Privacy Policy

This Privacy Policy ("Policy") describes how Gravity Astrology LLC, a Georgia limited liability company ("Gravity Astrology," "Company," "We," "Us," or "Our"), collects, uses, discloses, and protects your personal information when you use the Gravity Astrology website at gravityastrology.com, the Gravity Astrology mobile application, and all related services (collectively, the "Services").

By creating an account or using the Services, you acknowledge that you have read and understood this Policy and consent to the collection, use, and disclosure of your personal information as described herein. If you do not agree with this Policy, please do not use the Services.

This Policy is incorporated into and forms part of our Terms and Conditions. Capitalized terms not defined herein have the meanings set forth in the Terms and Conditions.

This Policy was last updated on March 24, 2026.

We collect the following categories of personal information:

A. Information You Provide Directly

Account Registration Information: • Full name (first and last name) • Mobile phone number • Email address (optional) • Gender • Date of birth • Time of birth • City of birth (place of birth) • Profile photo (optional)

Consultation Information: • Questions asked during consultations • Birth chart data and astrological details you provide • Chat transcripts from text-based consultations • Voice recordings from AI voice consultations (see Section 5 of our Terms & Conditions regarding recording consent) • Preferences for consultation modes and AI tier selections

Payment Information: • Wallet transaction history (top-ups, deductions, withdrawals) • Stripe payment token (we do not store your full credit/debit card number — payment processing is handled entirely by Stripe, Inc.)

Support & Communications: • Support ticket content and attachments • Emails and messages you send to us • Reviews and feedback on AI consultation sessions • Referral program activity

B. Information Collected Automatically

• IP address• Device type, operating system, and browser type• Unique device identifiers• App version (for mobile application)• Pages visited, features used, and time spent on the Platform• Consultation session metadata (start time, end time, duration, AI tier selected, consultation type)• Referring URLs and landing pages• Cookie and similar technology data (see Section 7)

C. Information from Third-Party Services

• Firebase Authentication: Phone number verification status, Firebase user ID• Stripe: Payment confirmation status, transaction IDs (no card details)• Agora: Session quality metrics for live support communication• OpenAI: AI consultation response data (for AI Astrologer sessions)• Google Places API: Geocoding data for birth city location (latitude, longitude, timezone)

D. UTM and Acquisition Data

• Marketing attribution data: UTM source, medium, campaign, content, and term parameters• Referrer URL and initial landing page• Referral code (if you were referred by another customer)

Certain information we collect may be considered sensitive personal information under applicable privacy laws, including:

• **Date and time of birth** — used exclusively for generating astrological charts and readings• **Place of birth** — used exclusively for geographic calculation of astrological charts• **Astrological consultation content** — the substance of your readings and predictions

We collect this sensitive personal information solely for the purpose of providing astrology consultation services as requested by you. We do not use sensitive personal information for any purpose other than providing and improving the Services, and we do not sell or share this information for advertising or marketing purposes.

You may request deletion of your sensitive personal information at any time as described in Section 9.

We use the personal information we collect for the following purposes:

Service Delivery: • Providing AI astrology consultations (chat and voice) • Processing wallet transactions and payments • Generating astrological charts and birth data calculations • Delivering AI Astrologer responses based on your birth data and questions • Managing your account and preferences

Service Improvement: • Analyzing usage patterns to improve Platform features and performance • Training and improving AI Astrologer models using anonymized or aggregated consultation data • Conducting quality assurance on consultations • Resolving disputes with the Platform

Communication: • Sending transactional notifications (session confirmations, billing updates, wallet alerts) • Responding to support requests • Delivering system announcements and service updates • Sending badge upgrade and rank notifications

Security & Compliance: • Preventing fraud, abuse, and unauthorized access • Enforcing our Terms and Conditions • Complying with applicable laws and legal obligations • Responding to legal process and government requests

Marketing (with your consent): • Sending promotional communications about new features or offers (you may opt out at any time) • Customer acquisition tracking and advertising campaign measurement • Referral program administration

When you use AI Astrologer services, the following data practices apply:

Data Sent to OpenAI. Your birth data (date, time, and place of birth), consultation questions, and chat messages are sent to OpenAI's API to generate AI Astrologer responses. This data is processed by OpenAI in accordance with their API data usage policies. OpenAI does not use API data to train their models.

