Privacy Policy

1. Who is responsible for your data

Founders Webflow LLC, registered at Registered Agents Inc, 30 N Gould St Ste R, Sheridan, WY 82801, United States, is the data controller for personal data processed through AstroSelf. For any privacy question or request, contact hello@astroself.org.

2. What we collect

Account data

Your email address and authentication details, handled by Clerk. We do not store your password.

Birth data

The birth date, birth time and birth location you enter, plus any name you supply, and the chart placements we calculate from them.

This is the most sensitive data we hold. Your exact date and place of birth are identifying information. We store it because it is what a report is generated from and what lets you re-read a report later. We do not use it to build advertising profiles, and we do not sell it.

Purchase data

Which reports you bought and when, and your subscription status. Card details are handled entirely by Stripe — they never reach our servers.

Technical data

Your IP address (used for rate limiting and abuse prevention), request paths, response times and error diagnostics. Our logs are filtered to strip personal fields, including birth data, before they are written.

3. Why we process it, and on what legal basis

Purpose	Legal basis (UK/EU GDPR)
Generating and delivering the report you bought	Performance of a contract
Taking payment and preventing fraud	Performance of a contract; legal obligation
Keeping your account and letting you sign in	Performance of a contract
Rate limiting, security, and abuse prevention	Legitimate interests — keeping the service available
Error monitoring and fixing faults	Legitimate interests — operating a reliable service
Retaining transaction records	Legal obligation — accounting and tax

We do not send marketing email. The only email you receive is transactional: your report, and notices about your account or subscription.

4. Who else processes your data

We use the following processors. We do not sell personal data to anyone, and none of these parties is permitted to use your data for their own purposes.

Processor	Purpose	Data shared
Cloudflare, Inc. Global edge network	Hosting, content delivery, and the D1 database where reports are stored	All account and report data; IP addresses
Clerk, Inc. United States	Account creation, sign-in, and session management	Email address, authentication credentials, session metadata
Stripe, Inc. United States	Payment processing	Email address, billing details, payment method. AstroSelf never sees or stores card numbers.
Moonshot AI (Kimi) International	Generating the text of your astrological report	Your first name, birth date, birth time, and birth location, plus the calculated chart placements. Your email address is not sent.
Open-Meteo European Union	Converting the birth place you type into map coordinates, so your chart can be calculated for the right location	The place name you search for. No account or personal identifier is sent with it.
Resend, Inc. United States	Sending transactional email — your report link and account notices	Email address, recipient name
Functional Software, Inc. (Sentry) United States	Error monitoring so faults are detected and fixed	Technical diagnostics. Personal data is filtered before transmission.

Please note in particular: to write your report, your birth date, time and location are sent to Moonshot AI's language model. If you are not comfortable with that, do not purchase a report.

5. International transfers

Our processors operate outside the United Kingdom and European Economic Area, principally in the United States. Where data is transferred out of the UK/EEA we rely on the transfer mechanisms offered by those providers, such as Standard Contractual Clauses.

6. How long we keep it

• Reports and birth data — kept while your account is open, so you can re-read them. Deleted when you delete your account.
• Account data — kept while your account is open.
• Transaction records — retained after account deletion where tax and accounting law requires it, typically up to seven years.
• Rate limiting and technical logs — short-lived, retained only as long as needed for security and diagnostics.

7. Your rights

Depending on where you live, you have the right to access your data, correct it, have it deleted, restrict or object to processing, and receive a portable copy. You also have the right to complain to your data protection authority — in the UK, the Information Commissioner's Office.

To exercise any of these rights, email hello@astroself.org from the address on your account. We will respond within one month. Deletion removes your account together with your reports, birth data and subscription records, other than the transaction records we are required to keep.

We are building self-service account deletion into the dashboard. Until it ships, email is the route, and we will action it manually.

8. Cookies

We use only what the site needs to work: a session cookie set by Clerk to keep you signed in, and Stripe's cookies during checkout for fraud prevention. We do not use advertising or cross-site tracking cookies, so there is no consent banner to dismiss.

9. Children

AstroSelf is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

10. Security

Data is transmitted over HTTPS and stored in Cloudflare D1. Access to reports is checked against the signed-in account on every request, secrets are held in the platform's encrypted store, and logs are filtered to strip personal fields. No system is perfectly secure, but if a breach affects your rights we will notify you and the relevant authority as the law requires.

11. Changes

We will update this page when our processing changes, and the date at the top will reflect it. Material changes will be notified to account holders by email.