Privacy Policy

Astrix is provided by Tabely DGA SRL, registered in Romania under J16/2578/2023 with CUI 49222514 (“Tabely,” “we,” “us,” or “our”). Tabely is the controller of personal data processed for the Astrix service, except where a provider acts under its own terms.

Astrix processes the name and date of birth you enter. If you choose to provide them, we also process birth time, birthplace, timezone, saved people, journal notes, tarot history, reading conversations, and a recovery email.

Payment details are entered directly with our payment provider and are not stored by Astrix. We receive purchase identifiers, subscription status, plan, and renewal or expiry information so we can provide paid access.

• Calculate and display the readings and compatibility tools you request.
• Save and synchronize your profile, journal, people, conversations, and purchase access.
• Provide Ask Astrix responses and enforce usage allowances.
• Operate account recovery, customer support, fraud prevention, security, and service reliability.

Some app data is stored in your browser so the experience remains fast and can work before cloud services are configured. In the production service, account data may also be stored with Supabase under a private user identifier and row-level access controls.

You can use some free calculations without signing in; that data stays in this browser and is not a cloud account. Cloud sync, purchases, and account features require a verified email account.

We use providers only where needed to operate a feature:

• Vercel for website hosting, delivery, and operational logs.
• Supabase for authentication and cloud database services.
• xAI for Ask Astrix. The conversation and calculated context are sent only when you choose to use that feature. xAI says API inputs and outputs are not used for training without explicit permission and may be retained encrypted for up to 30 days for abuse review unless Zero Data Retention is enabled.
• Whop for hosted checkout, payment processing, subscriptions, receipts, and the customer billing portal.
• OpenStreetMap Nominatim or a compatible geocoding provider when you search for a birthplace.

These providers may process information in countries other than yours under their own privacy terms and applicable transfer safeguards.

Astrix counts page loads and tracking-link opens in aggregate without a browser identifier, cookie, raw IP address, or full user-agent string. This supports traffic totals, reliability, and abuse prevention. With your permission, we also use signed, first-party visitor, session, and campaign-source cookies to deduplicate visitors and understand completed signups, purchases, and campaign performance. We do not use cross-site advertising cookies or sell personal information.

For consented analytics, we store random visitor and session identifiers, visited page paths without query strings, referral hostname, campaign tags, country, and coarse device and browser categories. We do not store raw IP addresses or full user-agent strings in analytics. Raw navigation data is retained for up to 180 days and optional purchase analytics for up to 400 days, unless you withdraw sooner. We honor browser Do Not Track and Global Privacy Control signals for visitor identification and attribution.

You can refuse consented analytics without losing access, or withdraw permission at any time. Withdrawing removes this browser’s analytics identifiers and consented visit data, linked account attribution, and optional purchase analytics. Aggregate page-load and link-open counts cannot be linked back to you and therefore cannot be individually removed. We retain only the minimum opt-out state needed to prevent in-flight requests or later payment events from adding consented data back: a one-way visitor marker for up to 180 days and, for signed-in accounts, an account preference until explicit permission or account deletion. Explicit permission starts a new attribution from that point forward. A short-lived, HttpOnly deletion credential may remain for up to seven days only when a temporary service failure requires an anonymous deletion retry.

Withdrawal does not delete essential account, entitlement, security, or payment records that we still need to provide the service or meet legal obligations. Those records are not used for campaign attribution after withdrawal.

We retain cloud account data while your account is active or as needed to deliver the service, resolve disputes, meet legal obligations, and prevent abuse. You can delete your Astrix account and associated app data from More → Account & Data. Subscription cancellation is separate: cancel in the billing portal first, then delete after recurring access ends, or contact support to have recurring access terminated sooner.

Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal information, or object to certain processing. You may also complain to your local data-protection authority. Contact us to exercise a right; we may need to verify your account first.

Astrix is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can remove it.

Tabely DGA SRL
Str. Bucovăț nr. 93, Craiova, Dolj 200663, Romania
Reg. Com. J16/2578/2023 · CUI 49222514
privacy@astrixtheapp.com · +40 752 010 745