Privacy Policy

1. Who we are

AstroVia is the operator of the service and the data controller for the personal data described below. You can reach us at [email protected].

2. Data we collect

• Account data: username, email address, and a password hash.
• Birth data: name, date and time of birth, and place of birth for each person you create a chart for. This is special-category (sensitive) personal data under GDPR Article 9.
• Order and payment data: order history, order totals, and payment identifiers. Full card numbers are handled by our payment provider and are never stored on our systems.
• Usage data: limited technical logs needed to secure and operate the service.

3. Legal bases for processing

• Performance of a contract (Article 6(1)(b)) — to create charts and deliver reports you purchase.
• Explicit consent (Articles 6(1)(a) and 9(2)(a)) — for processing birth data, which is sensitive personal data. You may withdraw consent at any time, which will not affect the lawfulness of processing carried out before withdrawal.
• Legitimate interest (Article 6(1)(f)) — for security, fraud prevention, and improving the service.
• Legal obligation (Article 6(1)(c)) — for retaining financial records such as invoices.

4. How we use birth data

Birth data is used solely to calculate astrological charts and generate the reports you request. It is the sensitive personal data you entrust to us, and we treat it accordingly: it is not sold, and it is shared only with the subprocessors listed below to the extent needed to provide the service.

5. Subprocessors

We use the following third-party providers to operate the service. Where a provider is located outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses.

• OpenRouter (AI model inference) — the chart input text is sent to an AI model to generate report content. Location: United States.
• Payment processor (payments) — email address, order amounts, and payment identifiers for processing your payment. The processor is the merchant of record for the sale.
• Object storage provider (report PDFs) — generated PDFs are stored for delivery and download.
• Transactional email provider (notifications) — your email address is used to send order and delivery messages.
• Plausible (cookieless analytics) — page views without cookies or persistent identifiers; the IP address is processed transiently. Location: European Union.

6. International transfers

Some subprocessors (such as OpenRouter) are located outside the EEA. Where applicable we transfer data under Standard Contractual Clauses or another valid safeguard under GDPR Chapter V.

7. Retention

• Account and birth data are retained while your account is active, and deleted or anonymized when you close your account, except as required below.
• Order and invoice records are retained as financial records for the period required by applicable law (approximately 10 years).
• Report content and PDFs are retained while your account is active and deleted on account deletion.
• Consent records (which version you accepted and when) are retained for as long as required to demonstrate compliance.

8. Your rights

You have the right to access, rectify, erase, and port your personal data; to restrict or object to processing; and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact [email protected]. We respond within the periods required by law.

9. Cookies

AstroVia uses only the cookies strictly necessary to operate the service and remember your session. For details, see the Cookie Notice.

10. Marketing emails

With your separate opt-in we may send you occasional marketing emails: a birthday message, and reminders about notable transits for the charts you have already created. This is a marketing purpose of its own, and it is not covered by accepting these terms or buying a report — the opt-in is a separate, unticked checkbox, and we never market to you on the basis of a purchase alone.

You can withdraw your consent to marketing emails at any time: every marketing email we send carries an unsubscribe link, and you can also turn marketing emails off in your account settings. Withdrawing consent stops future marketing email and does not affect the lawfulness of any marketing processing carried out before the withdrawal. It also does not affect the messages we must send to deliver a report you have ordered, which are part of the service rather than marketing. If you have questions about your marketing consent, contact [email protected].

11. Analytics

AstroVia uses cookieless analytics provided by Plausible. The script does not use cookies and does not create persistent identifiers. Plausible processes the IP address transiently (it is not stored) and we do not send names, email addresses, or birth details. We use it only to understand how the store is used — for example which product pages are viewed and whether checkout completes. Analytics is disabled unless the site is configured with an analytics domain.

12. Free storefront reading

You can ask for a short free personalised reading after the storefront chart preview. To produce it we process the birth details you submit (name, date and time of birth, and place of birth) together with the email address you enter. Birth details are used only to calculate the chart placements and generate the reading in the moment; they are never stored from this flow.

Your email is stored as a marketing lead only when you tick the separate, unticked marketing-consent checkbox. If you do not consent, you still receive the reading and we do not keep your email. Consented leads are retained for 12 months from the date of consent, then deleted.

• OpenRouter (AI model inference) — Sun, Moon and, when known, Ascendant placements are sent to generate the reading. Location: United States.
• AstroVia (hosting and database) — consented email addresses, the consent timestamp, the client address, and the privacy-policy version are stored so we can demonstrate consent and send the marketing emails described in section 10.