Privacy Policy
Last updated: 8 August 2026
This policy explains what VastuEasy ("we", "us") collects when you use this website and the Vastu Canvas analysis tool, why we collect it, and who else sees it. We have tried to describe what the software actually does rather than list every possibility.
VastuEasy ("we", "us") is an independently operated service based in India. For any privacy question or request — including access, correction or deletion of your data — use our contact page. We reply to every message.
1. What we collect
If you create an account
Login is handled by Auth0. We receive and store your email address, your name (if your login provider supplies one) and the account identifier Auth0 issues. We also store your approval status, whether you are an administrator, and your usage limits.
Your usage of AI features
Each time you use an AI-backed feature we record a row containing your account ID, which feature it was, and the time. This is what enforces daily and lifetime limits. We do not store the content of the request in that log.
Floor plans and drawings you upload
Your plan is loaded and analysed in your own browser. In normal use it is not uploaded to us, and "Save Project" writes it to your browser's local storage on your own device. There are two exceptions:
- Ayadi AI dimension detection — if you use this optional feature, a resized copy of the plan is sent to Google's Gemini API to read the dimensions printed on it. We do not retain that copy.
- Demo accounts — a one-time trial account saves its single plan on our server so the map can be restored when you return. It is deleted when the demo account is deleted or expires.
Birth details
The AstroVastu and Planets Hits features ask for a date, time and place of birth. These are sent to our astrology data provider to calculate a chart. We store them only in your own browser so you don't have to retype them; you can clear them from within the tool.
Questions you ask
Questions typed into Ask Vastu, together with a summary of your current plan, are sent to Google's Gemini API to produce an answer. The job and its answer are held in temporary server storage and automatically deleted (24 hours by default).
Place searches
When you search for a city, the query goes through our server to OpenStreetMap's Nominatim service. Results for common places are cached on our server for up to 30 days. The cache holds the place name and coordinates, not who searched for it.
Analytics
Google Analytics is currently not enabled on this site and no analytics cookies are set. If we enable it later, this policy will be updated before we do.
2. Who your data is shared with
| Service | What it receives | Why |
|---|---|---|
| Auth0 (Okta) | Email, name, login activity | Runs login and authentication |
| Supabase | Account record, usage log, demo-account plan | Our database |
| Netlify | Site hosting, server logs, temporary job storage | Runs the website and its backend |
| Google (Gemini) | Ask Vastu questions; Ayadi plan images | Generates AI text and reads plan dimensions |
| Google Fonts | Your IP address, as with any web font request | Serves the site's typefaces |
| AstrologyAPI | Birth date, time and place | Calculates the astrological chart |
| OpenStreetMap (Nominatim) | The place name you typed | Turns a place name into coordinates |
We do not sell your personal data, and we do not share it for advertising.
3. Data stored on your own device
The tool uses your browser's local storage for saved projects, your client library, your practice branding, and your login session. This stays on your device. Clearing your browser storage removes it, and doing so will delete any project you have not exported.
4. How long we keep things
- Account records — until you ask us to delete them.
- Usage log — retained while your account exists; it is what enforces your limits.
- AI job results — deleted automatically, 24 hours by default.
- Demo-account plans — deleted when the demo account expires or is deleted.
- Place-search cache — up to 30 days.
5. Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it and close your account. Ask through our contact page and we will respond within 30 days. Depending on where you live you may also have the right to complain to a data protection regulator.
6. Security
Traffic to this site is encrypted in transit. Database access is restricted to our own server code. Demo-account passwords are stored only as salted hashes, never in plain text. No system is perfectly secure, and we cannot guarantee absolute security.
7. Children
This service is not directed at children under 16, and we do not knowingly collect their personal data.
8. Changes
If we change this policy we will update the date at the top of this page. Significant changes will be flagged on the site.
9. Governing law
This policy is governed by the laws of India.