Privacy Policy
How AstraRead collects, uses, protects and deletes order, membership, analytics and advertising data.
Who is responsible
AstraRead is operated by PE Oleh Khmelnytskyi, 160 Antonovicha St, Kyiv, Ukraine. For privacy requests, contact hello@astraread.com.
Information we collect
Order information may include name, email and birth date. Exact birth time, birthplace and location coordinates are collected only for reports that use them. Pair reports use a second person’s name and birth date; pet reports use a companion name and type. A pet-only photo may be added optionally to supported pet reports. Gift orders may use recipient details supplied by the purchaser. Membership records may include the member’s personal profile, plan, consent version, status and renewal timestamps. Analytics identifiers are collected only after an analytics choice. Advertising identifiers follow the regional advertising choices described below. Reports and their birth details are not sent to advertising providers.
How information is used and the legal basis
Contract steps and performance cover checkout, payment confirmation, report generation, delivery, correction and requested support. Legal obligations cover transaction and accounting records. Legitimate interests cover service security, fraud prevention and duplicate-fulfillment controls, balanced against customer rights. Consent covers optional analytics, advertising measurement where required and marketing communications and may be withdrawn at any time. Verified US visitors can opt out of browser advertising measurement; an opt-out or Global Privacy Control signal takes precedence.
AI-assisted reports
Anthropic’s API assists with writing the personalized report from the order details required for that report. Deterministic calculations are prepared separately and supplied to the writing workflow. AI output does not make legal or similarly significant decisions about the customer. Reports are symbolic content for entertainment and reflection, not medical, mental-health, legal or financial advice. Do not submit information the selected report does not request.
Service providers and recipients
monobank processes payment and subscription status; Airtable stores order and operational records; Cloudflare hosts the site, Worker and private temporary pet-photo storage; Anthropic assists with report writing; PDFMonkey renders the PDF; Resend delivers report and service emails; Zoho supports mailbox operations. Google provides optional analytics and advertising measurement. Meta browser advertising may operate for verified US visitors unless they opt out, and otherwise only after an advertising choice. Global Privacy Control disables advertising. Pinterest, TikTok and Google advertising integrations require an advertising choice. Sending hashed email for server-side advertising measurement requires an explicit advertising choice and is disabled by Global Privacy Control. A purchaser may also provide recipient or second-person details for a gift or pair report.
Information supplied by another person
For a gift or pair report, AstraRead may receive your name, email or birth details from the purchaser rather than directly from you. The source is the purchaser, and AstraRead uses the information only to prepare, deliver and support the requested product, subject to the retention rules below. The purchaser must be authorized to provide the information and make this Privacy Policy available to you. You may contact hello@astraread.com to exercise the rights described below.
International processing
Some providers may process information outside the customer’s country. European data-protection law may require an adequacy decision or an appropriate safeguard, such as standard contractual clauses, for a particular transfer. A customer may ask hello@astraread.com which provider, location and transfer mechanism apply to their data.
Retention and deletion
Order records are retained for fulfillment, support, accounting, fraud prevention and legal obligations. Unattached pet-photo uploads expire after one day; photos attached to an order expire after 30 days. A verified deletion request can be sent to hello@astraread.com; some transaction records may need to be retained where required by law.
Cookies and consent
Essential storage supports checkout and records the privacy choice. Optional analytics is not loaded unless selected. For visitors identified as US by Cloudflare, Meta browser advertising may load until an opt-out; outside the US or when location cannot be verified, it stays off until selected. Global Privacy Control prevents advertising in every region. The footer link “Do not sell or share my info” disables advertising directly. Essential checkout references remain available to confirm payment. Privacy choices in the footer can withdraw a choice as easily as it was given. Switching to Essential only stops optional integrations on reload and removes AstraRead’s known first-party optional attribution records and cookies where the browser permits. Withdrawal does not make earlier lawful processing unlawful and does not automatically delete provider records; deletion can be requested separately.
Your requests
Depending on the law that applies, you may request access, correction, deletion, restriction or portability, or object to processing. You may withdraw consent at any time and complain to the competent data-protection authority. Where GDPR applies, AstraRead responds without undue delay and within one calendar month; any permitted extension will be explained within that month. Contact hello@astraread.com, preferably from the order email. AstraRead may request proportionate information to verify identity. Do not send full card information.