Legal

Privacy Policy

Last updated: June 2026

This Privacy Policy explains how AstroNest collects, uses, and protects your personal information.

1. About AstroNest

AstroNest is operated by OneDot Links Inc., a Canadian corporation based in Ontario, Canada. This Privacy Policy is governed by the laws of Ontario and the federal laws of Canada applicable therein, including the Personal Information Protection and Electronic Documents Act (PIPEDA). AstroNest is intended for users aged 18 and older; we do not knowingly collect personal information from anyone under 18.

2. What data we collect

We collect the data you provide directly: email address, name, date of birth, time of birth, and place of birth. We also collect usage data such as session activity and forecast history. We do not collect payment card details directly. You may create charts for family members and others. By doing so, you confirm you have their permission to share their birth information with AstroNest.

3. Guest readings (no account required)

If you use AstroNest without creating an account, your birth data and reading are not stored on our servers. We record only an anonymous usage count, derived from a hashed technical identifier, to enforce the free reading limit. This data contains no personal information and cannot be linked back to you.

4. How we use your data

Your birth data is used exclusively to generate astrological chart calculations and forecasts. Your email is used for account management and, where you have consented, service communications. We do not sell your personal data to third parties.

5. Legal basis for processing

We process your personal information on the following legal bases. Contract performance: to provide astrological readings and account services you have requested. Legitimate interests: to improve the accuracy of our engine and protect against misuse. Consent: for optional features such as outcome learning and marketing communications. Legal obligation: to retain payment records as required by Canadian tax law.

6. Data retention

Account and profile data: retained until you delete your account. Reading history: retained until you delete your account or request erasure. Guest usage records: retained for 90 days from your last visit, then automatically deleted. Payment records: retained for 7 years as required by Canadian tax law. Consent records: retained for the duration of your account plus 2 years. Contact messages: retained for 24 months from receipt, then automatically deleted. Weekly memory summaries: deleted when you withdraw memory-synthesis consent or delete your account.

7. Third-party processors

AstroNest relies on the following third-party processors to operate the service. Supabase (database and authentication hosting): Your data is stored in Canada (Montreal, ca-central-1) via Supabase. Canada has been recognized by the European Commission as providing adequate privacy protections, covering users in the UK and EU. For users in India, data is processed under Canadian privacy law (PIPEDA). Stripe, Inc. (payment processing, United States): handles subscription and one-time payments; AstroNest does not store your card details. OpenAI (United States): the data needed to generate your reading is sent to OpenAI, which produces the readable text of your reading; this data is not used to train its models. Anthropic (United States): used for quality review and, where you have consented, to process your reading content — your questions and the generated answers — into optional weekly summaries that personalize your future guidance by recalling the themes and timing relevant to you across sessions. International transfers to United States processors are made under appropriate contractual safeguards; this includes the memory-summary processing described above. Your reading content is not used to train Anthropic’s models, only the content needed is sent, and withdrawing consent deletes the summaries already generated. You can opt out of memory summaries in your privacy settings.

8. Your rights

Under applicable data protection law, you have the right to access, correct, delete, port, and restrict processing of your personal data. You may also withdraw consent at any time where processing is based on consent.

9. Security

We implement industry-standard technical and organisational measures to protect your data. Data is encrypted in transit and at rest. Access to personal data is restricted to authorised personnel.

10. Cookies and tracking

We use only functional cookies necessary for session management. We do not use advertising cookies or third-party tracking scripts.

11. Contact

For privacy inquiries or to exercise your data rights, contact our Data Protection Contact at privacy@astro-nest.com. We will respond within 30 days. Data Protection Contact: OneDot Links Inc. Email: privacy@astro-nest.com. For users in India (DPDP Act 2023): Grievance Officer: OneDot Links Inc. Contact: privacy@astro-nest.com. Response time: 30 days.

Document version 2.

OneDot Links Inc., Ontario, Canada