Data Retention by AI Service. Gravity Astrology stores your AI consultation transcripts, session summaries, and metadata in our database to provide session history, prior session memory for returning customers, and service improvement.

Session Summaries. At the end of AI chat sessions, an automated summary of key topics, predictions, and remedies discussed may be generated and stored. These summaries are visible to you on your session history page.

Prior Session Memory. For returning customers, summaries from your last three (3) AI consultations may be provided to the AI system to enable contextual follow-up conversations. You may request deletion of this history at any time.

No Human Review. AI consultation transcripts are not routinely reviewed by human employees unless required for dispute resolution, support ticket investigation, or as required by law.

We do not sell your personal information to third parties. We share personal information only in the following circumstances:

AI Processing. When you initiate an AI consultation, your first name, birth data (as needed for chart generation), and consultation messages are processed by our AI systems, including third-party AI service providers (OpenAI), to generate astrological readings. This data is processed in accordance with the data practices described in Section 5.

With Service Providers. We share information with third-party service providers who assist us in operating the Platform:

• **Stripe, Inc.** — Payment processing (payment tokens, transaction data). Stripe's Privacy Policy: https://stripe.com/privacy• **Amazon Web Services (AWS)** — Cloud hosting and data storage (all data stored on the Platform)• **Firebase (Google)** — Phone authentication and user identity verification• **Agora** — Live support communication infrastructure (real-time session data)• **OpenAI** — AI Astrologer response generation (birth data, consultation messages)• **Google Places API** — Geocoding of birth city for astrological chart calculations

For Legal Compliance. We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to: (a) comply with applicable law; (b) protect the rights, property, or safety of Gravity Astrology, our users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) enforce our Terms and Conditions.

Business Transfers. In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

With Your Consent. We may share your information with third parties when you have given us explicit consent to do so.

Aggregated and De-Identified Data. We may share aggregated or de-identified data that cannot reasonably be used to identify you for analytics, research, and business purposes.

We use cookies and similar technologies to operate and improve the Platform:

Essential Cookies. Required for Platform functionality, including authentication (JWT session cookies), security, and payment processing. These cannot be disabled.

Analytics. We may use analytics tools to understand how users interact with the Platform (pages visited, features used, session duration). This data is used to improve Platform performance and user experience.

UTM Tracking. When you arrive at the Platform via an advertising link, we capture UTM parameters (source, medium, campaign) stored in your browser's localStorage. This data is sent to our server on your first login for acquisition tracking purposes.

No Third-Party Advertising Cookies. We do not use third-party advertising cookies or tracking pixels on the Platform. We do not participate in behavioral advertising networks.

Cookie Management. You can manage cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality.

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Account Data. Retained for as long as your account is active, plus twelve (12) months after account closure to facilitate account reactivation and comply with legal obligations.

Consultation Transcripts & Recordings. Retained for twenty-four (24) months after the consultation date for dispute resolution, quality assurance, and service improvement purposes. After this period, transcripts may be anonymized or deleted.

Payment & Transaction Records. Retained for seven (7) years as required by tax and financial reporting laws.

Support Tickets. Retained for twenty-four (24) months after resolution.

Marketing & Acquisition Data. Retained for thirty-six (36) months or until you request deletion.

Anonymized Data. Aggregated and de-identified data may be retained indefinitely for analytics and business purposes.

Deletion. When retention periods expire, your data will be securely deleted or anonymized. You may request earlier deletion as described in Section 9.

Depending on your state of residence, you may have the following rights regarding your personal information:

Right to Know. You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the third parties with whom we have shared it.

