Privacy Policy
Privacy Policy
Alchemy Astrology is operated by Alchemy Works Studio LLC, which is the data controller for the personal information described here.
Effective: 6 August 2026
Last updated: 8 August 2026
Registered address: 25 SE 2nd Ave Ste 550 #3084, Miami, FL 33131, USA
Privacy contact: legal@alchemy-astrology.com
The short version
Not a substitute for the detail below, but here is the shape of it.
- To build your chart we need your date, time, and place of birth. That is the whole point of the product, and it is the most personal thing we hold.
- Your birth details, your questions, and your readings go to the AI providers who generate the text. They are not used to train anyone's models, ours or theirs.
- We do not sell your personal information, and we do not share it for advertising.
- Analytics cookies only run if you say yes. Nothing loads before you choose.
- You can get a copy of your data, correct it, or have it deleted. Write to legal@alchemy-astrology.com.
1. Who this covers
This policy applies to the Alchemy Astrology website, our mobile applications, and the emails we send. It covers people who hold accounts, people who buy a reading without an account, and visitors who only ever read the marketing pages.
2. What we collect
Things you give us
Account details. Your name, your email address, and a password, which we store only as a one-way hash and never in a form we can read. If you sign in with Google instead, we receive your name, email address, and Google account identifier from Google, and we do not receive your Google password.
Birth details. The date, time, and place of birth for each chart, plus a note of whether the birth time is unknown. From the place you type, we look up coordinates and a timezone. This is special to us in a way most personal data is not, and section 4 explains how we treat it.
Charts for other people. If you create a profile for a partner, a friend, or a family member, we hold their name and birth details too. You are responsible for being entitled to give them to us. If that person asks us to delete their details, we will, and we may do so without telling you first.
Your questions and conversations. The messages you send, the readings and reports we generate, any custom instructions you write, and the intake answers you give when ordering a report.
Preferences. Your stated goals, your level of astrological knowledge, your preferred zodiac system, how long you like answers to be, and your answer to the cookie banner, so that we do not have to ask again on your next device.
Purchases. What you bought and when, and a customer reference from our payment processor. We never see or store your full card number, which goes directly to Stripe.
Correspondence. What you write to us at our support and legal mailboxes, and whether you asked for marketing email.
Things we collect automatically
Technical and usage data. Your IP address, browser and device type, operating system, referring page, the pages you view, and the times you view them. Some of this appears in ordinary server logs, which we keep whether or not you consent to anything, because we cannot run or secure a website without them.
Analytics. If, and only if, you consent, our analytics provider records which pages you visit and which features you use. See the Cookie Policy.
Page counts. How many times each of our public pages was opened. This is counted on our own servers, and it carries no identifier, no account, and no IP address: it says that a page was opened, not who opened it, and there is nothing in it that can be traced back to you or joined up with anything else. It runs whether or not you accept analytics, because nothing about it is stored on your device or is information about a person.
Diagnostics. When something breaks, our error-tracking provider records the error, the page, and enough context to fix it, which can include your account identifier.
Email engagement. Whether an email we sent was delivered, and whether you opened it or clicked a link.
Things we do not collect
We do not collect precise device location, we do not run advertising pixels, we do not buy personal information from data brokers, and we do not record your screen or your session.
3. Why we use it, and our legal basis
If you are in the EEA or the UK, the table below is our Article 6 basis for each purpose.
| What we do | Why | Legal basis |
|---|---|---|
| Create and run your account | So you can sign in and find your readings again | Performance of a contract |
| Calculate charts and generate readings | It is the service you asked for | Performance of a contract |
| Take payment, issue receipts, handle refunds | To complete your purchase | Performance of a contract |
| Send service email: confirmations, receipts, password resets, notice that a reading is ready | You need these to use the product | Performance of a contract |
| Keep the Service secure, prevent fraud and abuse, enforce our Terms | So the Service stays usable and safe | Legitimate interests |
| Diagnose faults and fix bugs | So the Service works | Legitimate interests |
| Count how many times a page was opened | To know whether a page works at all | Legitimate interests |
| Understand which features are used, and improve them | To build the right things | Consent, through the cookie banner |
| Send marketing email | To tell you about new readings and offers | Consent, which you can withdraw at any time |
| Keep records for tax and accounting | We are required to | Legal obligation |
| Establish, exercise, or defend legal claims | To protect ourselves | Legitimate interests |
Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and you can object at any time. See section 9.
4. Sensitive information, and why astrology is a special case
We ask you to read this section rather than skip it.
Your birth date, time, and place are not, on their own, sensitive under EU or UK law. But what we build from them is different. A birth chart and the readings we write about it can be understood as revealing philosophical or spiritual beliefs, and that is a special category of personal data under Article 9 of the GDPR. Separately, the things people actually type into an astrology chat often touch on health, mental health, relationships, sexuality, religion, or family circumstances, and those are special categories too.
Our legal basis for processing this information is your explicit consent, given under Article 9(2)(a) when you create an account or buy a reading and choose to give us birth details. You can withdraw that consent at any time by deleting the relevant profile or your account, or by writing to legal@alchemy-astrology.com. Withdrawing it does not affect processing that already happened, and it will usually mean we can no longer provide the Service to you.
Please do not type sensitive information into the chat that you would not want stored. The Service does not need your diagnosis, your medication, your immigration status, or anyone's identity documents in order to read a chart, and we would rather not hold them.
Under US state privacy laws that define sensitive personal information, we treat birth details and the content of readings and chats as sensitive. We do not use them for anything other than providing the Service to you, and we do not sell or share them.
