In short
- We do not sell your personal data for money.
- Your birth details and chat messages are used to give you your chart and Sarah's replies, which are generated with an AI provider (Google Gemini).
- This website has no tracking or advertising cookies. Our separate sales and checkout pages use Meta Pixel and UTMify to measure advertising.
- You can ask us to access, correct or delete your data, or to stop "sharing" it for advertising, by e-mailing support@astrasoul.site.
1. Introduction
AstraSoul is operated by MIDAS GROWTH LLC, a limited liability company registered in Wyoming, USA ("we", "us", "our"). MIDAS GROWTH LLC is the controller of the personal data described in this policy.
This Privacy Policy explains what personal data we collect when you use AstraSoul, why we collect it, who helps us process it and what choices you have. Please read it together with our Terms of Service and our Refund Policy.
2. Scope
This policy applies to:
- this website, astrasoul.site;
- the AstraSoul app at app-en.astrasoul.site, app-es.astrasoul.site and app-fr.astrasoul.site, including the chat with Sarah;
- our sales and checkout pages, where you buy AstraSoul products;
- customer support provided through support@astrasoul.site.
We serve people around the world, including in the United States, the European Union and European Economic Area (EU/EEA), the United Kingdom and Latin America. The Services are offered in English, Spanish and French.
3. Information we collect
3.1 Information you give us
- Account details: your e-mail address and name.
- Birth details: your date, time and place of birth, which you give us so we can calculate your Birth Chart and personalise your content.
- Chat messages: what you write to Sarah in the app.
- Support messages: what you send us when you contact support.
- Limited billing information: what you bought, when, the amount and the payment status. Payment card details are entered with our payment providers. We never receive or store full card numbers.
We do not ask for or collect photos of you.
3.2 Information collected automatically
- Technical data: IP address, approximate country, device type and browser.
- Usage and error data: for example, when you sign in, which features you use and technical errors, so we can keep the Services running.
3.3 Information from third parties
- Payment providers, resellers and marketplaces (such as Whop, Hotmart and Stripe): confirmation that a payment succeeded, failed, was refunded or was disputed, together with order details.
- Advertising and attribution partners (Meta and UTMify): measurement data from our sales and checkout pages, such as which advertisement led to a purchase.
4. Sensitive information
Your birth details are used only to calculate your chart and personalise the content you receive in AstraSoul.
Because the chat is open, what you write may reveal sensitive information, such as details about your health, religious or philosophical beliefs, or sex life. Please do not share this kind of information. If you choose to share it, we process it only to answer you, based on your explicit consent (Article 9(2)(a) of the GDPR where it applies). You can withdraw that consent at any time by e-mailing support@astrasoul.site and asking us to delete your chat history. Withdrawing consent does not affect processing that took place before.
5. How we use your information
- To provide the Services: giving you access to what you bought.
- To personalise your content: calculating your chart and generating Sarah's AI replies.
- To manage accounts and payments: creating your access, processing payments, refunds and cancellations.
- To give support: answering your questions and requests.
- To send service e-mails: purchase confirmations, access links and important notices about your account or this policy.
- To prevent fraud and abuse: detecting and stopping fraudulent payments and misuse of the Services.
- To comply with the law: meeting tax, accounting and other legal duties.
- To measure advertising: on our sales and checkout pages, understanding which advertisements lead to purchases.
- To improve the Services: using aggregated or de-identified information to fix problems and make AstraSoul better.
6. Legal bases for processing (EU/EEA and UK)
If the GDPR or the UK GDPR applies to you, we rely on these legal bases under Article 6:
- Contract: to provide the Services you bought, manage your account and payments, give support and send service e-mails.
- Legitimate interests: to prevent fraud, keep the Services secure, improve them and measure the performance of our advertising, where those interests are not overridden by your rights.
- Consent: where the law requires it, for example for advertising cookies on our sales pages. You can withdraw consent at any time.
- Legal obligation: to keep tax and accounting records and respond to lawful requests.
For any sensitive information you choose to share in the chat, we rely on your explicit consent under Article 9 (see section 4).
7. AI processing
To generate Sarah's replies and personalised content, your chat messages and birth details are sent to an AI model provider, Google (Gemini). We use this provider under its business terms. We do not use your chats to build advertising profiles.
AI-generated content is provided for entertainment and self-reflection. It is not used to make decisions that have legal or similarly significant effects on you.