Right to Access. You have the right to request a copy of the personal information we hold about you in a portable, readily usable format.

Right to Delete. You have the right to request the deletion of your personal information, subject to certain exceptions (e.g., information needed for legal compliance, dispute resolution, or completing a transaction you requested).

Right to Correct. You have the right to request correction of inaccurate personal information.

Right to Opt Out of Sale/Sharing. We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.

How to Exercise Your Rights. To exercise any of these rights, contact us at: • Email: contact@gravityastrology.com • Subject line: "Privacy Rights Request"

We will verify your identity before processing your request. We will respond to your request within forty-five (45) days. If we need additional time (up to an additional 45 days), we will notify you of the reason and the extension period.

Authorized Agent. You may designate an authorized agent to submit a request on your behalf. The agent must provide written authorization signed by you, and we may require you to verify your identity directly.

If you are a California resident, you have additional rights under the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"):

Categories of Personal Information Collected. In the preceding twelve (12) months, we have collected the following categories of personal information: Identifiers (name, phone, email); Personal records (birth data); Commercial information (transaction history); Internet activity (usage data, IP address); Geolocation data (approximate location from IP); Sensory data (voice recordings from AI voice consultations); Sensitive personal information (date/time/place of birth).

Purposes for Collection. Service delivery, payment processing, service improvement, security, and communications as detailed in Section 4.

Categories of Information Sold or Shared. We have NOT sold or shared any personal information with third parties for cross-context behavioral advertising in the preceding twelve (12) months.

Categories of Information Disclosed for Business Purposes. We have disclosed personal information to service providers (Stripe, AWS, Firebase, OpenAI, Google) as described in Section 6 for business purposes.

Right to Limit Use of Sensitive Personal Information. You have the right to limit our use of your sensitive personal information to purposes necessary for providing the Services. Since we only use sensitive personal information for this purpose, no additional limitation is required.

Shine the Light. California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

Do Not Track. We do not currently respond to "Do Not Track" browser signals, as there is no industry-standard protocol for such signals. However, we do not engage in cross-site tracking.

Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others) may have similar rights to those described in Sections 9 and 10, including rights to access, delete, correct, and opt out of certain processing of personal information.

To exercise any privacy rights under your state's applicable law, please contact us at contact@gravityastrology.com. We will process your request in accordance with applicable law.

Appeals. If we deny your privacy request, you have the right to appeal our decision by emailing contact@gravityastrology.com with the subject line "Privacy Appeal." We will respond to your appeal within sixty (60) days.

The Services are not intended for individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take immediate steps to delete such information from our systems.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at contact@gravityastrology.com, and we will promptly delete the information.

We implement industry-standard security measures to protect your personal information, including:

• **Encryption in Transit:** All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS)• **Secure Authentication:** Firebase phone OTP authentication with JWT session tokens; HttpOnly, Secure, SameSite cookies• **Payment Security:** PCI-DSS compliant payment processing through Stripe — we never store your full card number• **Access Controls:** Role-based access controls limiting employee access to personal information on a need-to-know basis• **Infrastructure Security:** AWS hosting with security groups, firewalls, WAF (Web Application Firewall), and DDoS protection• **Rate Limiting:** API rate limiting to prevent abuse and unauthorized access attempts• **Input Validation:** Server-side validation (Zod schema validation) on all user inputs

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

The Services are hosted in the United States on Amazon Web Services (AWS). If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

When your consultation data is processed by AI Astrologer services, it may be transmitted to OpenAI's servers, which may be located in the United States or other jurisdictions. By using the Services, you consent to such international data transfers.

All AI consultations are processed via cloud-based services. No personal data is shared with individual astrologers, as all consultations are conducted through our AI systems.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy• Post the revised Policy on our website• Notify you via email or in-app notification for material changes

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Gravity Astrology LLC Email: contact@gravityastrology.com

For privacy-specific requests, please include "Privacy" in the subject line of your email. We will respond to all inquiries within a reasonable timeframe, and no later than the deadlines required by applicable law.