5. How AI processing works
To generate a reading, we send the astrological calculations for your chart, your question or intake answers, and relevant earlier messages in the conversation, to a third-party AI provider. We reach those providers through OpenRouter, which routes each request to the model we have selected for that task. The providers are listed on our subprocessors page.
We do not train AI models on your content, and we contract with providers on terms that prohibit them from using content we send to train or improve their models.
Humans may read your content, in limited circumstances: when you contact support about it, when we are investigating a fault, when we are reviewing the quality of generated readings, and where the law requires it. Our staff access is limited to people who need it.
No decisions with legal effect are made about you automatically. Readings are generated automatically, but they do not determine anything about your rights, your access to services, or your money. You should not use them as if they did, and section 4 of our Terms says so.
6. Who we share it with
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
We share it with service providers who process it on our behalf, under contracts that limit them to our instructions. The full list, with what each one receives and where it sits, is on our subprocessors page. In summary they cover hosting and storage, payment processing, AI generation, transactional email, analytics, error tracking, geocoding of birth places, and sign-in with Google.
We also share it:
- when the law requires it, in response to a valid legal request, after checking that the request is lawful and no broader than it has to be, and telling you where we are permitted to;
- to protect people, where we reasonably believe it is necessary to prevent serious harm or investigate fraud;
- in a business transfer, if we are acquired or merge, in which case we will tell you before your information becomes subject to a different policy;
- with your consent, for anything else.
7. Sending information outside your country
We are based in the United States and our infrastructure runs there, so if you are in the EEA, the UK, or Switzerland, your personal information is transferred to the US and to other countries where our providers operate.
For those transfers we rely on the European Commission's Standard Contractual Clauses, and the UK Addendum where the UK GDPR applies, together with additional technical and organisational measures where a provider's circumstances call for them. Where a provider is certified under the EU-US Data Privacy Framework, we may rely on that instead. You can ask us for a copy of the safeguards that apply to a particular transfer by writing to legal@alchemy-astrology.com.
8. How long we keep it
We keep personal information for as long as we need it for the purpose we collected it, and then delete it or make it unidentifiable.
| What | How long |
|---|---|
| Account, profiles, charts, chats, readings | While your account is open |
| Everything above, after you ask us to delete | Erased from our live systems within 30 days |
| Payment and tax records | As long as tax and accounting law requires, currently 7 years |
| Server and security logs | A short rolling window, then overwritten |
| Error diagnostics | Deleted on our provider's standard retention cycle |
| Analytics | Per the retention period on our subprocessors page |
| Marketing contact details | Until you unsubscribe, and then a minimal record so we do not email you again |
| Change history of records, used to investigate faults and disputes | Purged with the record it describes |
Backups are taken on a rolling cycle and overwritten in turn, so information you have deleted persists in a backup until that backup ages out. We do not restore deleted personal information from backups except to recover from a disaster, and if we do, we re-apply outstanding deletions.
9. Your rights
Everyone, wherever you live, may ask us to give you a copy of your data, correct it, delete it, or stop sending you marketing. We do not charge for this and we do not treat you differently for asking.
If you are in the EEA, the UK, or Switzerland, you have the right to: access your data; have it corrected; have it erased; restrict how we process it; object to processing based on legitimate interests, including profiling; receive it in a portable, machine-readable format; and withdraw consent at any time without affecting what came before. You also have the right to complain to your national data protection authority, and we would rather you told us first so we can put it right.
If you are in California, you have the right to know what we collect, use, and disclose; to delete it; to correct it; to receive it in a portable form; and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the past 12 months, including for anyone under 16. We honour the Global Privacy Control signal, and treat it as an opt-out request from the browser sending it. You may use an authorised agent, and we will not discriminate against you for exercising any of this.
If you are in Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, or Rhode Island, you have broadly the same rights to access, correct, delete, and obtain a portable copy, and to opt out of targeted advertising, sale, and profiling with legal or similarly significant effects, none of which we do. If we refuse a request, you may appeal, by replying to our decision, and we will respond to the appeal within the time your state allows.
If you are in Canada, Brazil, or Australia, you have rights of access and correction, and in Brazil under the LGPD also rights to deletion, portability, and information about sharing.
How to exercise any of this: write to legal@alchemy-astrology.com. We will ask for enough information to be confident it is really you, which for an account holder normally means sending the request from the address on the account. We answer within 30 days, or within 45 days where a US state law allows and the request is complex, and we will tell you if we need the extra time.
10. Children
The Service is for adults, and you must be 18 or over to use it. We do not knowingly collect personal information from anyone under 18, and we do not knowingly hold birth details that a user has entered for a child. If you believe we have, write to legal@alchemy-astrology.com and we will delete it.
11. Security
We use TLS for data in transit, encryption at rest through our hosting and storage providers, one-way hashing for passwords, access controls that limit staff to what they need, and audit logging of changes to records. No service is perfectly secure, and we cannot guarantee that ours is. If a breach affects your personal information and the law requires us to tell you, we will, without undue delay.
12. Cookies
See the Cookie Policy for what we store on your device, what runs only after you consent, and how to change your mind.
13. Changes to this policy
We will update this policy when what we do changes. If a change is material, we will tell you by email or by a prominent notice in the Service before it takes effect. The date at the top always shows when it last changed.
14. Contact us
Privacy questions, requests about your data, and anything with a legal deadline: legal@alchemy-astrology.com
General support: hello@alchemy-astrology.com
Alchemy Works Studio LLC, 25 SE 2nd Ave Ste 550 #3084, Miami, FL 33131, USA