Legal
How Astrosophy collects, uses, and protects personal information
Astrosophy (astrosophy.app) is operated by Vega Creatives LLC, 1209 Mountain Rd Pl NE, Albuquerque, NM 87110, USA, which is referred to in this Policy as “we” or “us.” Vega Creatives LLC is the controller of the personal information described in this Policy.
We aim to collect only information that has a current and identifiable purpose. We do not sell or rent personal information. We do not use birth or chart information to build advertising profiles, and we do not use it to make decisions about credit, employment, insurance, housing, eligibility, or other similarly consequential matters.
We do not intentionally collect biometric information or precise live device location. We do not use personal information to train external artificial-intelligence models unless we first establish an appropriate lawful basis and obtain consent where required.
Astrosophy does not make solely automated decisions using personal information that produce legal or similarly significant effects.
If you create an Astrosophy account, we may process:
Authentication is provided through self-hosted Appwrite software. We do not receive or store your plaintext password.
If you use personalized chart features, we may process:
We intend this information to concern the account holder. Do not submit another person's birth information unless an Astrosophy feature expressly permits it and you are legally entitled to provide it.
Birth information is used to calculate and display astrological material. It is not used for advertising, credit, employment, insurance, housing, eligibility, or medical decision-making.
When you access Astrosophy, we and our infrastructure or security providers may process technical information such as:
Stripe processes payment-card and payment-method information.
We may receive and retain information such as:
Astrosophy does not receive or store your full payment-card number.
If you contact us, we process the information in your message, your contact details, and related correspondence as necessary to respond, provide support, protect the service, or maintain appropriate business records.
If you separately subscribe to Astrosophy updates, we may process:
Newsletter subscription is optional and separate from an Astrosophy account or paid membership. You can unsubscribe using the link in a newsletter or by contacting us.
Google Analytics (through Google Tag Manager) and PostHog start when a page loads, without a separate opt-in.
Google Analytics may process limited information about use of any Astrosophy page, and PostHog about use of public pages, such as page or route context, event information, device or browser information, approximate network information, and technical diagnostics.
We configure PostHog so that account pages, personalized chart pages, and member-only personal chart activity are excluded from its collection. We do not intentionally send birth information, chart information, account identifiers, or payment details to analytics providers.
Most personal information comes directly from you when you create an account, enter birth information, purchase a membership, subscribe to updates, change settings, or contact us.
We also receive limited information from service providers, including Stripe for billing and payment status, infrastructure and security providers for operational events, and analytics providers.
Place-search information is submitted to the geocoding service used to convert the place you enter into coordinates required for chart calculation.
Where the EU GDPR, UK GDPR, or similar law requires a legal basis, we rely on the following bases as applicable.
We process information necessary to create and authenticate an account, to calculate and display personalized chart features, to provide trial and membership access, to process membership status and account entitlements, to provide requested support, and to administer cancellation and account functions.
This processing is generally based on Article 6(1)(b) GDPR where GDPR applies.
We may process information where reasonably necessary for our legitimate interests, provided those interests are not overridden by your rights. Those interests are protecting accounts and the service from fraud, abuse, and unauthorized access; maintaining service reliability and availability; diagnosing errors and security incidents; enforcing our Terms; establishing, exercising, or defending legal claims; and improving core service performance using information that is appropriate for that purpose; and measuring how the site is used through analytics.
Where GDPR applies, this processing is generally based on Article 6(1)(f).
We process information where necessary to comply with applicable tax, accounting, consumer-protection, law-enforcement, court, or other legal obligations. Where GDPR applies, this is generally based on Article 6(1)(c).
We rely on consent for optional marketing communications, and other processing where consent is the appropriate legal basis. Where GDPR applies, this is generally Article 6(1)(a).
You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.
We aim to collect information that is adequate, relevant, and reasonably necessary for the feature or purpose involved.
We do not collect journal entries or saved reflections as part of the current Astrosophy service.
If a future feature would materially change the categories of information we collect or the purposes for which we use it, we will update this Policy and provide any additional notice or consent required by law before that processing begins.
We use a limited set of service providers and infrastructure tools to operate Astrosophy. Providers may act as processors, service providers, or independent controllers depending on the service and applicable law.
Purpose: authentication, database, and application functions.
Information involved: account information, birth and chart information, account settings, and service records required by the application.
Astrosophy operates Appwrite software on infrastructure hosted for us. Appwrite software being self-hosted does not by itself mean Appwrite receives Astrosophy account data. If we use an Appwrite-hosted support, telemetry, or cloud service that receives personal information, we will disclose that use as appropriate.
Purpose: hosting infrastructure in Germany for the Astrosophy application and self-hosted database.
Information involved: data stored by the application and technical or operational logs generated through hosting.
Purpose: payment processing, one-time membership administration, fraud prevention, refunds, and payment disputes.
