
| Provider | What it receives | Why |
|---|---|---|
| OpenAI | Your chart context and chat messages, as the prompt | Generates every reading and chat reply |
| Google (only if you sign in with Google) | Standard sign-in identity: email, name, profile basics | To log you in. Nothing more — no Drive, contacts, or calendar |
| Stripe (outside India) | Your payment details, directly | Card payments. We never receive your card number |
| Razorpay (in India) | Your payment details, directly | Indian payments. We never receive your card number |
| ipinfo.io | Your IP address, at checkout only | Detects your country to route you to the right processor |
| Railway (US-region hosting) | Hosts our database and servers | All your stored data lives here |
| Sentry (error monitoring, when enabled) | Technical error reports — engineered to exclude birth details | To find and fix crashes |
Generating your reading means sending your chart context and messages to OpenAI as prompt content. As of this policy: OpenAI does not use API content like ours to train its models, and may retain prompt content for up to ~30 days for abuse monitoring before deleting it.
We cannot delete, on your behalf, data already sent to OpenAI within that window. Once it ages out of OpenAI's systems, it's gone. This is the one place where deleting your account does not instantly erase everything — and we'd rather tell you than bury it.
How we use your data
We use your personal data only to run House of Planets — nothing else.
The core of the service needs your birth details: to compute your chart and readings, we send them (with your messages) to our AI provider, OpenAI. Because that is your personal data going to another company, we ask for your clear consent before your first chart. It is required to use House of Planets — if you withdraw it, that means closing your account.
A few other things are simply needed to run the service: processing payments, keeping it secure and fair, and showing your online status.
Some things are entirely optional and happen only if you choose them — like update emails. You can turn those on or off anytime in your Profile → Privacy & data.
We do not use your data for advertising, for profiling on behalf of third parties, or to train our own models. We do not make automated decisions that have legal or similarly significant effects on you.
Cookies and tracking
- We keep you logged in using a token in your browser's local storage. Functional, not a tracker.
- Signing in with Google uses one short-lived security cookie during the handshake. It expires within minutes.
- No advertising cookies, no Google Analytics, no third-party analytics of any kind.
Because the only cookies we use are strictly necessary to provide the service you asked for, there is no consent banner. If that ever changes, we'll ask first.
Security
- Passwords are hashed with bcrypt and never stored in plain text.
- Password-reset tokens are stored only as SHA-256 hashes.
- All traffic runs over HTTPS/TLS.
- Payment card data never touches our servers — our PCI-compliant processors handle it directly.
- Access to administrative data is restricted to authorized operators.
No system is perfectly secure, and we don't claim to be. We aim for honest, current practice.
Your rights, and how to use them
You can:
- Access the data we hold about you.
- Correct your details. Birth details can be edited once in-app (each edit rebuilds your chart, so we limit it to prevent abuse). If you've used that edit and still need to fix a genuine inaccuracy, email admin@houseofplanets.in — the edit limit never blocks your right to correct your data, and we resolve corrections within 30 days.
- Delete your account and data — there's a delete option inside the app. It immediately and permanently removes your live data: charts, sessions, insights, and chat history.
- Export your data — Profile → Account → 'Download my data' gives you a JSON copy.
- Nominate a person to exercise your rights if you die or are incapacitated — set it in Profile → Privacy & data.
- Withdraw consent for birth-data processing by deleting your account.
To exercise any of these, use the in-app controls or email admin@houseofplanets.in. We aim to respond within 30 days.
Grievances: use the feedback/contact button inside the app (fastest, creates a tracked record) or email admin@houseofplanets.in (use email if you've already deleted your account). We resolve within 30 days. Under the DPDP Act you must exhaust this channel before approaching the Data Protection Board.
What survives account deletion, and why
We believe in saying this plainly. After you delete your account:
- Tax invoices (GST) and the payment audit record are kept — Indian tax and financial law requires it. They are tied to a transaction, not a live profile.
- A small deletion record is kept permanently: a one-way hash of your email plus a one-way hash of the IP of the deletion request. A tamper-evidence tombstone, not a usable profile.
- Feedback you previously submitted is kept so we can still act on it — anonymized: your email and name are removed.
- Anything already in our encrypted backups persists until that backup naturally expires (currently within roughly 7–30 days), then it's overwritten. We can't surgically pull one person from a historical backup.
- Prompt content already sent to OpenAI follows OpenAI's retention (above).
Outside of these specific, disclosed cases, deletion means deletion.
Children
House of Planets is for adults. You must be 18 or older to use it. We use the birth date you enter to verify your age, and we will not create an account or generate a chart for anyone under 18.
We do not direct the service to anyone under 18. If we discover that an under-18 has provided data, we delete it. To raise a concern, email admin@houseofplanets.in.
Where your data lives
Our servers and database are hosted in the United States (Railway). If you are in India, the EU, or elsewhere, your data is processed in the US. We apply the same protective standard to every user regardless of location, and treat all users as entitled to GDPR-level protections.
Changes to this policy
If we change what we collect or who we share it with, we'll update this page and move the "last updated" date. Material changes — especially any new data collection or any introduction of tracking — we'll surface to you before they take effect.