Privacy Policy

Last updated: March 20, 2026

Astra AI ("we," "our," or "us") operates the website at astra-ai-1.vercel.app and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered astrology chat platform.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, and password when you create an account.
• Birth Details: Birth date, birth time, and birth location you voluntarily provide for personalized astrology readings.
• Chat Messages: Messages you send to our AI astrologers during consultations.
• Custom Instructions: Preferences and instructions you provide to personalize AI responses.
• Profile Settings: Language preference, astrology system preference, and selected astrologer.

1.2 Information Collected Automatically

• IP Address: Used for guest session management and abuse prevention.
• Browser Fingerprint: A hash of your User-Agent and Accept-Language headers, used solely for guest session tracking.
• Usage Data: Pages visited, features used, message counts, and timestamps via Google Analytics.
• Device Information: Browser type, operating system, and screen resolution.

2. How We Use Your Information

• Providing Services: To generate personalized astrology readings based on your birth details and chat messages.
• Account Management: To authenticate you, manage your subscription, and enforce usage limits.
• Service Improvement: To understand how users interact with our platform and improve the experience.
• Security: To detect and prevent abuse, fraud, and unauthorized access.
• Communication: To send service-related emails (OTP verification, password resets). We do not send marketing emails without your explicit consent.

3. AI-Generated Content

Your chat messages are processed by third-party AI models (via OpenRouter API) to generate responses. Key points:

• Your messages are sent to AI model providers to generate responses.
• We do not use your messages to train AI models.
• AI responses are generated in real-time and are not pre-written.
• AI-generated content is for entertainment and guidance purposes only and should not be considered professional advice.

4. Data Storage and Security

• Account data and chat history are stored in a secure PostgreSQL database hosted on Render.
• Passwords are hashed using bcrypt and are never stored in plain text.
• Authentication uses JWT tokens with secure, randomly generated secrets.
• All data transmission is encrypted via HTTPS/TLS.
• We implement rate limiting and IP-based abuse detection to protect the platform.

5. Data Sharing

We do not sell your personal information. We may share data with:

• AI Model Providers: Your chat messages are sent to AI providers (OpenRouter/OpenAI) solely to generate responses.
• Hosting Providers: Our infrastructure is hosted on Render (backend) and Vercel (frontend).
• Analytics: We use Google Analytics to understand usage patterns. This data is anonymized.
• Email Service: We use Brevo (formerly Sendinblue) for transactional emails like OTP verification.
• Legal Requirements: When required by law, court order, or governmental request.

6. Your Rights

You have the right to:

• Access your personal data stored on our platform.
• Correct inaccurate information in your profile.
• Delete your chat history via the Settings panel.
• Export your data in JSON format via the Settings panel.
• Withdraw consent and delete your account by contacting us.

7. Guest Users

If you use Astra AI without creating an account:

• We track your session using your IP address and browser fingerprint hash.
• Guest messages are limited to 8 per 24-hour period.
• Guest chat history is stored locally in your browser and is not saved to our servers.
• Birth details shared during guest sessions are used only for the current conversation and are not permanently stored.

8. Cookies

We use minimal cookies and local storage. See our Cookie Policy for details.

9. Children's Privacy

Astra AI is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of Astra AI after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: privacy@astraai.com