Privacy Policy
Effective 2026-04-20
Summary
We collect the data we need to operate the Service for you and nothing more. We do not sell your data. We do not share your data for advertising or for cross-context behavioral advertising. We do not use your charts or notes to train external models. We keep your data in the United States. You can export or delete your account at any time from /account.
1. Who we are
Insights by Omkar is the operator of Netra™ (the “Service”). For privacy questions: admin@insightsbyomkar.com.
2. What we collect
From you directly: email address (for authentication); chart inputs you create (birth date, time, location, name); chart notes; tags; preferences (default house system, aspect orbs, extended bodies); questions you ask the AI interpretation feature.
Automatically: standard server logs (IP address, timestamp, user-agent, URL path, response code) for operational diagnostics, abuse prevention, and security; an authenticated session cookie via Supabase SSR. No analytics cookies, no third-party trackers, no advertising identifiers.
From third parties: none.
Automatically: standard server logs (IP address, timestamp, user-agent, URL path, response code) for operational diagnostics, abuse prevention, and security; an authenticated session cookie via Supabase SSR. No analytics cookies, no third-party trackers, no advertising identifiers.
From third parties: none.
3. How we use it
Solely to operate the Service: render your charts, run interpretive queries, surface your library, generate AI interpretations against your chart data, remember your preferences, and protect the Service from abuse. We do not profile you, advertise to you, or use your data for any purpose unrelated to operating the Service.
4. Lawful bases (GDPR users)
For users in the EEA / UK / Switzerland, our lawful bases under GDPR Article 6 are: (a) contract — we process your data because it’s necessary to provide the Service you’ve requested; (b) legitimate interest — minimal server logs for abuse prevention and security; (c) consent — for any optional feature that requires it (currently none).
5. Third-party processors
We use these subprocessors. Their use is governed by their own privacy practices.
- Supabase — authentication, database, storage. United States region. Data is encrypted in transit and at rest. Row-level security limits row access to the authenticated user.
- Vercel — application hosting and edge delivery. United States.
- Kriya (kriya.insightsbyomkar.com) — our own ephemeris engine. Computes chart positions from birth data you submit. No retention beyond per-request transient processing.
- Third-party language-model providers — large-language-model APIs used to generate AI interpretations. When you ask the AI a question, we send the relevant ephemeris facts plus your question. We do not send your saved notes, your tags, or any other charts. Providers may log requests per their own policy. Neither provider is given a license to train on your data.
6. Cookies
See the Cookie Policy. Short version: one strictly-necessary first-party authentication cookie; nothing else.
7. Data retention
Your account data persists until you delete it. Server logs are retained for up to 30 days, then rotated. Backups are retained for up to 90 days for disaster-recovery, then expired. Deleted accounts are removed from active storage immediately and purged from backups during the next 90-day rotation cycle.
8. Your rights
Regardless of where you live, you can:
- Access / export — download a JSON archive of all your data from /account (self-serve).
- Correct — edit your charts, notes, tags, and preferences directly in the Service.
- Delete — close your account from /account; this purges all your charts, notes, tags, and preferences.
- Object / restrict — email admin@insightsbyomkar.com with subject “Privacy request.”
- Lodge a complaint with your local supervisory authority (EU/UK).
9. California residents (CCPA / CPRA)
We do not sell or share your personal information for cross-context behavioral advertising or for any other consideration. The categories of personal information we collect are described in Section 2; the purposes are described in Section 3. You may exercise the rights to know, access, delete, correct, and opt out (where applicable) using the mechanisms in Section 8 above. We do not knowingly collect personal information from minors under 16.
10. Children (COPPA)
The Service is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at admin@insightsbyomkar.com and we will promptly delete it.
11. International transfers
We process and store your data in the United States. By using the Service, EEA / UK / Switzerland users acknowledge transfer of their information to the United States. We rely on standard contractual clauses with our subprocessors where applicable.
12. Security
Transport-layer encryption (TLS 1.2+) for all traffic. Database row-level security limits row access to the authenticated user. Authentication via short-lived tokens issued by Supabase. We do not log personally-identifying chart content or AI question bodies in operational logs. We follow industry-standard security practices, but no service can guarantee absolute security.
13. Breach notification
In the event of a personal-data breach affecting your data, we will notify you and any applicable supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with applicable law (GDPR Article 33 and equivalent state laws).
14. AI providers and your data
The AI interpretation feature sends the chart’s relevant ephemeris positions plus your question to a third-party large-language-model provider. The provider may log this request per its own retention policy. We do not give the provider any license to train on your data. We never send your saved notes, your tags, your other charts, or your email address to the provider.
15. Changes
Material changes to this policy will be reflected in a new “Effective” date at the top of this page and, where appropriate, by a notice in the Service. Continued use after changes take effect constitutes acceptance.
16. Contact
Privacy questions or requests: admin@insightsbyomkar.com with subject line “Privacy request.”