Privacy Policy

Astrolio is the data controller for the personal data processed through this platform. For any privacy question or to exercise your rights, contact us at privacy@astrolio.com.

Account data: phone number and/or email, and authentication identifiers from Google or Apple if you sign in with them.

Profile and consultation data: display name, birth data you choose to save (date, time, place), bookings, payments, reviews, chat messages and call metadata.

Identity verification documents (astrologers only): a government-issued photo ID and a selfie, submitted when applying to become a verified astrologer or upgrading from a client account.

In the future, identity verification may instead be completed through Diia (Дія), Ukraine’s e-government identification service. In that case no document images are uploaded to or stored by Astrolio at all — the government system verifies your identity directly.

Technical data: device and browser information, IP address, and language/theme preferences.

To provide the service and perform our contract with you: registration, bookings, consultations, payments and support.

For our legitimate interests: security, fraud prevention, dispute resolution and improving the service.

With your consent, where required (for example, certain cookies).

Astrologers you book receive the data needed to deliver the consultation (e.g. the birth data you attach to a booking).

Communications: Twilio delivers our SMS one-time codes; Resend delivers transactional email; Telegram delivers bot notifications, only if you connect it yourself.

AI: OpenAI processes your AI-consultant chat messages, and — for astrologers — the identity document and selfie images, to run the automated pre-screening check before a human moderator reviews your application.

Infrastructure: Cloudflare R2 stores files (documents, avatars, chat attachments); Supabase hosts our database; LiveKit routes video-consultation calls.

Payments: WayForPay is our currently active payment gateway. Stripe, PayPal, Fondy and Monobank are integrated as alternative gateways but are not yet processing real transactions. No provider gives us your full card details.

We do not sell your personal data.

Sensitive personal data (contact details, birth data, chat content) is encrypted at rest. Conversations are not read by staff outside a dispute you raise, and such access is audit-logged.

Account and profile data (contact details, birth data, bookings, chats, preferences): kept for as long as your account is active. You can export or permanently delete this data from your dashboard at any time.

AI-consultant chat history: stored alongside your account for as long as it is active, and deleted when you delete your account — the same as your other account data.

Verification documents (photo ID and selfie) for REJECTED astrologer applications: automatically deleted 90 days after the rejection decision, unless you re-apply before then.

Verification documents for APPROVED astrologers: kept for as long as the astrologer account is active, and deleted if the account is deleted.

Payment and financial records: kept after account deletion for as long as required by accounting and legal obligations. The underlying transaction facts are retained, but the personal identifiers on them are anonymised.

Subject to applicable law (including the GDPR), you have the right to access, rectify, erase, restrict or object to processing, and to data portability. You can also withdraw consent at any time and lodge a complaint with your data protection authority.

To exercise these rights, contact privacy@astrolio.com. You can delete your account from your dashboard at any time.

We use strictly necessary cookies (for example, to remember your language and session). Any non-essential cookies are used only with your consent.

We may update this policy; the "last updated" date above reflects the latest version. Questions: privacy@astrolio.com.

Video calls use WebRTC with DTLS/SRTP encryption — the industry standard for real-time media traffic protection. The platform does not record or store audio or video from consultations. All conversations are streamed in real time and are strictly confidential. Room access tokens are generated dynamically on the server for each specific client-astrologer pair and are valid only during the scheduled session.