Subprocessors
Subprocessors
Alchemy Astrology is operated by Alchemy Works Studio LLC.
Last updated: 6 August 2026
Contact: legal@alchemy-astrology.com
To run Alchemy Astrology we rely on other companies. This page lists every one of them that handles personal information on our behalf, what they get, and what they do with it. It is referenced by our Privacy Policy, and it lives on its own page because vendors change more often than policies do.
Each of these companies processes personal information only on our instructions, under a written contract that includes the confidentiality and security terms the GDPR requires. Where a provider processes personal information outside the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, with the UK Addendum where the UK GDPR applies, or on the EU-US Data Privacy Framework where that provider is certified under it. You can ask us which applies to a particular provider by writing to legal@alchemy-astrology.com.
Running the service
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Heroku (Salesforce) | Application hosting, the main database, and the job queue. Everything the product stores lives here. | All account data, birth details, charts, chats, readings, and purchase records | United States |
| Cloudflare | Content delivery, DNS, bot protection, image hosting, file storage for generated PDFs, and inbound email routing | IP addresses and request metadata for every visitor; generated PDF reports; email sent to our mailboxes | Global edge network, with storage in the United States |
Generating readings
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| OpenRouter | Routes each AI request to the model we have chosen for that task | Chart calculations, your question or intake answers, and relevant earlier messages in the conversation | United States |
| Anthropic | Generates readings, reports, and chat responses, reached through OpenRouter | As above | United States |
| OpenAI | Generates shorter supporting text, reached through OpenRouter | As above | United States |
We do not send your name or email address to any AI provider, and none of these providers is permitted to use what we send to train or improve their models.
Payments
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Stripe | Takes payment, stores your card on your instruction, handles refunds and disputes, and hosts the checkout page you are sent to | Your name, email address, card details, billing address, and purchase history. Card numbers go to Stripe directly and never reach us | United States and Ireland |
Talking to you
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Resend | Sends confirmations, receipts, password resets, notices that a reading is ready, and marketing email if you asked for it | Your name, email address, message content, and whether the message was delivered, opened, or clicked | United States |
Finding your birthplace
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Geoapify | Turns the place name you type into coordinates and a timezone | The place name only. Never your name, your account, or the date it relates to | Germany (EU) |
| Google Maps Platform | The same, as a fallback when Geoapify cannot resolve a place | The place name only | United States |
Signing in
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Sign in with Google, if you choose it instead of a password | Confirms your identity to us and returns your name, email address, and Google account identifier. We never receive your Google password | United States |
Understanding how the service is used
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| PostHog | Product analytics: which pages are viewed, which features are used. Runs only if you accept analytics cookies | Pages viewed, features used, browser and device type, IP address, and your account identifier | United States |
| Sentry | Error tracking, so we find out when something breaks | The error, the page it happened on, browser and device type, and your account identifier | United States |
Not on this list
Replicate generates the artwork used in reports and on the site. It is given prompts we write, never anything belonging to a user, so it processes no personal information.
Slack receives an operational digest of aggregate counts. It contains no personal information.
We use no advertising networks, no data brokers, and no session recording.
Changes
We will update this page when a provider is added, removed, or replaced. If you would like to be told when that happens, write to legal@alchemy-astrology.com and we will add you to the notification list.