Privacy Policy

Astrollo ("Astrollo", "we", "us", or "our") operates the website and AI-assisted astrology platform available at astrollo.net (the "Service"). The Service provides birth (natal) charts computed with high-precision astronomical ephemerides, AI-generated interpretations and an AI chat, daily and personal horoscopes, compatibility and synastry analysis, transit forecasts, Vedic charts, numerology, child charts, and the in-browser "Matriz del Destino" tool.

This policy describes what personal data we process, why and on what legal basis, with whom we share it, how long we keep it, and the rights available to you. It applies to all visitors and account holders of astrollo.net. Some features of the Service - such as user accounts, the AI chat, and payments - are being rolled out progressively; where a section describes account, birth, or payment data, it applies only when and to the extent you use a feature that requires that data.

Astrollo is identified to you by its brand name and by the contact email support@astrollo.net. For matters relating to your personal data, that email is your single point of contact.

To keep this policy clear, we use the following plain-language terms, which align with international data-protection law:

• Personal data - any information relating to an identified or identifiable individual, such as a name, email address, or birth details.
• Processing - any operation performed on personal data, including collecting, storing, using, sharing, or deleting it.
• Controller - the party that decides why and how personal data is processed. For the Service, that is Astrollo.
• Processor - a third party that processes personal data on our behalf and under our instructions (for example, a hosting or payment provider).
• Data subject - the individual to whom personal data relates; in most cases, that is you.
• Cookies - small text files placed on your device that help the Service function, remember preferences, secure connections, or measure usage.

We only process your personal data where we have a valid legal basis to do so. Depending on the activity, we rely on one or more of the following:

• Consent - where you have given us clear permission, for example to enable non-essential analytics cookies or to receive optional communications. You may withdraw consent at any time.
• Performance of a contract - where processing is necessary to provide a feature you have requested or to deliver a subscription you have purchased, including creating your account and computing your charts.
• Legitimate interests - where processing serves our reasonable interests, such as keeping the Service secure, preventing abuse and fraud, and improving features and reliability, provided these interests are not overridden by your rights and freedoms.
• Legal obligation - where we must process data to comply with applicable law, such as keeping certain transaction records or responding to lawful requests.

(a) Data you provide. When you use features that require it, you may provide: your name and email address (when you create an account); your date, time, and place of birth (when you request a chart that requires them, in order to compute it); optional diary entries; messages you send to the AI chat; and messages you send to support. If you use the child-chart feature, a parent or guardian may provide a child's birth data. The Matriz del Destino tool runs entirely in your browser - the birth date you enter there is processed locally on your device and is not sent to our servers.

(b) Data we collect automatically. When you access the Service, we and our infrastructure providers automatically collect certain technical data, including your IP address, device and browser information (user agent), cookies and similar identifiers, approximate location derived from your IP address, your timezone, and usage data about how you interact with the Service. This data supports security, performance, and basic functionality.

(c) Payment data. If you purchase a subscription, your card details are entered into and handled directly by a third-party, PCI-DSS-compliant payment processor. Astrollo never receives or stores your full card number. We retain only transaction metadata such as the amount, currency, status, and date, which we need to manage your subscription and keep records.

We use personal data only for the purposes described below:

• To compute birth, Vedic, child, and related charts from the birth data you provide.
• To generate AI interpretations and respond to your messages in the AI chat.
• To deliver horoscopes, transits, compatibility analysis, and other personalized forecasts.
• To create and manage your account and process your subscription, renewals, and cancellations.
• To send you service notifications, such as confirmations, security alerts, and account messages.
• To provide customer support and respond to your inquiries.
• To improve, develop, and secure the Service, including troubleshooting, analytics, and abuse prevention.
• To comply with applicable legal obligations.

Important note on AI-generated content. Interpretations, horoscopes, and AI-chat responses are produced by automated large language models and are provided for personal insight, reflection, and entertainment. They are not professional advice and should not be relied upon as a substitute for qualified medical, psychological, legal, financial, or other professional guidance. To generate the output you request, the relevant inputs - such as the birth details you submit or the messages you send to the chat - are transmitted to third-party AI providers, as described in the sharing section below.

