Privacy and your data.

We collect the following categories of personal data:

• Birth details — date, time, and place of birth. Required to compute a KP chart. Stored encrypted at rest.
• Email address — used for magic-link authentication and transactional communications (purchase receipts, answer delivery).
• Question text — the questions you ask through the Platform. Stored to enable answer history and to improve question classification accuracy.
• Payment metadata — Stripe stores your card and billing data. We receive only a Stripe payment intent ID and a purchase record (amount, currency, timestamp). We do not store card numbers.
• Session data — a magic-link session token with a 30-day expiry. Stored as a secure httpOnly cookie.
• Usage data — anonymous page-view counts and feature interaction data used to understand platform usage patterns. No personal identifiers in analytics.

We use your data only for the following purposes:

We share personal data only with the following third parties, and only to the minimum extent required:

• Stripe — payment processing. Stripe receives your email address and payment details. Stripe's own Privacy Policy governs their use of your data.
• Swiss Ephemeris — the ephemeris library used to compute planetary positions. This library runs locally on our servers. No data is sent to a third party for chart computation.

We do not sell, rent, or share your personal data with advertisers, data brokers, or any third party for marketing purposes.

Under India's Digital Personal Data Protection Act 2023, you have the following rights regarding your personal data:

Most data rights can be exercised directly through your account dashboard at /account, which provides options to:

• Download an export of all your personal data
• Request deletion of your account and all associated data
• Correct your birth details, email, or other account information

For requests that cannot be completed through the dashboard, contact our Grievance Officer at privacy@astron.example. We will respond within 30 days.

We retain your personal data for as long as your account is active or as needed to provide the service. Specifically:

• Birth details and question history: retained until you request deletion
• Payment records: retained for 7 years to meet accounting obligations
• Session tokens: expire after 30 days and are purged from the database
• Shared answer links: expire after 30 days if not renewed

On account deletion, all personal data is removed within 30 days, except payment records that must be retained for legal compliance. Retained payment records contain no birth details or question content.

We use one essential cookie: an httpOnly session cookie that stores your authentication token after you complete magic-link sign-in. This cookie is required for the authenticated experience. It is not used for tracking or advertising.

We do not use third-party tracking cookies, advertising cookies, or fingerprinting technologies. We do not participate in cross-site tracking.