What each measure does
JWT authentication means your session is carried by a signed token rather than a guessable identifier, and it expires. Argon2 password hashing is the current password-hashing standard, deliberately slow and memory-hard so stored passwords cannot be brute forced even if a database were exposed. Passwords are never stored in a readable form.
Role-based access control means an ordinary account cannot reach administrative data, and administrative actions are separated from normal ones. Audit logging records sensitive actions, so a change can be traced afterwards. Rate limiting caps how fast requests can be made, which blunts credential stuffing and scraping.
Your birth data
Your birth details are used to compute your chart and to answer your questions about it. What is collected, how long it is kept and how to have it removed is set out in the privacy policy, and you can request deletion at any time from the delete account page.
The AI Jyotish is given your computed chart in order to answer, which is what makes its answers specific to you rather than generic. The terms cover accounts and Karma Points.
Reporting a problem
If you believe you have found a security issue, please contact us with the details rather than posting them publicly, and we will look into it.