Privacy Policy

Last updated: September 1, 2026

Astro Matchai (“Astro Matchai,” “we,” “us,” or “our”) provides personalised Vedic astrology, tarot, dream, and palmistry readings at https://astro-matchai.com. This policy explains what we collect, why we collect it, and the choices you have.

If you have questions, email the support email in Site settings.

1. Who is responsible

Astro Matchai is the controller of personal data processed through this website.

• Registered / mailing address: our registered address (add it under Admin → Site settings → Legal entity)
• Privacy contact: the support email in Site settings

2. Information we collect

Account and contact data. Email address, sign-in records, and (if you use Google sign-in) the name and email your provider shares with us.

Reading inputs you choose to provide. Depending on the product, this may include your name or nickname, birth date, birth time, birth place and coordinates, a question or intention, dream text, and a photograph of your palm. Birth time can be omitted; we then calculate a chart using local noon.

Readings we generate. The structured report (and related chart or card data) linked to your account or guest delivery email.

Payment data. We do not store full card numbers. Stripe processes checkout, cards, Apple Pay, Google Pay, and similar methods, and shares with us limited details such as payment status, last four digits where provided, billing email, and subscription identifiers.

Communications. Support messages, delivery emails, magic links, and (only if you opt in) marketing or weekly-insight emails.

Technical and security data. Approximate device and browser information, IP address (for security, fraud prevention, and Cloudflare Turnstile bot checks), and diagnostic logs.

Marketing attribution. If you arrive from an ad or campaign, we may store UTM parameters and click identifiers (for example gclid, fbclid) on your profile or order so we can understand which campaigns led to a purchase.

Cookies and similar technologies. See our Cookie Policy. Analytics and advertising pixels run only after you grant consent.

3. How we use information

We use personal data to:

• create your account, verify your email, and keep readings private to you
• calculate charts, generate readings with automated tools, and deliver them by web and email
• take payment, issue invoices/receipts via Stripe, and manage subscriptions
• prevent abuse, spam, and fraud
• send service messages (verification, magic links, reading-ready notices, purchase receipts)
• send optional marketing or weekly insights only where you have opted in, with an unsubscribe link in every such email
• measure marketing performance only where you have accepted analytics/advertising cookies
• comply with law, tax, and dispute-handling obligations

4. Legal bases (EEA/UK)

Where GDPR or UK GDPR applies, we rely on:

• Contract — to provide the reading, account, and payment you requested
• Consent — marketing emails, optional weekly insights, and non-essential cookies/pixels
• Legitimate interests — securing the service, diagnosing faults, understanding aggregated product use, and defending legal claims, balanced against your rights
• Legal obligation — tax, accounting, and responding to lawful requests

5. Palm photographs and sensitive details

Palm photos are stored in private storage and used only to prepare your palmistry reading. Access is restricted to the systems that generate the reading and to staff who need to handle support or quality review (for example if no palm is visible). Do not upload images of other people without their permission, or images of anyone under 18.

Birth data and dream or question text can feel personal. We treat it as confidential customer data, not as a public profile.

6. Automated generation (AI)

Readings are produced with the help of third-party machine-learning providers (currently OpenAI). Your relevant inputs are sent to that provider to generate the reading you requested, under a data-processing arrangement. Outputs can be incomplete or inaccurate and are for entertainment and reflection only — see our Disclaimer.

We do not use your reading inputs to train public models that we control. Our providers’ own training practices are governed by their terms and privacy notices.

7. Who we share data with

We share data only as needed:

Recipient	Role
Stripe	Payments, invoicing, subscriptions, billing portal
Email delivery provider (SendGrid)	Transactional and (if opted in) marketing email
OpenAI	Generating reading text from the inputs you submit
Hosting, storage, and CDN providers	Running and securing the website and private media
Cloudflare Turnstile	Bot protection on sign-in and similar forms
Advertising platforms (Meta, Google, TikTok)	Measurement and ads only with cookie consent

We may also disclose information if required by law, to protect rights and safety, or as part of a business transfer (with appropriate safeguards).

We do not sell your personal information for money. If a future “share” of data for cross-context advertising is enabled, it will only occur with the consent described in the Cookie Policy.

8. International transfers

We and our processors may process data in the United States and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

9. Retention

• Account and readings — kept while your account is open and for a reasonable period afterward so you can return to purchases, unless you ask us to delete them sooner and we are not required to keep a copy.
• Palm images — kept for the purpose of the reading and support/quality review, then deleted or anonymised when no longer needed.
• Payment records — kept as required for tax, accounting, and dispute handling.
• Logs and security data — kept for a limited diagnostic period unless needed for an investigation.
• Marketing consent records — kept to demonstrate compliance.

You can request deletion at the support email in Site settings. Some records (for example invoices) may need to be retained in a restricted form.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your data; to restrict or object to certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority.

California residents may also have rights under the CCPA/CPRA to know, delete, and correct personal information and to not be discriminated against for exercising those rights. We will not require you to create an account solely to make a request, but we must verify that the request comes from you.

To exercise rights, email the support email in Site settings. We may need to verify your email or purchase.

11. Children

The service is for people 18 years or older. We do not knowingly collect data from children. If you believe a minor has submitted data, contact us and we will delete it.

12. How we keep data secure

We use HTTPS, access controls, private storage for palm images, hashed identifiers for some analytics (such as unique horoscope readers), and bot protection on account forms. No method of transmission or storage is 100% secure.

13. Changes

We may update this policy. The “last updated” date will change, and material changes will be highlighted on this page or notified by email where appropriate.

14. Contact

Astro Matchai
our registered address (add it under Admin → Site settings → Legal entity)
the support email in Site settings