Privacy Policy

1. What We Collect

• Account data: Email address and first name.
• Birth data: Birth date, birth time (optional), and birth location. This is encrypted at rest using AES-256 encryption.
• Feedback and notes: Anything you share with Abi through the "Talk to Abi" feature is stored and used to personalize your future readings.
• Usage data: Pages visited and actions taken, collected via Google Analytics, used to improve the experience and reliability.
• Session data: We store an access token in your browser's session storage to keep you signed in. This is cleared when you close your browser tab or sign out.
• Payments: If you subscribe, Stripe handles card data directly. We store only your subscription status and Stripe customer identifier.

2. How We Use Data

We use your data to generate personalized astrology readings, operate your account, and provide support. Your birth data is encrypted in our database and used solely to calculate your natal chart and readings.

Notes and feedback you share with Abi are stored in your personal memory profile and used to make your readings more relevant over time. This data is processed by AI language models to generate your readings.

We do not sell your personal information to third parties.

3. Third Parties

We use trusted providers to run the service:

• Supabase for secure database storage (PostgreSQL with row-level security).
• Anthropic (Claude) for AI language generation in the reading pipeline. Your birth chart data and feedback are sent to Anthropic's API to generate personalized readings.
• Swiss Ephemeris for astronomical calculations (planetary positions, nakshatras, dashas).
• Stripe for payment processing.
• Google Analytics for anonymous usage analytics.
• Resend for transactional email delivery.

4. Data Security

Your birth data is encrypted at rest using AES-256-CBC encryption. Access is limited to systems that need it for chart calculation and reading generation. Authentication uses cryptographically random tokens. All data is transmitted over HTTPS.

5. Data Retention

We retain account and reading data for active accounts. Your reading history and memory data are kept for as long as your account is active to provide continuity in your readings. If you request deletion, we remove personal data from our systems within 30 days, except where retention is required for legal or security purposes.

6. Your Rights

You can request access, correction, deletion, or export of your personal data by contacting us. You can sign out and clear your session at any time from the reading portal. You can cancel your subscription through the Manage Subscription link in your reading portal.

7. Children's Privacy

Cosmic Abuela is for users 18 and older. We do not knowingly collect data from children under 18.

8. Changes

We may update this policy from time to time. When we do, we'll update the date at the top of this page.

9. Contact

Questions or requests? Email us at abi@cosmicabuela.com.