Privacy policy

This policy explains how Cosmic Business ("we", "us") handles personal data on Cosmic Business. It is written to be read, not to be survived. If anything here is unclear, ask us and we will answer in plain terms.

1. Who we are

Cosmic Business is operated by Cosmic Business, a business registered in India, selling digital reports to customers in India and internationally. We are the data controller for the personal data described below. You can reach us at tirgiji@gmail.com or through the contact form.

2. What we collect and why

We collect the minimum a numerology calculation needs, plus what a purchase legally requires. We do not ask for identity documents, and we never ask for card numbers.

We do not collect special-category data deliberately. Please do not put health information, financial account details, government identifiers or anyone else's private information into a calculator field or a contact message.

3. Legal basis

Where the Indian Digital Personal Data Protection Act applies, we process your data with your consent, which you give by entering it, and for the legitimate uses that the Act recognises, such as fulfilling an order you placed. Where the EU or UK GDPR applies, our bases are: contract for delivering a report you bought; consent for the newsletter and for personalised advertising; legal obligation for tax records; and legitimate interests for security, fraud prevention and keeping the site working.

4. Cookies and similar technologies

We use a small number of first-party cookies:

• Session cookie — keeps you signed in and makes form submissions and the anti-forgery token work. Strictly necessary; the site cannot function without it.
• Theme preference — remembers whether you chose the light or dark appearance. Stored in your browser, never sent to us.
• Rate-limit counters — short-lived, used to stop automated abuse of the forms.

We also use privacy-respecting aggregate analytics to understand which pages are used. You can block cookies in your browser settings; the calculators will still run, but sign-in and saved calculations will not.

5. Advertising, third-party vendors and Google's use of cookies

This site is set up to show advertising, and may do so. The following disclosures apply to that advertising:

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• You may opt out of personalised advertising by visiting Google Ads Settings.
• Alternatively, you can opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info or, in Europe, at Your Online Choices.
• More detail on how Google uses data when you use our partners' sites or apps is published at policies.google.com/technologies/partner-sites and policies.google.com/technologies/ads.

Advertising is never shown on checkout pages, report pages, account pages or the consultant dashboard. We do not pass the contents of your calculations — names, dates of birth or business details — to any advertising vendor.

6. Payment processing

Payments are handled by Razorpay for customers paying in India and Stripe for customers paying elsewhere. When you pay, you are on the processor's own secure page. We never see, receive or store your card number, CVV, UPI PIN or bank credentials. What comes back to us is a payment reference, the amount, the currency, the status, and the billing name and email you supplied.

Each processor handles that data under its own privacy policy — Razorpay and Stripe — and both may transfer data outside India in order to process an international card payment.

7. Who else we share data with

We do not sell, rent or trade personal data. We share it only with the processors that make the service work, and only with what they need:

• Hosting — the servers that run the site and hold the database.
• Payment gateways — as described above.
• Email delivery — to send report links, password resets and support replies.
• Advertising and analytics vendors — as described above, and never with your calculation inputs.
• Authorities — where a valid legal order requires it, which we will tell you about unless we are prohibited from doing so.

If a consultant runs a report for you through the consultant dashboard, that consultant is the party you gave your details to and holds their own responsibilities towards you. We process that data on their instruction.

8. International transfers

We are based in India and our infrastructure may be located in India or elsewhere. If you are in the EU, the UK or another region with transfer rules, your data may be processed outside that region. Where that happens we rely on appropriate safeguards, including the standard contractual clauses our processors operate under.

9. Your rights

Whatever jurisdiction you are in, you can ask us to:

• Access — tell you what we hold about you and give you a copy.
• Correct — fix anything inaccurate.
• Delete — erase your account, profiles, saved calculations and reports.
• Restrict or object — stop a particular use, including profiling for advertising.
• Port — receive your data in a machine-readable format.
• Withdraw consent — at any time, without affecting what was lawful before you withdrew it.

Email tirgiji@gmail.com from the address on your account. We respond within 30 days. Deletion requests are honoured except for records we are legally required to retain, such as completed transactions. If we cannot satisfy a request, we will tell you why.

Indian users may also complain to the Data Protection Board of India. EU and UK users may complain to their national supervisory authority. We would rather you came to us first.

10. Children

This service is for adults running or planning a business. It is not directed at children, and we do not knowingly collect data from anyone under 18. If a child's details have been entered, tell us and we will delete them.

11. Security

Traffic is encrypted in transit. Passwords are stored as salted one-way hashes and cannot be read by us or recovered. IP addresses are stored hashed. Access to the production database is restricted. No system is perfect, and we will not claim otherwise; if a breach affects you, we will notify you and the relevant authority as the law requires.

12. Changes to this policy

We update this page when what we do changes. The revision date at the top always reflects the current version. Material changes will be announced on the site, and where the law requires it we will ask for consent again rather than assume it.

13. Contact

Questions, requests or complaints about privacy: tirgiji@gmail.com, or use the contact form and choose "Privacy or data deletion".