Privacy Policy

We collect the following categories of personal data:

a) Information you provide directly:

• Account data: name, email, phone, date of birth
• Profile: astrological sign, ascendant, moon sign
• Payment info processed via Stripe — never card details
• Communication data: messages during sessions
• Reviews and feedback
• Support requests

b) Information collected automatically:

• Device information
• Usage data
• IP address and approximate location
• Cookies and tracking technologies
• Firebase Analytics data: anonymized

c) Information from third parties:

• Authentication providers: Google, Apple
• Payment processor: Stripe transaction status

We use your data for these purposes:

• Service delivery: account management, sessions, payments, support
• Personalization: psychic recommendations
• Billing: session costs, credit purchases
• Communication: confirmations, receipts
• Safety and security: fraud prevention
• Improvement: analytics, bug fixes
• Legal compliance

We never use data for incompatible purposes without consent.

We process data on the following legal grounds:

• Contractual necessity: account, sessions, payments
• Legitimate interest: improve services, prevent fraud
• Consent: marketing communications, optional cookies
• Legal obligation: tax, regulatory requirements

We do not sell or rent data. We share with:

• Psychic readers: first name and session messages
• Stripe: payments (PCI DSS Level 1)
• Google Cloud / Firebase: hosting, database, EU region
• Vercel: website hosting and CDN
• Legal authorities: when required by law

All processors are contractually bound to protect your data.

We retain data for the following periods:

• Account data: while active, plus 30 days after deletion
• Session messages: 12 months
• Payment records: 7 years (UAE tax compliance)
• Support tickets: 24 months
• Analytics data: anonymized indefinitely

After retention, data is securely deleted.

We implement security measures:

• Encryption in transit: TLS 1.3
• Encryption at rest: AES-256
• Authentication: Firebase Auth, OAuth 2.0
• Access controls: role-based access
• Payment security: PCI DSS Level 1
• Session confidentiality: encrypted chats
• DDoS protection via Vercel edge network
• Regular security audits

While we implement safeguards, no method is 100% secure. Use a strong password.

You have the following rights regarding your data:

• Right of access: request a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion
• Right to restriction: limit processing
• Right to data portability
• Right to object: object to processing
• Right to withdraw consent

To exercise your rights, contact privacy@askastronow.com. We respond within 30 days.

For EU/EEA residents: You can lodge a complaint with your data protection authority.

For California residents (CCPA): Rights to know, request deletion, and opt-out apply. We do not sell personal information.

We use the following types of cookies:

• Essential cookies: required for the platform.
• Analytics cookies: Firebase Analytics, anonymized.
• Preference cookies: settings and preferences.

We use the Meta (Facebook) advertising pixel, which may set cookies and share limited activity data with Meta to measure and improve our advertising.

Manage cookies through your browser settings.

Our Platform is not intended for anyone under 18. We do not knowingly collect data from minors.

If you believe your child has created an account, contact privacy@askastronow.com.

Your data may be processed in:

• European Union: Firebase/Google Cloud (Belgium)
• United States: Stripe (payments), Vercel (hosting)
• United Arab Emirates: company operations

We ensure appropriate safeguards including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Binding corporate rules of our processors

Your sessions are strictly confidential:

• All messages over encrypted connections
• Psychics bound by confidentiality
• Session content never shared with third parties
• Psychics prohibited from contacting clients outside
• Recordings stored encrypted, auto-deleted after 30 days
• Client names partially anonymized

Financial information is handled with high security:

• Payments processed by Stripe (PCI DSS Level 1)
• We never see your full card number, CVV, or expiration
• We store: amount, date, pack purchased, Stripe reference
• Billing statement shows ASTRONOW as merchant
• Refund requests handled within 24 hours

Request complete deletion by:

• Emailing privacy@askastronow.com with subject Account Deletion Request
• Including your account email

Upon receiving your request, we will:

• Verify your identity
• Delete your account within 30 days
• Remove all personal data
• Retain anonymized transaction records as required by law (7 years)
• Send confirmation email

Account deletion is irreversible. Remaining credits forfeited.

We may update this Privacy Policy. When we make material changes, we will:

• Update the Last updated date
• Notify you by email or notice
• Seek consent where required by law

Review this policy periodically.

For questions or requests regarding your data: