Privacy Policy
Last updated: 13 October 2026
This policy explains what VastuEasy ("we", "us") collects when you use this website and the Vastu Canvas analysis tool, why we collect it, and who else sees it. We have tried to describe what the software actually does rather than list every possibility.
VastuEasy ("we", "us") is an independently operated service based in India. For any privacy question or request — including access, correction or deletion of your data — use our contact page. We reply to every message.
1. What we collect
If you create an account
Login is handled by Auth0. We receive and store your email address, your name (if your login provider supplies one) and the account identifier Auth0 issues. We also store your approval status, whether you are an administrator, and your usage limits.
Your usage of AI features
Each time you use an AI-backed feature we record a row containing your account ID, which feature it was, and the time. This is what enforces daily and lifetime limits. We do not store the content of the request in that log.
Floor plans and drawings you upload
Your plan is loaded and analysed in your own browser. In normal use it is not uploaded to us, and "Save Project" writes it to your browser's local storage on your own device. There are two exceptions:
- Ayadi AI dimension detection — if you use this optional feature, a resized copy of the plan is sent to Google's Gemini API to read the dimensions printed on it. We do not retain that copy.
- Demo accounts — a one-time trial account saves its single plan on our server so the map can be restored when you return. It is deleted when the demo account is deleted or expires.
Birth details
The AstroVastu and Planets Hits features ask for a date, time and place of birth. These are sent to our astrology data provider to calculate a chart. We store them only in your own browser so you don't have to retype them; you can clear them from within the tool.
Questions you ask
Questions typed into Ask Vastu, together with a summary of your current plan, are sent to Google's Gemini API to produce an answer. The job and its answer are held in temporary server storage and automatically deleted (24 hours by default).
Place searches
When you search for a city, the query goes through our server to OpenStreetMap's Nominatim service. Results for common places are cached on our server for up to 30 days. The cache holds the place name and coordinates, not who searched for it.
Advertising and analytics
We advertise on Google, and our pages load the Google Ads tag so we can tell which ads lead people to this site and to a purchase. When a page loads, the tag sends Google information such as the page address, the page you came from, your IP address, and browser and device details. If you arrived by clicking one of our ads, it also sets a cookie on your device that links your visit back to that click.
When you buy a plan, the tag also tells Google the purchase amount and the payment reference, so a sale can be matched to the ad that led to it.
We also use Google Analytics to understand how people use the site as a whole — which pages are visited, and where visitors stop on the way from first visit to purchase. Besides page views, it records a few steps: logging in, loading a floor plan into Vastu Canvas, opening a sample plan or sample report, opening checkout, and a completed purchase (plan, amount and payment reference). It sets its own cookies to tell visits apart and to recognise a returning browser. One-time login codes are removed from page addresses before they are sent.
We use this only to measure how well our ads and our site work. We do not send Google your name, email address, floor plans, birth details or the questions you ask. Google processes this data under its own privacy policy, and also uses it as described in How Google uses information from sites that use its services.
Visitors in the European Economic Area, the UK and Switzerland: these advertising and analytics cookies are switched off by default, and only limited, cookie-free signals are sent.
Your choices: you can turn off personalised ads in Google's ad settings, opt out of Google Analytics with Google's browser add-on, block or delete cookies in your browser, or use a tracker-blocking browser extension. The Vastu Canvas tool works normally either way.
2. Who your data is shared with
| Service | What it receives | Why |
|---|---|---|
| Auth0 (Okta) | Email, name, login activity | Runs login and authentication |
| Supabase | Account record, usage log, demo-account plan | Our database |
| Netlify | Site hosting, server logs, temporary job storage | Runs the website and its backend |
| Google (Gemini) | Ask Vastu questions; Ayadi plan images | Generates AI text and reads plan dimensions |
| Google Fonts | Your IP address, as with any web font request | Serves the site's typefaces |
| Google Ads | Pages visited, IP address, browser and device details, ad-click identifier (cookie), purchase amount and payment reference | Measures which of our ads lead to visits and purchases |
| Google Analytics | Pages visited, the site steps listed above, IP address, browser and device details, analytics cookie identifiers, purchase plan, amount and payment reference | Shows how visitors use the site and where they drop off |
| AstrologyAPI | Birth date, time and place | Calculates the astrological chart |
| OpenStreetMap (Nominatim) | The place name you typed | Turns a place name into coordinates |
We do not sell your personal data. The only data shared for advertising and analytics purposes is the visit information the Google Ads tag and Google Analytics collect, described under "Advertising and analytics" above. Your account details, plans, birth details and questions are never shared for advertising.
3. Data stored on your own device
The tool uses your browser's local storage for saved projects, your client library, your practice branding, and your login session. This stays on your device. Clearing your browser storage removes it, and doing so will delete any project you have not exported.
Separately, the Google Ads tag and Google Analytics may set advertising and analytics cookies, as described under "Advertising and analytics" above.
4. How long we keep things
- Account records — until you ask us to delete them.
- Usage log — retained while your account exists; it is what enforces your limits.
- AI job results — deleted automatically, 24 hours by default.
- Demo-account plans — deleted when the demo account expires or is deleted.
- Place-search cache — up to 30 days.
5. Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it and close your account. Ask through our contact page and we will respond within 30 days. Depending on where you live you may also have the right to complain to a data protection regulator.
6. Security
Traffic to this site is encrypted in transit. Database access is restricted to our own server code. Demo-account passwords are stored only as salted hashes, never in plain text. No system is perfectly secure, and we cannot guarantee absolute security.
7. Children
This service is not directed at children under 16, and we do not knowingly collect their personal data.
8. Changes
If we change this policy we will update the date at the top of this page. Significant changes will be flagged on the site.
9. Governing law
This policy is governed by the laws of India.