Privacy Policy
How we handle your information — in plain language.
Last updated: 4 October 2026
This Privacy Policy explains how TarotPandit, part of the Pandit.com ecosystem, handles your information when you use our website and readings.
This website is operated by Trichakra Foundation (GSTIN 03AJJPK2400L1ZK), 80 Vishal Nagar, Pakhowal Road, Ludhiana, Punjab 141013, India. For any privacy or data-related request, write to care@pandit.com.
What we collect
- Account details you provide — your name and email address when you register.
- Reading inputs — the question and optional first name you enter for a reading are stored with that reading so you can open or share it. An optional date of birth is used only to find your birth card and is not stored with the reading. A shared reading link shows the question and the cards, never your name or date of birth.
- Profile details — if you save your date of birth on your profile (to see your birth and year cards), family members' names and birth dates you add, and, for Premium members who switch it on, a WhatsApp number used only to send the card of the day. You can change or remove them on your profile at any time.
- Purchased reports — for a report bought from the report store, the names and dates you enter are kept with that order so you can download the report again from your link. Write to us to have them deleted. Reports downloaded by members are generated on request and their inputs are not kept.
- Academy — quiz results, exam submissions (which must not identify the people you read for) and certificates. A certificate's holder name, title and date are shown to anyone who checks its id at /verify. A directory listing is shown publicly only if you create it and agree.
- Usage data — basic, mostly anonymous analytics (pages visited, a session identifier) to understand and improve the service. Free readings are counted per device with a cookie and a one-way fingerprint of the device cookie and network address. When our reading widget is embedded on another site, we record which site it loaded on, not who used it.
- Payment data — if you purchase a membership, payments are handled by our processor (Razorpay). We do not see or store your card details.
How we use it
To operate the readings, run your account, compute and save your readings, respond to your enquiries, process memberships, and improve TarotPandit. We do not sell your personal data.
How readings are written
Each card in a reading is written from the TarotPandit library, which our team wrote and checked. When the AI synthesis is switched on, your question, your first name if you gave one, and the cards drawn are sent through our server to the AI provider to write the closing synthesis; your date of birth and contact details are not sent. When it is off, the synthesis is assembled from the library as well.
Who we share it with
Only the service providers needed to run the platform — our hosting, email delivery, AI gateway and payment processor — and only as far as needed to deliver the service, or where required by law.
Cookies
We use a small number of cookies for your login session, your language and theme, and anonymous analytics. You can clear or block them in your browser; some features (like staying logged in) need them.
Your rights
You may ask us to access, correct or delete your personal information, or to close your account. Just contact us. We aim to honour valid requests promptly, in line with India's Digital Personal Data Protection Act and, where applicable, the GDPR.
Data security & retention
We take reasonable measures to protect your data and keep it only as long as needed to provide the service and meet legal obligations.
Children
TarotPandit is intended for adults. We do not knowingly collect data from children without a guardian's consent.
Changes
We may update this policy; the date above will change when we do.
Questions? Contact us.