Astrology

Privacy notice

Effective 2026-10-12. This notice covers Astrology’s website, licence account, purchases, partner enquiries and app communications. The data controller and contact details are in our legal notice. Write to hello@astrology.build for privacy requests.

What we use and why

  • Accounts, orders and licences. We use your email, billing details, payment references, licence and device records to provide your purchase, sign-in, downloads, activation and support (GDPR Article 6(1)(b), contract). Payment details are entered at Stripe; we do not store your full card number. Billing and accounting records are also processed to meet legal obligations (Article 6(1)(c)). Invoices are managed through Fattura24.
  • Partner enquiries. We use your name, email, optional organisation/website/message, partnership interest, submission time and the notice version to answer your request and discuss a potential agreement (Article 6(1)(b)). For people writing on behalf of an organisation, our basis is our legitimate interest in responding to business enquiries (Article 6(1)(f)). The request is stored in Cloudflare D1 and notified to our contact mailbox through Resend. The checkbox acknowledges this notice and requests a reply; it is not a newsletter subscription.
  • Support and voluntary app feedback. We use the message, category, app version/platform and associated licence email to answer you and resolve problems (contract, or legitimate interest for general feedback). No project files, prompts or diagnostic logs are attached automatically. Avoid sending passwords or other people’s personal data.
  • Security and service operation. Our hosting, payment and email providers process request and delivery metadata, which can include IP addresses, timestamps and browser information, to deliver and secure the service (Article 6(1)(f), legitimate interest in availability and preventing abuse). The partner database itself does not store IP addresses or browser fingerprints.

Required fields are needed to provide the requested service or meet billing duties. Optional form fields can be left blank. We do not sell personal data or use enquiries for unsolicited marketing. We do not make decisions about you with legal or similarly significant effects solely by automated processing.

Your projects and connected services

Project files, settings and local licence state are stored on your Mac. Activation sends a licence key, device identifier, app version and platform to the licence service; subsequent checks use activation credentials. Update checks contact the release service.

When you use an AI agent, Git hosting, packages or deployment services, the selected tools may send prompts, project content or build output to their providers under your configuration. These are services you choose; their own privacy terms apply. Astrology does not promise that agent or deployment operations stay offline.

Optional desktop usage metrics

From app version 0.8.6, Astrology asks whether you want to share usage metrics to help us understand adoption and improve the product. Sharing is disabled until you explicitly allow it. Our basis is your consent (GDPR Article 6(1)(a)); refusing does not affect the app, your licence or support.

We receive a fixed event name, app version, UTC month and a random installation identifier: active days, project creation/import, agent starts and outcomes, and publication attempts and outcomes. A day is counted when the app window is focused and the computer is not idle; very short or offline activity can be missed. We do not collect prompts, project contents, code, filenames, paths, project URLs, account details, licence keys or device identifiers through these metrics. We do not combine them with account, purchase or licence records.

The random installation identifier is stored locally, changes every UTC calendar month and is hashed again by our server with a secret and monthly namespace. These records are pseudonymous, not guaranteed anonymous, and measure consenting installations rather than unique people. We use our Umami analytics service at analytics.astrology.build, hosted through Vercel with a Neon database. The analytics database does not store the original installation identifier, raw IP address or original browser/device User-Agent. Hosting and network services can still process IP addresses and request metadata in their operational logs; those are separate from product analytics. No session replay, advertising attribution or project-content recording is included in this desktop collection.

You can change your choice in Environment → Preferences → Share usage metrics. Turning sharing off stops new requests, aborts pending requests and deletes the local random identifier. It does not delete records already received, which expire under our daily 90-day retention job. Turning it back on creates a new random identifier. No offline event history is queued for later transmission. Withdrawing consent does not affect processing already performed on that consent.

Providers and international transfers

We use Cloudflare for the website, enquiries and release files; Vercel and Neon for the licence portal and database; Stripe for payments; Resend for transactional email; Google Workspace for correspondence; and Fattura24 for invoicing. Access is limited to people and providers who need it for these purposes. Stripe also processes some payment data as an independent controller, including for its regulatory and fraud-prevention duties.

Providers and their subprocessors can process data outside the European Economic Area, including in the United States. Their applicable data-processing terms provide transfer safeguards such as European Commission standard contractual clauses and, where applicable, adequacy decisions. An EU hosting region alone does not mean all processing stays in the EU. You can request information about the safeguards from us. See the data-processing information from Cloudflare, Vercel, Neon, Stripe, Resend, Google Workspace and Fattura24.

How long we keep data

  • Optional desktop usage metrics: 90 days, with daily deletion of older records. Local identifier deletion on withdrawal is described above.
  • Partner-form records: at most 12 months from the latest submission. Correspondence is kept while the discussion is active and for up to 12 months afterwards; records needed for an agreement move to the relevant contract file.
  • Former waitlist entries: at most 12 months from the latest submission, unless an ensuing relationship needs a separate record. The old form no longer accepts entries.
  • Routine support and feedback: while the matter is open and up to 24 months after closure, unless needed for a documented dispute.
  • Account, licence and active-device records: while needed to supply account access and the continuing licence. A perpetual licence is not automatically erased when its update period ends. Ask us about account closure or removing inactive device data.
  • Invoices and legally required accounting records: 10 years, or longer where a specific legal obligation or an unresolved proceeding requires it. Other data is not kept merely because an invoice must be retained.
  • Sign-in tokens expire after use or their validity period. Provider security/delivery logs follow the service’s applicable retention settings; Resend ordinarily retains email content and delivery logs for 30 days. Cookie and browser-storage durations are described separately.

Records subject to a concrete legal hold are restricted to that purpose until the hold ends. Deleting active records does not instantly erase every protected backup; backups expire through the provider’s normal retention cycle and are not used as an active contact list.

Your rights

You may request access, correction, erasure, restriction and, where applicable, data portability. You may object to processing based on legitimate interests. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. These rights have legal limits, including records we must retain for tax duties or to supply a continuing licence.

Email hello@astrology.build. We may ask for proportionate information to verify your identity; do not send identity documents unless requested. We normally respond within one month, with any lawful extension explained. You may complain to the Italian Garante per la protezione dei dati personali or the supervisory authority where you live or work.

Cookies and changes

See Cookies & browser storage for necessary account/security storage and the website’s theme preference. If our processing materially changes, we will update this notice and provide additional information or collect consent where required.