Privacy Notice
Last updated: 21 October 2026
Who we are
Astro-Atasophy (atasophy.org) is run by Daniel Ehrlich, who is responsible for your personal data ("the controller"). Contact: [email protected], 740 4th St N PMB 704, St Petersburg, FL 33701, United States.
What we collect
- Your account: your name, email address and a password (stored only as a one-way hash), and the date you confirmed you are 18 or over.
- The people a report is about (including you): name, birth date, birth time, how exact that time is, birth place (with its map coordinates) and pronouns. For someone other than you, also an email address, used only to ask for their consent.
- Your orders: which reports you ordered, any discount code, and payment status. Card details go straight to our payment processor; we never see or store them.
- Your reports: the finished report and its PDF.
- If you arrive through an affiliate's link: which link you used and the day you used it, so the affiliate can be credited if you buy. To count each visitor once per day, we keep a scrambled (one-way hashed) form of your connection details for no more than two days. After that only the daily total remains. We never store your IP address.
- If you apply to be an affiliate: your name, email address, country, where you plan to share your link, and your application answers. Once you are approved, we also keep your link, your code, the sales credited to you and your commission. Your identity, bank and tax details go to Stripe, never to us.
We do not use analytics or advertising, and we do not track you across other websites.
Why we use it
To compute a birth chart, write the report you ordered, deliver it to you, and — where a report is about another person — ask that person for consent first. We use your email to send you account and order messages only. If you arrive through an affiliate's link or use an affiliate's code, we use that to credit and pay the affiliate who referred you. We never show an affiliate your name, your email, your reports or anything about the people in them. Affiliates see only totals: how many visits, how many sales, and how much commission.
How we protect it
- Birth data and the details of the people in your reports are encrypted inside our database, with a key kept separately from it.
- Birth data is never written to logs and never placed in web addresses.
- All connections are encrypted (HTTPS).
- Only the system that writes your report, and your own account, can read the birth data.
Who else handles it (our processors)
| Processor | What for | What it receives | Where |
|---|---|---|---|
| Hetzner | Hosting our server | The encrypted database and the application | Germany |
| Cloudflare | Network protection, the bot check on our forms, and encrypted file storage | Web traffic; the encrypted report files | Files stored in the EU; the network is worldwide |
| Stripe | Payments, and paying our affiliates | Your email and the order; your card details (which we never see). For affiliates: the identity, bank and tax details they give Stripe directly to receive payouts. Stripe processes affiliates' data as described in the Stripe Privacy Policy. | Mainly the United States |
| Postmark | Sending email | Your email address and the message; for a report about someone else, their email address and the consent request | United States |
| Anthropic | Writing the report | Chart data: planetary positions, never names or free text. Exact chart data can be traced back to a birth date and time, so we treat it as personal data too. Under its commercial terms, Anthropic may not train its models on it. | Not limited to one country; covered by its data-processing terms |
Each of these companies processes your data only on our instructions, under a data-processing agreement. Where data leaves the EU or UK, those agreements use the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents).
How long Anthropic keeps chart data: Anthropic deletes the chart data it receives within 30 days. In either case, Anthropic may keep a request longer if its systems flag it for a breach of its usage policies.
How long Postmark keeps email: the content and details of each email for 45 days, then they are removed. If an email can't be delivered, or someone unsubscribes or reports it as spam, Postmark keeps that address on a do-not-send list so it isn't emailed again.
How long we keep it
- While your account exists: your account, the people you added, and your reports.
- When someone declines consent, doesn't answer within 14 days, or can't be reached: their details are erased at once, and you are refunded.
- When you delete your account: your account, the people you added, their birth data, your reports and stored PDFs are erased within 30 days.
- Backups are encrypted and kept for 30 days, so an erasure is complete in backups once they roll off.
- Payment records are kept by Stripe for as long as tax law requires; they contain no birth data.
- Affiliate visit records: the hashed connection details for at most two days; the link and day, without them, for as long as the affiliate's commission records are kept.
- Affiliate accounts: while the affiliate takes part, and afterwards as long as tax and accounting law requires for commission paid. A declined application is deleted after 90 days.
Your rights
You can ask to see the data we hold about you, correct it, have it erased, or receive a copy. During the beta, email [email protected] and we will act within 30 days. If you are in the EU or UK you may also complain to your data-protection authority.
Cookies
We use the cookies the site needs to work: one that keeps you signed in, and one that remembers you have entered the beta.
We use one optional cookie, and only when you arrive through an affiliate's link. It records which link brought you, so the affiliate is credited if you buy within 90 days. It lasts 90 days, and a newer affiliate link replaces it. It is used only on this site and holds no personal details. If you are in the EU or UK, we ask first, and set it only if you agree. Your answer is remembered for 12 months in a second small cookie. Declining changes nothing else, and any discount code still works.
We use no advertising, analytics or cross-site tracking cookies.
Age
The site is for adults. You must be 18 or over to create an account or order a report.
Changes
If we change this notice we will update the date above, and tell account holders by email of any significant change.