8. How we share your information
We do not sell your personal data for money. We share it only as described below.
Service providers (processors) that act on our behalf:
- Payment providers, resellers and marketplaces (such as Whop, Hotmart and Stripe): to process payments, subscriptions and refunds;
- Supabase: database and authentication;
- Google: AI model (Gemini);
- Vercel: website and app hosting;
- an e-mail delivery provider: service e-mails;
- Meta Platforms: advertising measurement on our sales and checkout pages;
- UTMify: sales attribution (receives IP address, country and order data).
Legal and safety: we may disclose information when required by law, to respond to valid legal requests, or to protect the rights, safety and property of our users, the public or MIDAS GROWTH LLC.
Business transfers: if we are involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to this policy.
A current list of our sub-processors is available on request at support@astrasoul.site.
9. Your privacy rights
9.1 United States
If you live in California, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA) gives you the right to:
- know what personal information we collect, use and disclose;
- delete your personal information;
- correct inaccurate personal information;
- opt out of the sale or "sharing" of your personal information;
- limit the use of sensitive personal information.
We do not sell personal data for money. Our sales and checkout pages share limited data (for example, device identifiers and purchase events) with advertising partners for measurement, which may count as "sharing" under California law. To opt out, e-mail support@astrasoul.site with the subject "Do not share".
Residents of other US states with privacy laws, such as Virginia, Colorado, Connecticut and Utah, may have similar rights, including access, correction, deletion and opting out of targeted advertising. We honour these requests in the same way.
We will not discriminate against you for exercising your rights. We respond within 45 days, which the law allows us to extend once where necessary; we will tell you if we do.
9.2 European Union, EEA and United Kingdom
If the GDPR or the UK GDPR applies to you, you have the right to:
- access your personal data and receive a copy;
- have inaccurate data rectified;
- have your data erased;
- restrict processing;
- object to processing based on legitimate interests, including advertising measurement;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing.
You can also complain to a data protection authority, such as the CNIL in France, the Information Commissioner's Office (ICO) in the UK, or the authority where you live. We respond within one month, which may be extended where the law allows.
9.3 Latin America and other countries
Depending on where you live, local law may give you rights over your personal data, for example in Mexico, Argentina, Colombia, Chile and, where applicable, Brazil (LGPD). These usually include the right to access, correct and delete your data and to object to its processing. We honour these requests as required by the applicable law.
9.4 How to exercise your rights
E-mail support@astrasoul.site from the address linked to your account and tell us what you want to do. To protect your data, we may ask you to confirm your identity before acting on your request. An authorised agent may make a request for you where the law allows, with proof of authorisation.
10. Children
AstraSoul is not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a minor has given us personal data, contact support@astrasoul.site and we will delete it.
11. Cookies and tracking technologies
- This website (astrasoul.site): uses no tracking or advertising cookies, only what is strictly necessary for the site to work.
- The app: uses only what is strictly necessary to keep you signed in.
- Our sales and checkout pages: these are separate from this website and use Meta Pixel cookies and UTMify scripts to measure advertising and attribute sales.
Where the law requires it, we ask for your consent before using advertising cookies. You can also block or delete cookies in your browser settings and use your device's advertising settings. Blocking strictly necessary cookies may stop the app from keeping you signed in.
12. International data transfers
We and our providers process personal data in the United States and other countries, which may have different data protection rules from yours. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses and their UK equivalent.
13. Data retention
- Account and personalisation data (including birth details and chat messages): kept while your account is active. We delete or anonymise it within 90 days after you ask us to delete your account, or after 24 months without activity.
- Payment, tax and accounting records: kept for up to 7 years, as required by law.
14. Security
We use encrypted connections, access controls and limit access to personal data to those who need it. No system is completely secure, so we cannot guarantee absolute security, but we work to protect your data.
15. Third-party links and services
The Services may link to or rely on third-party websites and services, such as payment pages run by the payment provider or reseller shown at checkout (for example Whop, Hotmart or Stripe). Their own privacy policies apply to how they handle your data, and we are not responsible for their practices.
16. Changes to this policy
We may update this policy. The date at the top shows the current version. If a change is material, we will tell you by e-mail before it takes effect.
17. Contact us
MIDAS GROWTH LLC
30 N Gould St Ste R, Sheridan, WY 82801, USA
support@astrasoul.site