Last updated: 24 September 2026
Putting Privacy Forward
This privacy policy outlines how DivineAPI upholds ethical standards and protects your information. We are committed to ensuring that your data remains safe and secure. If our team requests personal information to deliver results, you can provide it confidently, knowing that we prioritize your privacy. We regularly update our policies to align with evolving security standards, ensuring a protection-friendly platform for our users.
What We Aim to Collect
If you choose to become part of our prediction family, we may collect the following information:
- Your name, contact details, and email address.
- Locality details such as a postcode.
- Personal information related to your likes and interests.
- Other information required for surveys and feedback.
How the Information Is Further Processed
The information we collect is used to:
- Maintain a record of your profile to provide tailored results.
- Improve our existing standards and work ethics.
- Send regular updates via email or messages about the latest developments at DivineAPI.
- Customize results and services to match your preferences.
Secure Platform
User protection is our primary concern. DivineAPI employs robust security measures to ensure your information is safe. We strive to prevent any unauthorized access or technological interference with your data.
Cookie Policy
A cookie is a small file that requests permission to be placed on your device. Once you accept, it helps analyze web traffic and customizes your web experience based on your preferences.
How We Use Cookies
- Traffic Analysis: We use traffic log cookies to identify frequently visited pages and analyze web traffic to enhance website functionality.
- Customization: Cookies help tailor content to your preferences and improve user experience.
Cookies do not provide us access to your computer or any sensitive information. The data collected is used solely for analytical purposes and is promptly removed from our systems.
Other Links
Our website may contain links to other websites of interest. However, once you leave our site, we cannot guarantee the privacy and protection of your information on those websites. Please review their privacy policies before sharing any personal data.
Control the Amount of Information You Wish to Share
You have the right to choose a way to restrict or use or personal information in the following ways:
- When filling out forms, select the option indicating that you do not wish your data to be shared.
- If you previously agreed to share your information, you can change your preference by emailing us.
DivineAPI ensures that your data is used solely for providing customized results and maintaining security.
Transparency and Customer Trust
We are committed to maintaining transparency and trust with our customers. If you have any concerns about how your data is handled, please feel free to reach out to us at admin@divineapi.com
Our Two Roles
We handle personal data in two different ways.
As a controller, for our own customers: the name, email address, company and billing details of the people who open a DivineAPI account. This policy describes that processing.
As a processor, for our customers' end users: the birth details and other inputs a customer sends to our API to generate a reading or report. We process that data only on the customer's instructions, under our Data Processing Agreement at https://divineapi.com/legal/dpa. If you used an app or website built on DivineAPI, that business is responsible for your data and its privacy notice applies. We have no direct relationship with you and cannot identify you.
Legal Basis (EU and UK Users)
For our own customers we rely on: performance of a contract (operating your account and billing you); legitimate interests (securing the service, preventing abuse, and sending service notices); legal obligation (tax and accounting records); and consent, where we ask for it, for marketing email. You can withdraw consent at any time.
Where Your Data Is Processed
Our infrastructure is in India: AWS in Mumbai (ap-south-1) for the database and backups, and DigitalOcean in Bangalore for application hosting. Where a customer uses our chatbot endpoint, the question text is sent to large language model providers in the United States solely to generate the response. No other endpoint sends data to any AI provider.
International Transfers
If you are in the EU, UK or Switzerland, your data is transferred to India, which is not covered by an adequacy decision. For our own customers we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. For end-user data processed on behalf of our customers, those clauses are included in the Data Processing Agreement.
Subprocessors
The third parties that help us run the service, what they do and where they are located are listed at https://divineapi.com/legal/subprocessors. We update that page and notify affected customers before adding a subprocessor that handles customer data.
How Long We Keep Data
API request logs, PDF report content, chatbot sessions and error logs are deleted from live systems within 90 days. Backups are held for disaster recovery on a rolling 90-day window. Customer account records are kept for the life of the account and deleted within 7 days of a written request. Invoices and payment records are kept for the period Indian tax and accounting law requires, currently up to 8 years from the end of the financial year.
Your Rights
If you are in the EU or UK you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing based on legitimate interests, to receive your data in a portable format, and to withdraw consent. To exercise any of these rights, email admin@divineapi.com. We respond within 30 days. You also have the right to complain to your local data protection authority. If you are an end user of an app built on DivineAPI, please contact that business first; we will assist them with your request.
Security
All API traffic is encrypted in transit (TLS 1.2 or higher). Our production database and backups are encrypted at rest (AES-256, AWS KMS). Production access is limited to named personnel using SSH keys from approved IP addresses, with multi-factor authentication on our cloud, code and payment accounts. We will notify affected customers of a personal data breach within 72 hours of becoming aware of it.
Contact
Data protection questions and requests: admin@divineapi.com, marked for the attention of Dinesh Kumar Gahlot, WZ-96, Kh No. 38, Village Dabri, New Delhi 110045, India.
