Privacy Policy

Effective date: October 8, 2026

Data We Collect

  • Account information: email address and display name
  • Birth chart data: birth date, time, and location
  • Chart calculations and AI-generated interpretations
  • Signup source: the campaign tags on the link you arrived from are recorded with your account under our legitimate interest in knowing which campaigns bring sign-ups, regardless of your analytics choice; OpenAI's click reference is only kept and used with your consent, as is a Google Ads click identifier
  • Product usage: the first time you reach each step of getting started — such as onboarding, your natal chart, the PathFinder+ offer, pricing, and checkout — is recorded with your account under our legitimate interest in improving sign-up, regardless of your analytics choice; it is never shared with third parties and is deleted with your account

How We Use Your Data

  • To calculate and display natal and predictive astrological charts
  • To generate AI-powered chart interpretations
  • To manage your account and authenticate your sessions

Feedback and issue reports

When you submit feedback, we store the title and description with your account so we can investigate and improve PathFinder.

Bug reports may include a bounded, redacted diagnostics snapshot. Feedback text is sent to Fireworks AI to prepare an issue draft. An authorized human reviews every draft before an approved issue is sent to the configured GitHub repository. We may send a short, non-diagnostic notification to an internal Slack channel. Do not include passwords, access tokens, payment details, or other confidential information in feedback.

Data Storage

Your data is stored in a PostgreSQL database, encrypted at rest, and hosted on a cloud provider with industry-standard security practices.

Third-Party Services

  • Resend — transactional email delivery (account confirmation, notifications)
  • Fireworks AI — powers our other AI chart interpretations and is the backup for yearly readings; chart data derived from your birth data and, if you relocate your solar return, the place you chose are sent, never your email address
  • Anthropic — generates yearly readings; chart data derived from your birth data and, if you relocate your solar return, the place you chose are sent, never your email address. Anthropic does not use them to train its models and deletes them within 30 days by default, and may keep them longer where needed to enforce its usage policy or comply with law
  • GeoNames — location search for birth place input
  • PostHog — product analytics (EU-hosted), used only with your consent
  • Plausible — cookieless analytics that we host ourselves in the Netherlands, so no data reaches a third party; used only with your consent
  • OpenAI — ad measurement for visitors who arrive from a ChatGPT ad, used only with your consent (see Advertising Measurement)
  • Google Ireland Limited — Google Ads, ad measurement for visitors who arrive from a Google ad, used only with your consent: receives the click identifier, a random event identifier, and the time, amount and currency of your first payment — never your name, email, IP address, or birth data. The web app loads no Google Ads tag, script, or cookie

Your Rights

  • Access the personal data we hold about you
  • Export your birth profiles and chart data
  • Request correction of inaccurate information through our privacy contact
  • Delete your account and all associated data permanently
  • Request a portable copy of your data (data portability)

Data Deletion

When you delete your account, all associated personal data is permanently removed from our systems. Account deletion also cancels any active paid subscription and requests deletion of your associated PostHog analytics person record.

Data Retention

  • Active accounts: data is retained indefinitely while your account is active
  • Deleted accounts: all personal data is permanently removed upon deletion; notices already delivered to OpenAI are held by OpenAI as an independent controller under its own policy; notices already delivered to Google Ads are held by Google
  • OpenAI ad click reference: deleted 30 days after capture, or earlier on withdrawal or account deletion
  • Google Ads click identifier: deleted 30 days after capture, or earlier on withdrawal or account deletion
  • Google Ads notices: we keep a record of the notices we sent (time, amount, currency, and a random event identifier, without the click identifier) so nothing is reported twice; a notice not sent within 30 days expires and is never sent

Cookies & Analytics

We do not use cookies to keep you signed in. Authentication uses Bearer tokens stored in this browser's local storage, and preferences such as theme are stored there too. With your consent — and only with your consent — we also use two EU-hosted analytics tools to understand how PathFinder is used: PostHog, which sets a cookie and a browser identifier, and Plausible, which we host ourselves in the Netherlands and which sets no cookie. If you decline, neither runs at all. Application-error telemetry is only sent to PostHog when you have opted in to analytics. The web app sets no advertising cookies or pixels. You can change your choice at any time.

Advertising Measurement

If you arrived from a ChatGPT ad and accept analytics, our server sends OpenAI a conversion notice when you sign up, start a trial, or subscribe. The notice contains OpenAI's click reference, the event type (sign-up, trial start, or subscription), the event time, a random event identifier, the address of the relevant page on our site, and, for trials and subscriptions, the plan type (monthly or annual) — never the price, your name, email, IP address, or birth data.

OpenAI Ireland Ltd receives this notice as an independent controller and also uses it under its own privacy policy to report on, deliver, and optimise ads and to improve its services. Rejecting via Privacy choices withdraws ad measurement immediately when you are signed in, otherwise at your next sign-in on this device.

If you arrived from a Google ad and accept analytics, our server sends Google Ads the click identifier Google added to the ad link (gclid, gbraid, or wbraid), a random event identifier, and the time, amount and currency of your first payment, so Google Ads can count a paid subscription from that ad — never your name, email, IP address, or birth data. No Google Ads tag, script, or cookie runs in the web app. Rejecting via Privacy choices withdraws this in the same way.

Contact

For privacy inquiries or to exercise your rights, contact us at privacy@pathfindercharts.com.

Policy Updates

We may update this policy from time to time. When we do, we will notify registered users by email and update the effective date at the top of this page.