Data & privacy for developers

A practical summary for teams building on Astrolinkers. The binding texts are the Terms of Service, the Privacy Policy and the Sub-processors list.

What to send — and what not to

Send	Don't send
Birth moment (ISO 8601 with offset), latitude, longitude	Names, e-mails, phone numbers, user ids from your system
Chart ids we returned	Free-text notes about a person
Place text for GET /v1/geolocation/places	Anything that identifies a person by itself

Keep the mapping "your user ↔ our chart id" in your own database. Then the data we hold cannot be linked to a person without your records.

What we store

• POST /v1/charts stores the birth moment, coordinates and the computed chart, scoped to your account (tenant). No other customer can read it; a foreign id answers 404.
• Results you create (compatibility, reports, interpretations, skill profiles, feedback) are stored the same way so you can fetch them again by id.
• Request bodies are not logged. Idempotency snapshots live 24 hours.

LLM features

LLM-backed endpoints (/v1/llm/*, POST /v1/interpretations/{natal,relationship,forecast}, use_llm_rewrite=true) are available on paid plans only. On the Free plan they answer 403 plan_feature_unavailable. When used, they send the birth moment and planet positions — never names or coordinates — to OpenRouter and the model provider it routes to.

Deleting data

# One chart and everything derived from it (compatibility, reports, interpretations, …)
curl -X DELETE https://api.astrolinkers.com/v1/charts/$CHART_ID \
  -H "Authorization: Bearer $ASTROLINKERS_API_KEY"

# Everything your account has stored — charts and all derived results
curl -X DELETE https://api.astrolinkers.com/v1/tenant/data \
  -H "Authorization: Bearer $ASTROLINKERS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"confirm": "DELETE ALL DATA"}'

When one of your end users asks you to erase their data, delete their charts. If you cannot use the API, e-mail hello@astrolinkers.com with your account e-mail and the chart ids.

Your privacy notice

You are the controller of your users' data and we are your processor. In your own privacy notice, mention that birth data is processed by Astrolinkers (hosting in the EU) and, if you use LLM features, by LLM providers via OpenRouter. A data processing agreement (DPA) is available on request at hello@astrolinkers.com.