Privacy policy

What we collect

• Account details: name, email address, sign-in method, language and currency preferences.
• Birth details: date, time (and how sure you are of it) and place of birth, with the derived coordinates and time zone.
• Your questions and our answers, and any feedback or reports you send.
• WhatsApp: your phone number (stored encrypted) and messages you send to our official business number.
• Payments: what you bought, amount, status and the payment provider's reference. Card and bank details are handled by the provider (Razorpay or Stripe) and never reach us.
• Product analytics: first-party events such as “chart generated”, with no birth details or question text. We honour Do Not Track and Global Privacy Control.

Why we use it

• To calculate your chart and answer your questions (performance of our service, with your consent for birth details).
• To process payments and keep records required by law.
• To keep the service secure, prevent abuse and improve quality.

We do not sell personal data, use it for advertising, or use it to train AI models.

Service providers

We use carefully selected processors: cloud hosting and database providers, an AI model provider to write answers (your question and relevant chart facts are sent; not your name, email or phone number), an embeddings provider for search over our knowledge base (your question text), Meta's WhatsApp Business Platform for WhatsApp, payment providers, an email provider and a geocoding provider (the place name you type). Each is bound by contract to use the data only to provide their service to us. Some are located outside your country; where required we rely on appropriate safeguards.

Retention

• Account, birth and conversation data: until you delete them or your account.
• WhatsApp message text in our processing queue: removed once processed.
• Payment records: as long as tax and accounting law requires, de-identified after account deletion.
• Security and audit logs: up to 2 years, without birth details or message content.

Your rights and choices

• Export all your data from your account page.
• Delete your account and data at any time (or send DELETE on WhatsApp).
• Withdraw WhatsApp consent by sending STOP.
• Correct your birth details by adding a new birth profile.
• Depending on where you live (for example under India's Digital Personal Data Protection Act, the UK/EU GDPR, or Californian law), you may have further rights, including to complain to a regulator.

Security

Data is encrypted in transit and at rest, phone numbers are additionally encrypted at field level, staff access is restricted by role and requires two-factor authentication, and administrative actions are audit-logged.

Children

Astroilaz is intended for adults (18+). You may add a birth profile for someone else only with their permission or, for a child, as their parent or guardian.

Contact

Questions or requests: privacy@astroilaz.com.