Privacy Policy

Northstar is operated by [PLACEHOLDER: legal entity name and address]. This policy explains what personal data we process, why, and your rights under the GDPR.

What we collect

• Email address — collected by Stripe at checkout, used to create your account, deliver your purchase confirmation, and let you recover access to your readings.
• Birth details — name, birth date, birth time (if known), and birthplace for the two people in a reading. This is the data your reading is calculated from. If you enter another person's details, please make sure you may share them with us.
• Generated readings — the calculated charts and interpretation text, stored so you can return to them.
• Session cookie — a single HTTP-only cookie that keeps you signed in on this browser. No advertising or tracking cookies.

Who processes it for us

• Stripe — payment processing (we never see card numbers).
• Railway — hosting and database.
• OpenAI — birth chart data (names, placements) is sent to generate the interpretation text.
• Resend — transactional email delivery.
• OpenStreetMap Nominatim — birthplace names are sent to resolve coordinates.

Retention and deletion

We keep your readings so you can return to them. You can request deletion of your account and all associated data at any time by emailing [PLACEHOLDER: contact email]. Payment records are retained as required by tax law.

Your rights

Under the GDPR you may request access, correction, deletion, restriction, and portability of your data, and lodge a complaint with your supervisory authority. Contact: [PLACEHOLDER: contact email].