Horo Remedy

Privacy Policy

Effective date: 10 September 2026. Last updated: 28 September 2026.

1. Who this policy covers

This Privacy Policy explains how Horo Remedy (hororemedy.com) ("we", "us", "our") collects, uses, shares, and protects personal data through the service. It applies to anyone who visits the site or holds an account, and it is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules.

2. What personal data we collect

  • Account data — your name, email address, and a password, which we store only as a salted cryptographic hash and never in plain text. We also remember your language preference.
  • Birth chart data — the date, time and place of birth, and a name/label, for every chart you create. This may be your own chart or one you create for someone else — a family member, partner, or child. If you enter someone else's birth details, you confirm you are entitled to do so: with their consent, or, for a child, as their parent or legal guardian.
  • Payment data — when you buy a plan or an AI request pack, our payment partner Razorpay collects and processes your card, UPI or bank details directly on its own secure systems. We never see or store your full card number, UPI ID or bank credentials. We keep only the order and payment ids, amount, currency, what was purchased, whether the payment succeeded or was refunded, and a numbered receipt showing your name and email address.
  • AI conversation data — if you use "Ask about this chart" or a beginner brief, we store your questions and the AI-generated readings so your conversation is there when you come back.
  • Technical and security data — your IP address, sign-in timestamps, and a security audit trail of account actions (password resets, plan changes, and similar events). If you turn on optional two-factor authentication, we store your authenticator secret encrypted (AES-256), never in plain text, and it is deleted the moment two-factor is turned off.
  • Cookies — a single session cookie that keeps you signed in. We do not use third-party advertising or cross-site tracking cookies.

3. How we use your data

We use your data only to provide Horo Remedy itself: to compute and display your birth charts and readings; to provide the AI brief and chat features; to process payments and apply the plan you purchased; to send you transactional email, such as receipts and — on Pro plans and above — daśā-change remedy alerts; to keep the service secure and prevent fraud or abuse; and to respond to support and grievance requests. We do not use your data for anything beyond these purposes. We do not sell personal data, we do not use it for targeted or behavioural advertising, and we do not share it for marketing, profiling, or any purpose unrelated to computing your chart and running your account. We never use a child's personal data for tracking, behavioural monitoring, or targeted advertising.

4. Your consent

We process your account and chart data on the basis of the consent you give when you register and when you use specific features (for example, starting a checkout or asking the AI a question). Because birth details are especially sensitive when they belong to someone other than you, the chart form itself reminds you, every time you add or edit a chart, of exactly how that data is used and links back to this page. You may withdraw consent at any time by writing to us at the address below or by deleting your account; withdrawing consent may mean we can no longer provide some or all of the service to you.

5. Who we share data with

We share personal data only with the service providers ("data processors") that Horo Remedy needs in order to run, each bound to use the data only for that purpose:

  • Razorpay — to process your payments and any refunds.
  • Our AI provider (via OpenRouter) — your chart data and questions are sent only to generate a reading. Every one of these requests is explicitly marked to disallow data collection, so it is only routed to providers who do not store your prompts or use them to train any model.
  • Our email delivery provider — to send you receipts and alerts.

We do not sell personal data to anyone, and we do not share it with data brokers or advertisers.

6. Where your data is processed

Some of the processors above may process data on servers located outside India. We only use processors permitted under Indian law, and if the Central Government restricts transfers to a particular country or territory, we will comply with that restriction.

7. How long we keep it (data retention), and deleting your account

In line with the DPDP Act's storage-limitation principle, we do not keep personal data for longer than the purpose it was collected for requires. Most of your data has no separate clock at all: it is simply tied to your account and is gone, immediately and completely, the moment you delete that account. A smaller set of operational and security records — the kind no service can run safely without — follows its own fixed retention schedule, set out below, and is reviewed against that schedule by an administrator rather than kept indefinitely by default.

While your account is active:

  • Account data, birth chart data, AI readings and chat history — kept for as long as your account (or, for an individual chart, that chart) exists. Deleting a chart deletes its readings and chat history with it; there is no separate retention window.
  • Two-factor authentication secret — kept, encrypted, only while two-factor is switched on for your account; deleted the moment you (or, if you've lost your authenticator, our email-verified reset flow) switch it off.

On a fixed schedule, independent of whether you keep using the service:

  • Security audit log (sign-ins, password and plan changes) — 2 years, for account-security and fraud investigation, then erased.
  • AI usage metering (per-request counts used for plan limits) — after 1 year, the link to your account is removed; the count itself may be kept as an anonymous, aggregate operational statistic that can no longer be traced back to you.
  • Consultation requests ("Talk to an astrologer") — 1 year after the request is resolved, then erased.
  • One-time email links (such as a two-factor reset link) — expire within 30 minutes and are erased once used or expired.
  • Payment receipts (receipt number, your name and email, item, amount, Razorpay ids, refund status) — 8 years from the date of payment, then erased. These are kept even if you delete your account, because Indian tax and company law requires a business to keep its financial records for that long; they are used for nothing else.

You can permanently delete your account at any time from the Your Account page, with your password to confirm. When you do, we immediately and permanently delete every chart, AI reading, chat conversation, daśā-alert history, checkout record, and security log tied to your account (except payment receipts, kept for 8 years as described above) from our production database — this cannot be undone. A small amount of aggregate usage data (for example, a count of AI requests made on a given day) may be kept for basic operational statistics, but it is disconnected from your identity at the same time and can no longer be traced back to you.

Two things we cannot promise on your behalf, since they are outside our own systems: our payment processor, Razorpay, and any bank or card network involved in a payment, keep their own transaction records for as long as their own legal and regulatory obligations require, independent of what we do (our own payment receipts are likewise kept for 8 years, as described above); and our routine database backups, kept only briefly as a safeguard against data loss or a bad deploy, may still contain a snapshot of your data for a short time until that backup is naturally rotated out.

8. Your rights

Under the DPDP Act, you have the right to: access the personal data we hold about you; ask us to correct or update it; ask us to erase it; withdraw your consent; have your grievance addressed; and nominate another person to exercise these rights on your behalf if you die or become incapacitated. To exercise any of these rights, contact our Grievance Officer below — we aim to acknowledge your request promptly and resolve it without unnecessary delay.

9. Children's data

Horo Remedy is intended for use by adults. If you are under 18, you may only use the service with the involvement and consent of a parent or legal guardian. Any chart you create for a minor must likewise be created with a parent or guardian's consent. We do not knowingly use a child's personal data for tracking, behavioural monitoring, or targeted advertising.

10. Security

We store passwords as salted hashes, never in plain text; the site is served only over HTTPS; and access to the database and to our payment and email credentials is restricted. You can also turn on optional two-factor authentication (a code from an authenticator app such as Google Authenticator, in addition to your password) from the Your Account page — it is off by default and entirely your choice. No system can be made perfectly secure. If a data breach occurs that affects your personal data, we will notify the Data Protection Board of India and the users affected, as required by law.

11. Grievance Officer

Under the DPDP Act, you can raise a complaint about how your personal data is handled with our Grievance Officer:

Horo Remedy
Email: privacy@hororemedy.com

Full contact details, including our address, are on the Contact page.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date above will change, and we will highlight any change that materially affects your rights on this page.

13. Contact us

For any other question about this policy or your data, write to us at privacy@hororemedy.com.