Information we collect
Account information — when you sign in with Google or email, we store your name, email address, and sign-in timestamps.
Payment verification — when you buy credits, you upload a bank-transfer receipt (an image or PDF) to secure storage, linked to your payment request until an administrator verifies it. We never collect your card or bank account numbers directly.
Usage records — the tools you use, the questions you ask the Assistant, and the credits each action costs are logged so credits can be charged correctly.
Practitioner directory — if you apply to be listed as a practitioner, the phone number, WhatsApp number, and specialties you provide are shown publicly in the directory by design — this is information you agree to make public, not a data leak.
How we use information
We use your information only to verify your account, provide the tools, verify payments and credit your balance, and prevent abuse (for example, rate-limiting a burst of requests).
We never sell or share your information for marketing purposes.
Third-party services
Supabase — the backend service we use for authentication, the database, and file storage.
Google — for Sign in with Google, and via the Gemini API for generating the Assistant tool's answers. When you ask the Assistant a question, that question text is sent to Google to generate a reply. VWR calculations, Nakath matching, and every other numeric result are produced by deterministic code, never by the AI model — Google is never in a position to compute those numbers.
Data retention
We keep account information for as long as your account is active. Payment and credit records are retained for at least 6 years to meet financial record-keeping obligations. If you request account deletion, we remove data that isn't legally required to be kept, within a reasonable time.
Security
Data access is restricted with Row Level Security (RLS) — server-side secret keys are never exposed to the browser. All traffic is encrypted over HTTPS. No system is completely risk-free, however.
Your rights
You can ask to see, correct, or delete your information at any time. Reach us through the contact details below to make such a request.
Age restriction
vaastu.tools is intended for people aged 18 and over. We do not knowingly collect information from children.
Cookies
We use only the cookies required to keep you signed in (via Supabase Auth). We do not currently use analytics or tracking cookies. If that changes, this policy will be updated.
Changes to this policy
We may update this policy from time to time. Meaningful changes will be reflected in the date at the top of this page.
Contact us
For any privacy question, reach us through the email or WhatsApp number on the /en/contact page.