Version 2026-09-24-draft
Privacy Policy
Two roles
- The API. You send us your users' birth data, and we process it on your behalf.
- We do not write request bodies or query strings to our database or logs.
- Our logs hold a request id, the operation, the status, the latency and part of the key's id.
- Usage records (operation, status, latency, credits) are kept for billing and statistics. Individual events are deleted after 90 days; daily totals are kept.
- The portal. We are responsible for the account data you give us.
What the portal keeps
- Account: your name, email and company.
- Credentials:
- a hash of your password (never the password itself);
- your Google account id, if you sign in with Google;
- when you accepted the terms.
- Session cookie: one strictly necessary cookie that keeps you signed in. We store only a hash of it. There are no analytics or advertising cookies.
- Abuse limits: your IP address is used for a short time, in memory, to stop abuse. It is not stored.
We send only account email: sign-up and reset links and security notices. There is no marketing without your consent.
Who helps us
- Amazon Web Services: hosting, in Mumbai.
- Cloudflare: network and protection.
- Google: email delivery, and sign-in if you choose Google.
Your rights
You can ask to see, correct or delete your data, or raise a grievance, under the Digital Personal Data Protection Act, 2023. Write to developers@astrologics.in. A grievance officer will be named here before launch.
Security
- Passwords are hashed with scrypt.
- API keys and session ids are stored only as hashes.
- Everything travels over TLS.
Changes
New versions are posted here. We will email you about significant changes.