Privacy / Version 2026-09-14
Your story.
Handled with care.
Who is responsible
For privacy enquiries about Astrava, contact hello@askastrava.com.
What we process
We process your name, email, authentication information, birth date and time, birthplace, and confirmed coordinates and time zone when available. We also store your conversation messages, generated interpretations, calculation results, timestamps, and accepted legal versions.
Where a partner invites you, we record the partner source, an optional external reference, and any partner-provided consent provenance. Partner consent does not substitute for your acceptance of Astrava’s Terms and Privacy Policy.
Why we use it
We use account and profile information to provide and secure the service, personalize requested readings, save your conversations, support account recovery, and honor your preferences. Security event records and pseudonymous rate counters help prevent abuse. The service processes information to fulfill our agreement with you, support legitimate interests in security, and act on your consent where required.
What a reading shares
The AI language provider, OpenAI, receives your conversation context and relevant saved birth details: first name, birth date, birth time, birthplace, and confirmed location. We do not add your email, last name, or registration source to AI context. Calculation services receive the arguments needed for the tools called. If you type sensitive information directly into a conversation, that information may be included in the reading context.
Our authentication and database provider, Supabase, processes account and application data. Hosting and transactional email providers process information necessary to run the service and deliver account emails. Information may be processed outside your country.
Storage and security
Your birth profile and conversations are not publicly readable. Account ownership is checked on the server and enforced by database access policies. API secrets stay on servers. We use essential cookies for secure authentication and store your theme preference in your browser. Astrava does not add advertising trackers.
Retention and deletion
Your profile and conversation history remain until you delete them or close your account. Deleting a conversation removes its messages and tool results. Deleting your account removes its authentication identity, profile, conversations, messages, and linked usage records. Security audit records lose their user references. Minimal partner retry records retain pseudonymous fingerprints to prevent duplicate invitations, with external identifiers removed and response references redacted. Retry records and security logs are retained for operational security.
Provider backups, mandatory retention, and already delivered emails may persist for their normal retention periods. Deleting application data does not recall information already processed by a provider.
Your choices and rights
You can correct profile details in My Profile, delete conversations, or download your data and delete your account in Account. Depending on your location, you may also have rights of access, restriction, objection, portability, withdrawal of consent, and complaint to your data protection authority. Contact us to exercise rights not available in the interface.
Age and sensitive information
Astrava is intended for adults. Do not submit information about another person without permission, and avoid sharing sensitive health, financial, or other unnecessary personal information.
Policy changes
We version this policy and record your acceptance. Material changes can require you to review and accept the new version before continuing with readings.