Privacy Policy
Effective Date: November 26, 2025
Last updated: October 5, 2026
This Privacy Policy describes how Cosmitra LLC ("Cosmitra," "we," "us," or "our") collects, uses, and discloses your information when you use our website, mobile application, and related services (collectively, the "Service").
Confirm Your Consent
To continue using Cosmitra you must accept our latest Terms & Conditions and the Entertainment Disclaimer (version 2024-12-02). Please review the policies linked above before proceeding.
Acceptance applies to both the Terms & Conditions and the Entertainment Disclaimer.
1. Information We Collect
We collect information directly from you when you use the Service, as well as automatically when you access the Service.
A. Information You Provide Directly
This information is essential for calculating your personalized charts and providing accurate Vedic guidance.
- Registration Data: Name, email address, password.
- Astrological Data (Sensitive): Date of Birth, Time of Birth, and Place of Birth.
- Chat Content: Messages, questions, and responses exchanged with the Service (AI chat).
- Payment Information: If you subscribe to Cosmitra Unlimited, your payment details (credit card number, billing address) are collected and processed by our third-party payment processor, Stripe. We do not store full credit card numbers.
B. Information Collected Automatically
- Usage Data: Details of your access to and use of the Service, including traffic data, logs, access times, and how you interact with content.
- Device and Connection Information: IP address, operating system, browser type, and mobile device identifiers.
2. How We Use Your Information
We use the information we collect for the following business purposes:
- Service Delivery: To calculate personalized Vedic astrology charts, generate reports, and provide tailored guidance and responses through the chat interface.
- Account Management: To manage your account, process subscription payments, and communicate with you regarding your service or policy updates.
- Service Improvement: To analyze usage trends, monitor and improve the performance of our AI guidance algorithms, and develop new features.
- Marketing and Communications: To send you promotional materials about new services or features, if you have opted in.
- Security and Compliance: To detect, prevent, and respond to fraud, abuse, and other unlawful activities, and to comply with legal obligations.
3. Sharing and Disclosure of Your Information
We do not sell your personal information. We do not use your data to train AI models. We may share your information with the following parties:
- Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, data hosting (cloud services), analytics, and email delivery. These providers are obligated to protect your data. Section 4 lists each one.
- Legal Compliance: If required by law, court order, or governmental request, we may disclose your information.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred to the acquiring entity.
4. Who processes your data
We use a small number of service providers to run Cosmitra. Each one receives the data it needs to do its job for us. Here is who they are, what they receive, and why.
Vercel (website hosting and Vercel Web Analytics)
What they receive: Every request to our site and servers, including your IP address, browser and device type, the pages you visit, and the data our servers handle for you (such as chat messages and birth details) while they process it. Vercel also tells us your approximate location (country, region and city), which we use to show local prices.
Why: Hosts the Cosmitra website and app servers, and gives us simple counts of page visits.
Google Firebase (sign-in, database, notifications)
What they receive: Your account details (name, email, sign-in method), birth details, chart, chat history and settings. If you turn on push notifications, a device token.
Why: Signs you in (Firebase Authentication), stores your account data (Cloud Firestore), and delivers notifications you asked for (Firebase Cloud Messaging).
Render (astrology engine hosting)
What they receive: Birth date, time and place, and the name on the chart, for you and for anyone you add, for example for a compatibility reading.
Why: Hosts the astrology engine that calculates your chart and dashas.
OpenAI (AI answers)
What they receive: Your question and recent messages, short summaries of earlier conversations, your name, birth details and chart data, and anything else you share to get a reading, such as life events, your occupation, your mood, or the name and birth details of someone you add for a compatibility reading. If you use voice input, your voice recording.
Why: Writes AI answers, readings and reports, and turns voice into text. We use OpenAI's API, not the consumer ChatGPT app.
Mapbox (place search)
What they receive: The place name you type when you enter a birthplace, and your IP address (the search runs from your browser).
Why: Finds the place and its map coordinates so your chart is accurate.
Stripe (payments)
What they receive: Your email, Cosmitra account ID, country, the plan you buy, and your payment details. On checkout pages Stripe also collects device information to prevent fraud. Card numbers go directly to Stripe and are not stored by Cosmitra.
Why: Processes payments, subscriptions and refunds.
