Privacy Policy

1. Who We Are

Telosia is an astrological tools service available at telosia.app. For privacy matters, contact us at contact@telosia.app.

2. Data We Collect

• Account data: email address, first name, last name, country, preferred language, and optionally a phone number. These are provided by you at registration.
• Birth data: name, birth date, birth time, and birth location (latitude/longitude) that you enter when creating astrological charts. This data is used solely to perform astrological calculations and generate readings.
• Technical data: IP address and browser user-agent, collected automatically for rate limiting and security purposes.
• Usage events: server-side records of key actions (account registration, login, chart creation, AI report generation). No client-side tracking scripts or analytics cookies are used.

3. How We Use Your Data

• To provide the astrological services you request (chart calculations, transit readings, AI-generated reports).
• To send transactional emails: account verification, password reset, and service notifications.
• To protect the service against abuse through rate limiting and fraud detection.
• To understand aggregate usage patterns and improve the product.

4. Third-Party Services

• OpenAI: when you request an AI-generated report or use the AI chat feature, relevant chart data is sent to OpenAI to generate the response. OpenAI's privacy policy governs that processing.
• Brevo: handles delivery of transactional emails (verification, password reset). Brevo processes your email address for this purpose.
• Cloudflare: provides CDN, hosting infrastructure, and optional bot protection (Turnstile) at registration. Cloudflare processes connection data as part of its network services.
• No advertising or analytics third parties. We do not use Google Analytics, social media pixels, or any third-party tracking tools.

5. Cookies

We use only authentication cookies (JWT tokens) necessary for you to stay logged in. No tracking or advertising cookies are used. See our Cookie Policy for full details.

6. Data Retention

• Your personal data and charts are retained for as long as your account exists.
• When you delete your account, all personal data, charts, reports, and chat history are permanently deleted.
• Anonymized usage event records may be retained for aggregate analytics even after account deletion.
• Email addresses associated with bounced or flagged emails may be retained on a blocklist to protect service integrity.

7. Your Rights

• Access and update your profile information at any time in the account settings.
• Delete your account and all associated data through the account settings page.
• Request a copy of or erasure of your personal data by contacting contact@telosia.app.

8. Security

Passwords are hashed using bcrypt and never stored in plaintext. Sensitive profile fields (name, phone) are encrypted at rest. All data is transmitted over HTTPS. Authentication tokens are stored in httpOnly cookies to mitigate XSS risks.

9. Children

Telosia is not directed to children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us data, please contact contact@telosia.app and we will delete it.

10. Changes to This Policy

We may update this policy as the service evolves. Material changes will be communicated by email or via an in-app notice. Continued use of Telosia after changes take effect constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, reach us at contact@telosia.app.