Privacy Policy

We collect the following categories of personal data to provide our astrology services:

• Account Information: Name, email address, and profile photo when you register via Google OAuth or email/password credentials.
• Birth Data: Date of birth, time of birth, and place of birth. This information is essential for generating accurate astrological charts and readings across Vedic, Western, and Chinese systems.
• Payment Information: Payment details are processed securely by our payment partners Razorpay (for India) and Stripe (for international transactions). We do not store your full card numbers on our servers.
• Usage Data: Pages visited, features used, session duration, device type, browser type, and interaction patterns. We use PostHog for product analytics.
• AI Interaction Data: Chat messages, voice call transcripts, and avatar session logs generated during your consultations with our AI astrologer.
• Technical Data: IP address, browser user-agent, referring URLs, and error logs for service reliability.

Your personal data is used for the following purposes:

• Astrology Services: Generating birth charts, horoscopes, compatibility analyses, numerology reports, tarot readings, and personalized remedies based on your birth data.
• AI Consultations: Powering AI chat, voice call, and avatar session features to deliver personalized astrological guidance.
• Account Management: Authenticating your identity, managing subscriptions, processing payments, and providing customer support.
• Service Improvement: Analyzing usage patterns to improve features, fix bugs, and develop new capabilities.
• Communications: Sending transactional emails (receipts, account updates) and, with your consent, promotional content about new features or offers.

We do not sell your personal data. We share data only with the following categories of service providers, strictly as needed to operate the platform:

• AI Processing: Anthropic (Claude) for AI-powered astrological interpretations. Conversation data is sent for processing but is not used to train third-party models.
• Payment Processing: Razorpay and Stripe for secure payment handling. These processors are PCI-DSS compliant.
• Voice & Avatar: ElevenLabs for voice synthesis and HeyGen for avatar sessions. Only session-specific data is transmitted.
• Analytics: PostHog for product analytics (self-hosted option available). Data is anonymized where possible.
• Infrastructure: Neon (PostgreSQL database hosting), Vercel (application hosting). Data is stored in secure, encrypted environments.
• Legal Requirements: We may disclose data if required by law, court order, or to protect the rights, property, or safety of The Astro Nova, its users, or the public.

We implement industry-standard security measures to protect your data:

• All data transmitted between your browser and our servers is encrypted using TLS 1.3.
• Passwords are hashed using bcrypt with salt rounds, never stored in plain text.
• Database connections use SSL encryption. Sensitive fields (birth data) are encrypted at rest.
• API keys and secrets are stored in encrypted environment variables, never in source code.
• We conduct regular security audits and follow OWASP security best practices.
• Access to production data is restricted to authorized personnel with role-based access controls.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Under India's Digital Personal Data Protection Act (DPDPA) 2023 and the EU General Data Protection Regulation (GDPR), you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data. You can delete your account and all associated data from Settings at any time.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw consent for data processing at any time. This may limit your ability to use certain features.
• Right to Grievance Redressal: Under DPDPA, you may raise concerns with us or the Data Protection Board of India.

To exercise any of these rights, contact us at support@theastronova.com. We will respond within 30 days.

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for authentication (NextAuth.js session cookies), security (CSRF tokens), and basic site functionality. These cannot be disabled.
• Analytics Cookies: PostHog analytics cookies to understand usage patterns and improve the platform. You can opt out via cookie preferences.
• Preference Cookies: Store your theme preference, language selection, and other UI settings locally.

We do not use third-party advertising cookies. We do not participate in cross-site tracking or sell data to advertisers.

For any privacy-related inquiries, data requests, or complaints: