Privacy Policy

( 1 ) Introduction

AskNova Astrocartography ("AskNova", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our astrocartography website, chart tools, saved content, AI reports, subscriptions, and related features (the "Service").

This policy applies to users worldwide. Where regional data protection laws, including UK GDPR, EU GDPR, CCPA/CPRA, APPI, or LGPD, grant you additional rights, those rights are outlined below.

( 2 ) What We Collect

Information you provide:

• Birth data - Birth details and chart settings you provide so we can generate astrocartography maps, relocation charts, saved profiles, and AI reports.
• Location and saved-place data - Places you search for, save, or use in reports, along with the location details needed to calculate chart and map results.
• Account information - When you sign in with Google, we receive the name on your Google account, your email address, and your profile picture from Google. We do not collect or store a password; Google handles sign-in.
• Payment information - Billing information for subscriptions or report credit purchases. Card details are handled directly by Stripe.
• AI report and chat content - Report requests, generated reports, follow-up questions, and the context needed to provide AI-powered analysis.
• Communications - Messages you send us by email, feedback forms, or support requests.

Information collected automatically:

• Usage and device data - Pages visited, features used, time spent, approximate location derived from your IP address, browser type, and device type. Collected through Google Analytics, through Sentry error monitoring (which may record a masked replay of a session in which an error occurs), and through product usage events we record ourselves (see Section 6). Your IP address is used for security and rate limiting and is not stored with your account.

If you use the Service without an account, some birth and chart data may remain only in your browser's local storage or session storage. If you create an account or request AI features, relevant data may be stored so we can provide the requested feature and sync it across sessions or devices.

( 3 ) How We Use Your Information

We use your information to:

• Generate and display astrocartography maps and chart data.
• Save profiles, saved places, report history, and account settings.
• Generate AI-powered reports and follow-up responses.
• Process payments, subscriptions, and credit packs through Stripe.
• Operate, maintain, secure, debug, and improve the Service.
• Respond to support requests and service communications.
• Understand how people use the Service through analytics.
• Comply with legal, tax, accounting, and security obligations.

We do not use your data for automated decision-making or profiling that produces legal effects. Under UK and EU GDPR, the legal bases for processing may include performance of contract, legitimate interest, consent, and legal obligation, depending on the purpose.

( 4 ) Who We Share Your Data With

We do not sell your personal information.

We share data only where needed to run the Service, process payments, provide AI features, improve reliability, understand usage, or comply with law.

We use the following service providers, who process data on our behalf:

• Stripe - Payment processing. Receives your email address to create your customer record, and your card and billing details directly. We do not see or store your full card details.
• Google Analytics - Website analytics, via cookies. We have disabled Google Signals and do not connect Analytics to any advertising account.
• Sentry - Error monitoring. Receives technical details of errors and, for a sample of sessions, a replay with all text masked and media blocked.
• OpenRouter and OpenAI - Generate AI reports. The request includes the personal details needed for the report. Neither uses this data to train models under their API terms.
• Google Maps - Receives place names and coordinates to geocode locations and determine time zones. No account identifiers are sent.
• Infrastructure providers - Supabase (database and sign-in), Vercel (hosting), and Upstash (rate limiting, which processes IP addresses briefly).

We may also disclose information if required by law, to protect users or the Service, or as part of a business transfer. If that happens, we will take reasonable steps to notify you where required.

( 5 ) International Data Transfers

Our hosting and database infrastructure is located primarily in the United States, so your personal data — including account information, saved profiles, and reports — is stored and processed in the United States. Depending on the feature, data may also be processed in other countries where our service providers operate.

For users in the EEA, UK, or Switzerland, we rely on appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, or equivalent mechanisms where required.

( 6 ) Cookies and Local Storage

We use the following:

• Essential cookies - Sign-in cookies set by Supabase that keep you logged in (names beginning with sb-, up to 400 days). These are required for the Service to work and need no consent.
• Analytics cookies - Google Analytics cookies (_ga and _ga_*, up to 2 years) that distinguish visitors and sessions. These load automatically.
• Browser storage - Chart settings, map state, temporary form state, and a random per-session identifier are kept in your browser's local or session storage. This is not sent to third parties.
• Product usage events - We record usage events on our own servers with the random session identifier and, if you are signed in, your account's internal identifier. This stays with us and is used only to understand and improve the product.

Opting out - You can block or delete cookies in your browser settings, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout. Disabling essential cookies may prevent parts of the Service from working.

Browser signals - We do not currently respond to the Do Not Track or Global Privacy Control browser signals.

( 7 ) Data Retention

• Guest birth and chart data - May be stored in your browser only unless you use an account or server-side feature.
• Account data, saved profiles, saved places, and reports - Kept while your account is active, unless you delete them or request deletion.
• Payment and tax records - Retained as required for tax, accounting, and compliance purposes.
• Product usage events - Kept while your account exists and deleted with it. Events not linked to an account are deleted after 180 days.
• Google Analytics data - Google retains event-level data for 2 months and user-level data for up to 14 months, after which only aggregated reports remain.
• Sentry data - Error reports and replays are retained for 90 days.

( 8 ) Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, and to withdraw consent or object to certain processing.

UK and EU users - Under GDPR, you can exercise these rights by contacting us. You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.

California residents - Under CCPA/CPRA, you may have the right to know, delete, and correct personal information. We do not sell or share your data for cross-context behavioural advertising.

Users in Japan and Brazil - You may have corresponding rights under APPI and LGPD respectively.

You can delete saved profiles and saved places from the Service where those controls are available. To request account deletion or exercise privacy rights, email us at contact@astrocartography.io.

( 9 ) Children's Privacy

The Service is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will take reasonable steps to delete it.

( 10 ) Security

We use reasonable measures to protect your data, including encryption in transit, access controls, and service-provider security controls. No system is perfectly secure, and we cannot guarantee absolute protection. Please keep your account credentials confidential.

( 11 ) Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice via the Service, by email, or by another appropriate method where required by law.

( 12 ) Contact Us

If you have questions about this policy or want to exercise your data rights, please contact:

AskNova Astrocartography
Email: contact@astrocartography.io