Privacy Policy

1. Introduction & Sacred Trust

At Urjaa Chakra, we honor the privacy and confidentiality of every seeker, student, and visitor who enters our digital sanctuary. This document describes how we collect, process, store, and safeguard your information when you access our platform, book spiritual consultations, order sacred goods, or participate in learning cohorts.

2. Information We Collect

We process only the minimum information necessary to provide our spiritual services and commerce fulfillment:

• Authentication & Identity Data: Full name, verified email address, and avatar image obtained through Google OAuth single sign-on. Urjaa Chakra never collects or stores passwords.
• Consultation & Booking Data: Preferred time slots, consultation categories, client intake notes, and meeting links.
• Commerce & Shipping Data: Delivery recipient name, phone number, physical postal address, and Indian pincode for dispatching sacred crystals and physical goods.
• Transactional Records: Order numbers, item lists, tax invoices, and payment status. We never store credit card numbers, debit card CVVs, or UPI MPINs on our servers.
• Communication Data: Inquiries submitted via our sanctuary contact desk or customer service dialogues.

3. Purpose of Processing

Your information is processed strictly for legitimate operational purposes:

• Authenticating your access to the Student, Mentor, or Admin portals.
• Coordinating and fulfilling 1-on-1 energy consultations and mentoring sessions.
• Fulfilling physical orders, calculating Pan-India shipping, and generating statutory tax invoices.
• Delivering digital downloads and course materials to authorized seekers.
• Responding to your inquiries and providing assistance with orders or bookings.

4. Third-Party Service Providers

To maintain high reliability and security, we partner with verified infrastructure providers who process data on our behalf:

• Google Cloud Identity: For secure, passwordless seeker authentication.
• Supabase & PostgreSQL: For encrypted database storage and access management.
• Razorpay: For secure payment gateway processing and webhook validation.
• Vercel: For edge application delivery and web hosting.
• Indian Logistics Partners: Registered courier partners (such as Delhivery or BlueDart) receiving only necessary shipping addresses for delivery.

5. Data Retention & Security Principles

We retain your consultation and order histories as long as your account remains active or as required by applicable Indian tax and accounting regulations. We implement technical safeguards including TLS 1.3 in-transit encryption, database connection pooling with PgBouncer, and role-based access control (RBAC).

6. Seeker Rights & Grievance Redressal

You have the right to request access to your personal information, request corrections to inaccurate records, or request account deactivation. For questions, data access requests, or grievance redressal, please contact our designated sanctuary desk: