Privacy Policy

This Privacy Policy explains how Individual Entrepreneur ALEKSEI GERASIMOV, registered in Georgia under identification number 302335266 on 11/02/2025 by LEPL National Agency of Public Registry, with an address at Georgia, Tbilisi, Chughureti district, Mikheil Tsinamdzgvrishvili street, N52, Attic ("we", "us", "our"), collects, uses, discloses, and protects personal data in connection with the Astrospace application and related services (collectively, the "Service").

This Privacy Policy is intended to provide transparent notice regarding our data practices. Certain privacy rights and obligations may vary based on your location and applicable law.

1. Personal Data We Collect

1.1 Information You Provide Directly

• Account data: name, email address, and account credentials used to create and maintain your account.
• Profile and birth data: date of birth, time of birth, and location of birth when you choose to use astrology-related features.
• Payment and transaction data: payment-related information processed by Dodo Payments, as well as purchase history, subscription status, billing country, and limited transaction metadata. We do not store your full payment card number on our servers.
• Chat and prompt data: messages, prompts, and other content you submit when interacting with AI features, plus generated outputs associated with your account.
• Support communications: information you provide when contacting us for support, refunds, or other inquiries.

1.2 Information Collected Automatically

• Device and technical data: browser type, operating system, language settings, approximate device identifiers, screen resolution, and similar technical information.
• Usage data: pages or screens viewed, session duration, feature interactions, navigation activity, and diagnostic events.
• Log data: IP address, timestamps, crash logs, error reports, and security events.
• Push notification tokens: device tokens used to send notifications through Firebase Cloud Messaging if you opt in.

2. How We Use Personal Data

We may use personal data to:

• Provide, operate, maintain, and secure the Service;
• Create natal charts, horoscopes, tarot readings, compatibility analyses, and other personalized outputs you request;
• Process subscriptions, payments, renewals, refunds, and invoices;
• Authenticate users and manage accounts;
• Send service-related communications, including billing notices, account alerts, and support responses;
• Send push notifications and similar messages where you have opted in;
• Monitor usage, troubleshoot issues, prevent fraud, and improve the performance and reliability of the Service;
• Comply with legal obligations and enforce our terms and policies.

3. Legal Bases for Processing

If you are located in the EEA, UK, or another jurisdiction requiring a legal basis for processing, we rely on one or more of the following:

• Performance of a contract: where processing is needed to provide the Service you request, including account administration, personalized content delivery, and payment handling.
• Consent: where you give us permission, such as for optional push notifications or other consent-based processing.
• Legitimate interests: where processing is reasonably necessary for security, fraud prevention, product improvement, customer support, and internal administration, provided those interests are not overridden by your rights.
• Legal obligations: where processing is required to comply with applicable law, tax rules, accounting requirements, or lawful requests.

4. How We Share Personal Data

We may disclose personal data to service providers and other parties as reasonably necessary to operate the Service, including:

• Firebase / Google Cloud: authentication, database, storage, hosting infrastructure, and push notifications. See Firebase Privacy Policy.
• Dodo Payments: payment processing, billing, and fraud prevention. See Dodo Payments Privacy Policy.
• AI service providers: to generate requested chat responses and astrology-related outputs. We share only the information reasonably necessary to provide the requested output.
• Vercel and similar infrastructure providers: hosting, delivery, and technical operations. See Vercel Privacy Policy.
• Legal and business transfers: where required by law, to protect rights or safety, to enforce our agreements, or in connection with a merger, acquisition, financing, or asset sale.

We do not sell your personal data for money. We also do not share your personal data for cross-context behavioral advertising.

5. AI Feature Notice

If you use AI features, your prompts, messages, birth data, and related context may be processed by our AI service providers to generate the requested output. Please avoid submitting information that you do not want processed in connection with those features.

We seek to use providers and settings appropriate for business use, but AI systems can produce unexpected outputs and may involve processing in multiple jurisdictions.

6. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to maintain the Service, comply with law, resolve disputes, and enforce our agreements.

• Account data: typically retained while your account remains active.
• Chat history and generated outputs: retained while associated with your account unless deleted sooner.
• Payment and tax records: retained for the period required by accounting, tax, and legal obligations.
• Push tokens: retained until you unsubscribe, disable notifications, the token becomes invalid, or we otherwise no longer need it.

When you request account deletion, we will delete or de-identify personal data within a reasonable period, except where retention is required or permitted by law.

7. Data Security

We use reasonable technical and organizational safeguards designed to protect personal data, including encrypted data transmission, access controls, and security monitoring appropriate to the nature of the Service.

No security measure is perfect, and we cannot guarantee absolute security of personal data.

8. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of certain personal data, to object to or restrict certain processing, to withdraw consent where processing is based on consent, and to request portability where available by law.

Residents of certain U.S. states may also have the right to know the categories of personal data we collect, the categories of sources, the categories of recipients, and to request deletion or correction, subject to legal exceptions. We do not sell personal data or share it for cross-context behavioral advertising, and we do not knowingly sell or share the personal data of minors under 16.

To exercise available rights, contact us at gerasimov.alexey1994@gmail.com. We may need to verify your identity before fulfilling a request and may deny or limit requests where permitted by law.

9. Cookies, Local Storage, and Similar Technologies

The Service may use the following technologies:

• Essential cookies: to authenticate users, maintain sessions, and protect the Service.
• Local storage: to remember app settings, preferences, and push-related information on your device.
• Service workers: to support progressive web app functions, caching, and push notification delivery.

We do not currently use third-party advertising cookies or similar technologies for behavioral advertising.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from children under 16 without authorization required by applicable law. If you believe a child has provided personal data to us in violation of this section, contact us at gerasimov.alexey1994@gmail.com, and we will take appropriate steps to investigate and, where required, delete the information.

11. International Data Transfers

Personal data may be stored and processed in countries other than your own, including the United States and other jurisdictions where our service providers operate. Where required by applicable law, we use appropriate safeguards for cross-border transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the revised version in the Service and may provide additional notice where required by law. The "Last updated" date indicates when this Privacy Policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise available privacy rights, please contact us:

• Email: gerasimov.alexey1994@gmail.com
• Address: Georgia, Tbilisi, Chughureti district, Mikheil Tsinamdzgvrishvili street, N52, Attic
• Entity: Individual Entrepreneur ALEKSEI GERASIMOV (ID: 302335266), registered on 11/02/2025 by LEPL National Agency of Public Registry