™

Your information

Privacy Policy

Last updated 3 November 2026

At Astrudio, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our astrological chart generation and poster creation service. Please read this policy carefully.

1.1 Information You Provide Directly

  • Account Information: Email address, password (encrypted), and optional display name when you create an account
  • Birth Details: Names, birth dates, birth times, and birth locations for yourself and family members you add to the service
  • Payment Information: Processed securely through Stripe; we do not store full card numbers on our servers
  • Communications: Information you provide when contacting customer support

1.1a Connections and My People

A Connection compares two sets of birth details to produce a short reflective Connection Snapshot. How it is handled:

  • Private by default: a Connection saved to your account is visible only to that account. It is never published and never appears in search results.
  • Your free Snapshot. The first insight is calculated in your browser. If you choose to create an account or sign in from the completed Snapshot, the account step saves the reading and both people privately. When already signed in, you can read a new Snapshot first and choose which details to save.
  • Optional browser draft: if you are not signed in, a Snapshot may be kept as a draft in your own browser storage on that device only. It is not sent to us, and you can remove it. If your browser blocks storage, no draft is kept and the Snapshot still works.
  • Continuing through sign-in. Your browser temporarily holds the details needed to complete the save. The sign-in link contains a reference, and birth details stay out of the address. The handoff expires after 30 minutes and is cleared when saved, cancelled or expired.
  • This week and your responses: the “This week” pick, its recent history and your answer to “Does this sound like us?” are kept only in this browser on this device. They are not sent to us or saved to your account, and clearing your browser data removes them.
  • Sharing an insight: sharing uses your device’s own share menu, or copies the text for you to paste. We do not send it anywhere. Names are included only if you tick that option, and the link carries only the type of Connection.
  • Astrudio+ membership: payments are handled by Stripe. We check your membership with Stripe using your account email and never see your card details.
  • No automatic sharing: we never contact, notify or share anything with the other person in a Connection. Nothing is sent to them, and no invitation or approval is requested by us.
  • The Connection Snapshot is limited: it covers a small set of placements and deliberately leaves anything uncertain out. Longer readings and further features described as “coming soon” are not yet available and cannot be bought.
  • Details about other people: when you enter another person’s or a child’s birth details, please use only what you are comfortable holding on their behalf, and only where it is reasonable for you to do so. First name alone is enough.

1.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, time spent on the service
  • Device Information: Browser type, operating system, device type
  • Log Data: IP address, access times, referring URLs
  • Cookies: Session cookies for authentication and preferences (see Section 7)

1.3 Information from Third Parties

  • Google OAuth: If you sign in with Google, we receive your email address and profile name
  • Stripe: Payment status and subscription information

We use the information we collect to:

  • Provide our services: Generate personalised astrological charts, insights, and poster designs based on the birth details you provide
  • Process payments: Complete purchases for Pro access and poster downloads
  • Manage your account: Authenticate your identity, maintain your saved posters and family data
  • Communicate with you: Send order confirmations, respond to support requests, and provide service-related notices
  • Improve our service: Analyse usage patterns to enhance features and user experience
  • Ensure security: Detect and prevent fraud, abuse, and security issues

For users in the European Economic Area (EEA) and UK, we process your data under the following legal bases:

  • Contract Performance: Processing necessary to provide our services (chart generation, poster creation)
  • Consent: Where you have given explicit consent (e.g., marketing communications)
  • Legitimate Interests: Improving our service, preventing fraud, ensuring security
  • Legal Obligation: Compliance with applicable laws (e.g., tax records for transactions)

We do not sell your personal information. We may share your data only in the following circumstances:

4.1 Service Providers

We work with trusted third-party services that process data on our behalf:

  • Supabase: Database hosting and authentication (SOC 2 Type II compliant)
  • Stripe: Payment processing (PCI DSS Level 1 compliant)
  • Google Cloud: Location services for birth place lookup
  • OpenAI: AI-powered chart interpretations (data is not used for training)

4.2 Legal Requirements

We may disclose your information if required to:

  • Comply with a legal obligation, court order, or governmental request
  • Protect our rights, privacy, safety, or property
  • Prevent fraud or investigate potential violations of our Terms of Service

4.3 Business Transfers

If Astrudio is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit (TLS/SSL) and at rest
  • Authentication: Secure password hashing and optional multi-factor authentication
  • Access Controls: Limited access to personal data on a need-to-know basis
  • Infrastructure: Hosted on secure, SOC 2 compliant infrastructure
  • Payment Security: PCI DSS compliant payment processing through Stripe

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We retain your data for as long as necessary to provide our services:

  • Account Data: Retained while your account is active; deleted within 30 days of account deletion
  • Birth Data: Retained while your account is active to provide chart services
  • Transaction Records: Retained for 7 years as required for tax and legal compliance
  • Usage Analytics: Aggregated and anonymised data may be retained indefinitely

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and session management (cannot be disabled)
  • Preference Cookies: Remember your settings like theme preference (light/dark mode) and currency
  • Optional analytics: off unless you agree to it. If enabled in future, it would record only which steps were used (for example, “Snapshot ready” and the type of Connection) — never names, birth details, places, reading text, account identifiers or web addresses. No analytics service is currently connected.

We do not use advertising cookies or sell data to third-party advertisers. You can manage cookies through your browser settings, but disabling essential cookies may affect functionality.

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Restriction: Request that we limit how we use your data
  • Portability: Request your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Where processing is based on consent, you may withdraw at any time

To exercise these rights, contact us at hello@astrudio.com. We will respond within 30 days.

Our Service is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. However, we understand that parents may wish to create charts for their children as part of family features.

If you are a parent entering your child's birth details, you represent that you have parental authority to do so. If we learn that we have collected personal information from a child without parental consent, we will delete that information promptly.

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place:

  • Standard Contractual Clauses approved by the European Commission
  • Data processing agreements with all third-party providers
  • Selection of providers with appropriate certifications (SOC 2, ISO 27001)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected and how it's used
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your privacy rights

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on this page with a new "Last Updated" date
  • Sending an email notification for significant changes

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EEA/UK residents: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

Last Updated: 3 November 2026