Privacy Policy

1. Data Controller

Aistrology.app is operated from Bulgaria, European Union. We are the data controller responsible for your personal data collected and processed through this service.

2. Data We Collect

We collect the following categories of personal data:

• Account information: Email address and password (stored as a cryptographic hash; we never store your password in plain text).
• Birth data: Date of birth, time of birth, and birth location (including geographic coordinates).
• Chart data: Natal charts, human design charts, and other astrological calculations generated from your birth data.
• AI-generated readings: Personalized interpretations created by AI models based on your chart data.
• Public calculator leads: If you use a free public calculator and explicitly opt in, we collect your email address, consent choice, calculator source, chart type, and the chart context needed to continue that saved result.
• Usage data: Basic information about how you interact with the service (e.g., pages visited, features used, button clicks, and error states) for the purpose of maintaining, securing, and improving the service.

3. How We Use Your Data

Your personal data is used for the following purposes:

• Providing astrology chart calculations and visualizations.
• Generating AI-powered personalized readings and interpretations.
• Managing your account and authenticating your identity.
• Storing and displaying your profiles and chart history.
• Sending transactional account, profile, billing, security, and service emails.
• Sending optional product updates, chart follow-ups, learning content, and astrology event notifications only where you have opted in.
• Maintaining, improving, and securing the service.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: By creating an account and providing your birth data, you consent to its processing for chart generation and AI-powered readings.
• Contract performance: Processing necessary to deliver the service you have signed up for.
• Legitimate interest: Maintaining the security and proper operation of our service, diagnosing errors, and improving our offerings in a privacy-conscious way.
• Separate email consent: Marketing, newsletter-style messages, and astrology event notifications are sent only when you have explicitly agreed to receive them. You can withdraw that consent later.

5. Third-Party Processors

We share your data with the following third-party service providers:

• Anthropic (AI readings) — Birth data and chart information may be sent to Anthropic's Claude API to generate personalized readings and interpretations.
• OpenAI (AI readings) — Birth data and chart information may be sent to OpenAI's API as a fallback provider for generating readings.
• Hetzner (hosting) — Our servers and database are hosted by Hetzner Online GmbH in the European Union, which stores and processes data as part of hosting the service.
• Resend (email delivery) — We use Resend to send account, verification, password reset, and other service emails. Resend receives your email address, the message content, and an internal user identifier used to track delivery.
• Sentry (error diagnostics) — We use Sentry to detect frontend and backend crashes. Sentry is configured without session replay and without default PII capture; we scrub raw birth data, account emails, authorization headers, cookies, and request bodies before events are sent where practical.

6. Birth Data & Sensitivity

Birth data (date, time, and location of birth) is personal data under GDPR. While it is not classified as "special category" data under Article 9 of GDPR, we recognize that birth information can be sensitive and personally meaningful. We treat it with appropriate care and security measures, including:

• Encrypted transmission (TLS/HTTPS) for all data in transit.
• Secure, access-controlled database storage.
• Minimal sharing — birth data is only sent to AI providers when you explicitly request a reading.
• Public calculator funnel analytics do not store raw birth date, birth time, birth location, coordinates, or email address.
• Full deletion upon account removal.

7. AI-Generated Content

Readings and interpretations on Aistrology.app are generated by artificial intelligence (AI) models. These readings are provided for entertainment and self-reflection purposes only. They do not constitute medical, psychological, financial, or legal advice. Always consult qualified professionals for important life decisions.

When you request an AI reading, relevant birth data and chart information is sent to AI providers (Anthropic and/or OpenAI) for processing. These providers may process the data according to their own privacy policies and data retention practices.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the service. If you request account deletion, all your personal data — including birth data, chart calculations, and AI-generated readings — will be permanently deleted within 30 days of the request.

We may retain certain anonymized or aggregated data that can no longer be linked to you for analytical purposes.

9. Your Rights (GDPR)

As a data subject under GDPR, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your account and all associated personal data.
• Right to data portability: Request your data in a structured, commonly-used, machine-readable format.
• Right to restrict processing: Request that we limit how we use your data.
• Right to object: Object to the processing of your personal data in certain circumstances.
• Right to withdraw consent: Withdraw your consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) of Bulgaria or any other relevant EU supervisory authority.

10. Emails & Notifications

Transactional emails are messages we need to send to operate the service, such as account verification, password reset, billing, security, support, profile, or important policy updates. These are separate from marketing or newsletter-style messages.

Marketing, learning, chart follow-up, and astrology event notification emails are optional. Public calculator email capture requires an explicit consent checkbox before we store that lead for these optional messages. You may unsubscribe or ask us to remove your lead data at any time.

11. Analytics & Error Diagnostics

We collect diagnostic information to understand whether the service works and which errors need attention. This may include page paths, feature names, browser or device category, timestamps, and technical error details. We do not currently use a third-party product analytics service.

We do not use diagnostics to store raw birth date, birth time, birth location, coordinates, email address, or full AI reading text. Sentry error reports are configured to avoid session replay, default personally identifying information, authorization headers, cookies, raw request bodies, raw birth details, and account emails. They may include route names, request methods, environment, release, request identifiers, and an anonymized user identifier when available.

12. Cookies

Aistrology.app uses essential cookies only. These are strictly necessary for the service to function and include:

• Authentication token: Stored in your browser's local storage to keep you logged in between sessions.
• Session data: Temporary data needed for the application to function correctly.

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

13. Children

Aistrology.app is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

14. International Data Transfers

Your data may be processed outside the European Union, particularly when sent to AI providers (Anthropic and OpenAI), our email delivery provider (Resend), and our error diagnostics provider (Sentry), which are located in the United States. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with GDPR requirements.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (using the address associated with your account) or through a prominent notice within the service before the changes take effect. We encourage you to review this page periodically.

16. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your GDPR rights, please contact us at:

[email protected]