We do not sell your personal data. We share data only with the service providers (processors) needed to operate the Service, under data-processing agreements that require them to protect your data and use it only as instructed. These providers include:

• A content delivery and security network (Cloudflare), which routes and protects traffic and processes connection data and security/performance cookies.
• A web analytics provider (Google Analytics), where analytics is enabled, to understand aggregate usage.
• AI model providers, reached through an API aggregator, to which the relevant inputs (such as birth details or your chat messages) are sent solely to generate the interpretation or response you requested.
• Google Maps Platform, used to convert a birth city you enter into geographic coordinates (geocoding).
• A third-party payment processor, which handles card data directly to process subscription payments.
• A transactional email provider, used to deliver account and service emails.

We may also disclose data where required to comply with applicable law or to protect the rights, safety, and security of our users and the Service.

Astrollo serves users in multiple regions, and the providers that support the Service may operate in different countries. As a result, your personal data may be processed outside your country of residence - for example, when AI interpretations are generated or when content is served through a global network.

Where data is transferred across borders, we rely on appropriate safeguards recognized under applicable law, such as standard contractual clauses, adequacy decisions, or equivalent mechanisms, to ensure your data continues to receive a comparable level of protection wherever it is processed.

We keep personal data only for as long as necessary for the purposes described in this policy. Account-related data is generally retained for the lifetime of your account and for a short period afterward - typically around 30 days following deletion - to allow for recovery, dispute resolution, and to complete deletion across our systems. Certain records, such as transaction metadata, may be kept longer where required to meet legal or accounting obligations.

We apply technical and organizational measures designed to protect your data, including encryption of data in transit (TLS), hashing of account passwords, restricted access on a need-to-know basis, and ongoing monitoring of our systems. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

The Service is intended for adults who have reached the age of majority in their jurisdiction. It is not directed to children, and we do not knowingly create accounts for or market the Service to minors.

The child-chart feature is designed to be used by a responsible parent or legal guardian, who provides the child's birth data in order to compute a chart on the child's behalf. By submitting a child's birth data, you confirm that you have the authority to do so. If you believe a child's data has been provided to us without proper authority, please contact support@astrollo.net so we can address it.

We use cookies and similar technologies to operate and secure the Service, remember your preferences, and - where enabled with your consent - measure usage. Some cookies are strictly necessary for the Service to function, while others are optional and depend on your choices.

For a full description of the cookies we use and how to manage them, please see our Cookie Policy.

Depending on where you live, you have rights over your personal data. Under the GDPR, you may request access to your data; rectification of inaccurate data; erasure (the right to be forgotten); restriction of processing; data portability; and you may object to certain processing or withdraw consent at any time without affecting prior processing. Under Brazil's LGPD, you have comparable rights, including confirmation, access, correction, anonymization or deletion, portability, and information about data sharing. Under Mexico's LFPDPPP, you have ARCO rights - Access, Rectification, Cancellation, and Opposition.

To exercise any of these rights, follow the steps below. We will respond within the timeframe required by applicable law and may need to verify your identity before acting on a request.

1. 1

   Send your request

   Email support@astrollo.net and tell us which right you wish to exercise.

2. 2

   Identify yourself

   Include enough information for us to locate your data and confirm your identity, so we can protect against unauthorized requests.

3. 3

   Receive our response

   We will review and respond within the period required by the law applicable to you, taking the requested action or explaining any lawful reason we cannot.

You also have the right to lodge a complaint with a competent supervisory or data-protection authority in your country or region if you believe your data has not been handled in accordance with the law.

We maintain procedures to detect, assess, and respond to personal data breaches. If a breach occurs that is likely to affect your rights, we will assess the incident and notify affected users and the relevant authorities as required by applicable law, within the legally mandated timeframe, and take steps to limit and remedy any impact.

We may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or legal requirements. When we do, we will revise the "last updated" date shown at the top of this page. Where a change is significant and the law requires it, we will provide additional notice. We encourage you to review this policy periodically.

If you have questions, requests, or concerns about this Privacy Policy or how your personal data is handled, please contact us. We are here to help and will respond as promptly as we reasonably can.

Email: support@astrollo.net