Twilio SendGrid (email delivery)
What they receive: Your email address, name, and the content of the emails we send you, such as forecasts and account notices.
Why: Delivers Cosmitra emails.
Microsoft 365 (email delivery)
What they receive: Your email address and the content of the email.
Why: Sends some account emails, such as email verification and password reset.
PostHog (product analytics)
What they receive: Pages you visit (web addresses with personal details such as birth data and questions removed), buttons you click, and actions such as signing up or sending a chat message, linked to your account ID, plan, country and sign-up date. It may also record sessions: a replay of how a page was used. Replays hide everything you type into fields, and the text of chat conversations (signed-in chat, guest chat and Astro Guide) and of the guest birth-details summary. Other text shown on screen, such as details on your profile or chart pages, can appear in a replay. The contents and headers of network requests are never recorded. We do not attach your email address or birth details to your analytics profile.
Why: Shows us which features help people and where things break, so we can improve Cosmitra.
HeyCatch (product analytics)
What they receive: Pages you visit, buttons you click, and key actions such as signing up, linked to your account ID, plan, subscription status, country and sign-up date. On personal pages such as chat and birth details, the text of what you click is removed before it is sent. HeyCatch only runs on our live website, and it does not load at all if you turned analytics off.
Why: Shows us how people use Cosmitra and which links and campaigns bring them here.
Google Analytics (website analytics)
What they receive: Pages you visit, how you arrived, device and browser type, and approximate location, using cookies.
Why: Measures website traffic.
Google AdSense and Google Ad Manager (advertising)
What they receive: Our pages load Google's advertising code, which can set cookies and receive your IP address and browser details.
Why: Supports advertising on Cosmitra. Where Google ads are shown, Google uses this data to serve and measure them.
Sentry (error reports)
What they receive: Technical details when something goes wrong (the error, the page, your browser and device type), and performance timings for a small sample of page loads.
Why: Helps us find and fix crashes and bugs.
YouTube (embedded videos)
What they receive: Only if you press play on an embedded video: your IP address and viewing activity. We use YouTube's privacy-enhanced mode, and the video does not load until you press play.
Why: Plays videos shown on our pages.
We update this list when we add or remove a provider.
5. Analytics choices
Analytics help us see which pages and features people use, so we can fix problems and improve Cosmitra. PostHog, HeyCatch and Google Analytics store an identifier in cookies or your browser's local storage so they can recognize repeat visits.
You can turn usage analytics off at any time with the switch below, or with "Share usage analytics" in Settings if you have an account. Turning it off stops PostHog, HeyCatch, Google Analytics and Vercel Web Analytics from recording your activity in this browser. Once analytics are off, PostHog is not started and HeyCatch is not loaded at all on your next page visits, so they send nothing and set no cookies, and if they are already running they stop sending events. Google Analytics and Vercel Web Analytics code may still load, but it sends no usage events. When you are signed in and your account is set up, turning analytics off is also saved to your account and applied on your other devices shortly after you sign in there.
Share usage analytics
On. Analytics help us improve Cosmitra.
Separately from these analytics tools, Cosmitra keeps basic records of when you use your account (session start, length, page and country). We use them to run and secure your account, and the switch does not turn them off.
This switch does not change advertising cookies set by Google, or the storage Cosmitra needs to keep you signed in and process payments. To manage Google ad personalization, visit myadcenter.google.com. You can also block or clear cookies in your browser settings.
6. Data Retention and Security
Data Retention: We retain your account and Astrological Data for as long as your account remains active. If you delete your account, we will delete your personal data, though we may retain anonymized or aggregated data for analytical purposes.
Security: We implement technical and organizational measures to protect your personal information against unauthorized access, use, alteration, or destruction. However, no method of transmission over the Internet is 100% secure.
7. Your Rights and Choices
Depending on your location, you may have the right to:
- Access/Review: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data (e.g., correcting a mistake in your Time of Birth).
- Deletion: Request that we delete your personal data.
- Opt-Out of Marketing: Opt-out of receiving promotional emails from us at any time via the unsubscribe link in the email.
- Opt-Out of Analytics: Turn off usage analytics at any time (see section 5).
To exercise these rights, please contact us at the email address provided below.
8. Children's Privacy
The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18 without parental consent, we will take steps to delete that information promptly.
9. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: