Back to Privacy Policy
Data Processors

Subprocessors

Last updated: June 3, 2026

In compliance with India's Digital Personal Data Protection (DPDP) Act, 2023 and DPDP Rules, 2025, Astra Mitra is committed to transparency about how and where your personal data is processed. This page lists all third-party vendors (subprocessors) that process personal data on behalf of Veriscribe Analytics & AI Pvt. Ltd..

Every subprocessor listed below is bound by a Data Processing Agreement (DPA) that mandates DPDP-compliant security safeguards, data minimization, purpose limitation, and breach notification obligations. We perform due diligence before engaging any subprocessor and review these relationships regularly.

MongoDB Atlas

Purpose: Primary database hosting for user profiles, birth charts, chat history, and astrological data.

Data Categories Processed

  • Identity details (name, email)
  • Birth data (DOB, TOB, POB, coordinates)
  • Astrological charts and readings
  • Chat conversation history
  • Account preferences
📍 India (Mumbai) region

Upstash (Redis)

Purpose: Rate limiting, session caching, and temporary OTP storage for authentication flows.

Data Categories Processed

  • Session tokens (hashed)
  • Rate limit counters
  • Temporary OTP codes (TTL < 10 min)
📍 Global edge (nearest PoP)

OpenAI / Anthropic (LLM Providers)

Purpose: Powering AI astrologer chat responses. Birth chart data is used as context for generating personalized Vedic readings.

Data Categories Processed

  • Anonymized chart positions (no PII)
  • Chat messages and prompts
  • Planetary placements & house data
📍 United States

Razorpay

Purpose: Payment processing for subscriptions, credit packs, and premium features.

Data Categories Processed

  • Name and email
  • Phone number
  • Transaction metadata (product, amount)
  • Payment status
📍 India

Google OAuth

Purpose: Social sign-in authentication. Used when users choose to sign in with their Google account.

Data Categories Processed

  • Name
  • Email address
  • Google account ID
📍 United States / Global

Veriscribe Analytics & AI Pvt. Ltd. reserves the right to update this list as our infrastructure evolves. Material changes to subprocessor arrangements will be communicated to users at least 15 days in advance, as required by the DPDP Rules, 2025.