Dasha Privacy Notice
Effective date: 2026-03-06 ยท Consent version: 2026-03-06
This notice explains how Kiwi Agents processes data for Dasha. The service is designed around data minimization: we keep user state in the browser session where possible and limit operator analytics to privacy-preserving operational metadata.
1. Data We Process
Browser-Session Data
- saved profiles, chart state, chat history, and preferences stored in your current browser session;
- this session-local data is intended to disappear when the browser session ends or when you clear it.
Request Data Processed for Service Delivery
- birth details, chart inputs, compatibility inputs, uploaded file bytes, and request parameters needed to calculate and return the result you asked for;
- generated reports, readings, and chart outputs created in response to your request.
Operator Analytics
- consented event records such as page views, chart calculations, coarse chat topic labels, model names, timestamps, feature usage counts, and request success/failure metadata;
- we do not intentionally store raw chat prompts, shared server-side saved profiles, or publicly list user-uploaded files as analytics content.
2. Why We Use Data
- to calculate natal charts, transits, compatibility results, reports, and daily guidance;
- to process uploaded files during the active request;
- to operate, secure, rate-limit, debug, and monitor the product;
- to maintain operator analytics about feature usage and service reliability without relying on raw-content storage;
- to investigate abuse, fraud, safety incidents, or legal requests where reasonably necessary.
3. Consent and Lawful Basis
We rely on your consent for the product data practices presented before use and on operational necessity to process the specific request you submit. If you do not agree, do not use the service.
If you submit another person's data, you represent that you have lawful authority and any consent required for that submission.
4. Storage Model and Retention
- profiles, chat history, and preferences are designed to stay in the browser session rather than a shared public server profile store;
- operator analytics are retained for approximately 365 days unless a shorter or longer period is needed for security or legal handling;
- uploads are processed for the active request and are not intended to persist as a shared library of user documents;
- service providers and infrastructure logs may hold technical request records for their own operational windows.
5. Service Providers and Transfers
To fulfill your request, we may send necessary request content to the infrastructure and AI providers configured for the deployment, such as hosting, geocoding, PDF, or model providers. Those providers may process data in jurisdictions outside your home country.
We do not sell personal data. We may disclose data when reasonably necessary to comply with law, protect users, investigate abuse, or defend legal rights.
6. Security Measures
- admin analytics are protected behind admin authentication;
- API responses are configured with security headers and no-store caching for sensitive routes;
- public saved-profile APIs are disabled and uploads are handled ephemerally.
No online system is risk-free. Do not submit information that would create unacceptable harm if compromised, and avoid sensitive third-party data unless you have a clear lawful basis to provide it.
7. Your Choices and Requests
- you may stop using the service if you do not accept these data rules;
- you may clear the current browser session using the in-app session reset control;
- you may contact us for access, deletion, or privacy questions, subject to identity verification, technical limits, and applicable law.
8. Contact
Privacy and data requests: privacy@kiwiagents.com