1. Technical Security Architecture
AstroLeaf employs defense-in-depth architectural security protocols to safeguard user data against unauthorized access, alteration, disclosure, or destruction:
- Transport Layer Security (TLS 1.3): All network traffic across AstroLeaf is encrypted in transit using industry-standard TLS 1.3 cryptographic suites with strict HSTS (HTTP Strict Transport Security) enforcement.
- Database Encryption: Stored account records and saved birth charts are protected with AES-256 bit encryption at rest.
- PCI-DSS Compliance: Payment processing is fully offloaded to Level 1 PCI-DSS compliant gateways. AstroLeaf servers never process, capture, or store sensitive card numbers, CVVs, or PINs.
2. Astrological Calculation Data Isolation
When you compute your Janam Kundli, planetary dashas, or transit overlays:
- Mathematical calculations are performed dynamically using our optimized server-side ephemeris engine.
- Guest chart calculations are not linked to advertising identifiers or cross-site tracking profiles.
- Birth data cookies are strictly 1st-party functional tokens (
SameSite=Lax) stored on your local browser to enable switching between calculators without re-entering details.
3. Permanent Data Deletion Protocol
You have full authority over your data. To permanently delete your account, saved Kundli profiles, and personal history:
- Submit a deletion request to contact@astroleaf.in with the subject line "Permanent Data Deletion".
- Alternatively, use our Cookie Manager to instantly clear all local browser data and cookies.
- All server-side personal profiles are permanently purged within 7 business days following identity verification, retaining only anonymized tax transaction records as required by Indian financial law.
