ASTRA Privacy Policy
Last updated:
ASTRA is a service by dothecode, LLC. This policy explains what data we process and why.
What we collect
- Account: when you sign in with Google we receive your provider identifier and your email. We never see or store your password.
- Birth data: what you enter to compute a chart — name (optional), date, time and place of birth.
- Purchases: payments are processed by Stripe, acting as merchant of record. We never see or store your card details: from Stripe we receive the payment confirmation and the purchase identifier, so we can give you access to what you bought.
How we use it
- To compute your natal chart and show it on the site.
- To generate the written reading: the chart's astronomical data is processed by Anthropic (our AI provider) to produce the text. It is not used to train models.
- To keep track of the reports you have available to read.
- To detect failures and understand how the site is used. We use Sentry (error reporting) and PostHog (product analytics). They record actions such as signing in, creating a chart, generating a reading, downloading it or completing a purchase, along with your internal account identifier. We never send them your name, your birth date, time or place, or the text of your readings, nor your email. Your IP address is used only to infer the country you are visiting from and is not stored. On the website analytics only run if you accept them, and you can change your mind at any time from the link in the footer. Recording a completed purchase is the exception: our server does it when the payment is confirmed, so it does not depend on that preference. It is data about the transaction —which product and for how much—, not about your browsing, and it travels like the rest: with your internal account identifier and without your email. Both services process this data in the United States.
We don't sell your data, show ads, or build marketing profiles.
Deleting your data
You can delete your charts or your entire account from your account page (Account → Delete my data). Deletion is permanent: it removes your personal data, your charts, your readings and whatever you have available to read. We keep only an irreversible hash of your login provider identifier — it cannot identify you or recover your data; it only prevents a new account from receiving the three free welcome readings again.
Security and retention
Data travels encrypted (TLS) and session tokens are stored hashed. We keep your data for as long as your account exists.
Contact
For any question about your data, write to the contact address shown in the footer.