Privacy Policy
Effective June 29, 2026
1. Information We Collect
Account information. When you create an account, we collect your email address and a unique user identifier, managed by our authentication provider Clerk.
Birth data. To generate your chart, we collect and store the name, date, time, and location you provide for each chart. You may create charts for yourself or others. You are responsible for having appropriate consent before submitting another person’s birth data.
Payment information. Payments are processed by Stripe. We never see or store your card number or full payment details. We receive from Stripe a customer ID and purchase or subscription records to determine your entitlements.
Usage data. We store the AI-generated readings associated with your account so they can be retrieved without regenerating them. We may log basic request metadata (timestamps, error rates) for operational purposes.
2. How We Use Your Information
We use the information we collect to:
- Compute and display astrological charts and readings
- Manage your account
- Determine your entitlement to generate readings based on your purchases
- Respond to support requests
- Improve the reliability and quality of the Service
We do not sell your personal information to third parties. We do not use your birth data or readings for advertising.
3. Third-Party Services
Xodiac uses the following third-party services to operate:
- Clerk — authentication and user management. Clerk processes your email and manages session tokens.
- Stripe — payment processing. Stripe’s privacy policy governs how your payment data is handled.
- AI reading provider — we send anonymized chart data to an AI model to generate readings. Chart data sent includes planetary positions and house placements; it does not include your name or account identifiers.
4. Data Retention
We retain your account and birth data for as long as your account is active. You may delete a chart at any time from the app; associated readings are removed with it. If you close your account, contact us and we will delete your data within 30 days, except where retention is required by law or for fraud prevention.
5. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), access controls, and managed database hosting. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have rights to access, correct, or delete the personal data we hold about you. To exercise any of these rights, contact us at hello@xodiac.co. We will respond within 30 days.
7. Children
Xodiac is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date. Your continued use of the Service after changes take effect constitutes acceptance.
9. Contact
Questions or concerns about this policy? Email us at hello@xodiac.co.