Information involved: billing contact details, payment information provided to Stripe, customer and payment identifiers, transaction information, and payment status.
Stripe receives payment information directly and may act as an independent controller for some payment, fraud, and legal-compliance activities.
Purpose: DNS, content delivery or proxying, network security, abuse prevention, and Turnstile bot protection.
Information involved: IP address, browser and connection information, security signals, and request metadata.
Purpose: transactional or account email and optional newsletter delivery.
Information involved: email address, delivery metadata, and newsletter subscription information where applicable.
Purpose: converting a place name entered for chart calculation into geographic coordinates.
Information involved: the place-search text submitted for geocoding.
Purpose: analytics and diagnostics on public pages only.
Information involved: limited public-page usage events and technical diagnostics as configured by Astrosophy.
Purpose: measurement of site use across all pages.
Information involved: limited public-page usage and technical information as configured by Astrosophy.
We may also disclose personal information to professional advisers, insurers, regulators, courts, law-enforcement bodies, or other parties where reasonably necessary to comply with law, protect rights and security, or establish or defend legal claims.
If all or part of Astrosophy or Vega Creatives LLC is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be disclosed as part of that transaction subject to appropriate confidentiality, notice, and legal safeguards.
We do not disclose personal information to third parties for their own cross-context behavioral advertising.
The core Astrosophy application and self-hosted database are hosted on infrastructure in Germany. Some providers, including payment, email, security, or analytics providers, may process information in the United States or other countries.
Where EU, EEA, Swiss, or UK transfer rules apply, we use a lawful transfer mechanism where required. Depending on the provider and destination, this may include an adequacy decision, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or other recognized safeguards.
You may contact us for information about the safeguards relevant to a particular transfer.
Vega Creatives LLC will maintain an appointed representative for EEA and United Kingdom data-protection matters where GDPR Article 27 requires one, and that representative's contact details will be listed here. You may also contact us directly at the address in section 15 for any data-protection matter in the meantime.
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining security, complying with legal obligations, resolving disputes, and enforcing agreements.
In general:
Information stored only in your browser remains on your device until it is removed through Astrosophy, your browser, or your device settings.
Account deletion does not require cancellation records, invoices, payment records, or other information to be erased where we are legally required or otherwise lawfully permitted to retain them.
We use technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or loss. Depending on the system, these measures include encrypted HTTPS/TLS transport, authenticated access, access controls, provider-managed password security, network and bot protection, and restricted administrative access.
Birth and chart information cached in browser storage may be readable by someone who has access to your unlocked device, browser profile, or authenticated session. Astrosophy does not represent that browser local storage is separately encrypted at rest by Astrosophy.
No internet service can guarantee absolute security. If a personal-data breach occurs, we will investigate it and provide notifications to affected individuals or authorities where required by applicable law.
Depending on your location and the law that applies, you may have rights to:
These rights are subject to legal conditions and exceptions. For example, we may retain information where necessary to comply with law, protect security, prevent fraud, establish or defend legal claims, or complete a transaction you requested.
We may need to verify your identity before fulfilling a request. An authorized agent may submit a request where applicable law permits it, but we may require evidence of the agent's authority and verification of the person concerned.
We will not discriminate against you for exercising a privacy right protected by applicable law.
Where GDPR or UK GDPR applies, you may also have the right to complain to the supervisory authority in the country where you live, work, or believe an infringement occurred.
Residents of some U.S. states have additional privacy rights when the relevant state law applies to the business and processing involved. We will honor those rights where legally required.
Astrosophy does not knowingly sell personal information. We do not use personal information for cross-context behavioral advertising.
To submit a privacy request, email info@astrosophy.app with the subject Privacy Request — Astrosophy.
Astrosophy accounts and personalized services are for people aged 18 and over.
We do not knowingly permit a person under 18 to create an account or purchase a membership. If you believe a person under 18 has provided personal information through an Astrosophy account, contact us at info@astrosophy.app so we can review the situation and take appropriate action.
This age restriction does not necessarily prevent a person under 18 from viewing general public educational pages that do not require an account, but those pages are not designed to solicit personal information from children.
Astrosophy may link to external websites, booking services, payment pages, or other third-party services. Their privacy practices are governed by their own notices. This Policy does not control personal information collected independently by a third party after you leave Astrosophy.
We may update this Policy to reflect changes in the service, providers, security practices, or law.
We will update the “Last updated” date when changes are made. If a change materially affects how we use personal information already collected, we will provide additional notice or obtain consent where required by law.
For privacy questions or requests:
Vega Creatives LLC
1209 Mountain Rd Pl NE
Albuquerque, NM 87110
United States of America
You can email us at info@astrosophy.app, and we suggest the subject Privacy Request — Astrosophy.
We will respond within the period required by applicable law. Where no shorter legal period applies, we aim to respond within 30 days.
This Privacy Policy should be read together with the Astrosophy Terms & Conditions.