Privacy Policy

This Privacy Policy explains how Shukraya Technologies LLC, a New York limited liability company (“Shukraya”, “we”, “us”, “our”), collects, uses, and protects information when you use Shukraya at shukraya.com and related services (the “Service”).

Shukraya is currently an invite-only alpha, and we practise data minimisation: we collect only what the Service needs to work.

1. Information we collect

Information you provide

• Account: your email address, a username or display name, and a password (which we store only as a salted hash; see the Security section below).
• Astrological profiles: information you enter to cast and save charts, including a profile name and birth details (date, time, and place of birth, including the location name, its coordinates, and time zone), plus any tags and a current location you set. You may create profiles for yourself and for other people, for example your clients.
• Communications: the waitlist email address you submit to request access, and any messages you send us, such as support or feedback.

Information collected automatically

• Technical and log data: IP address, browser or device type, timestamps, the pages and endpoints accessed, and similar server logs, used to operate, secure, and troubleshoot the Service.
• Essential cookies: a strictly necessary, httpOnly session cookie to keep you signed in, and, if you use social sign-in, a short-lived cookie for that sign-in attempt. We do not use advertising or tracking cookies. Because these cookies are strictly necessary to provide the Service, we do not display a cookie-consent banner for them.

We do not use third-party analytics, advertising networks, or behavioural tracking of any kind.

2. How we use information

• To provide the Service: authenticate you, cast and save charts, and store your profiles and settings.
• To send transactional email you request or need: password resets and waitlist invitations. We do not send marketing email.
• To secure, maintain, debug, and improve the Service.
• To respond to your requests and communications.
• To comply with law and enforce our Terms.

We do not sell or rent your personal information, and we do not use birth details for any purpose other than providing the Service to you.

3. How information is shared

We share information only with service providers (“sub-processors”) that help us run the Service, and only as needed:

• Amazon Web Services (AWS): cloud hosting, database, storage, and transactional email (Amazon SES). Data is processed and stored in the United States.
• Sentry: application error monitoring. We configure Sentry to exclude personal data from error reports: we disable default personal-data capture and additionally strip user identifiers, cookies, headers, request bodies, and query strings before events are sent.
• Google Workspace: our email service for inbound and support correspondence, for example if you email us.

We may also disclose information where required by law, to protect the rights, safety, or security of users or the Service, or in connection with a business transfer such as a merger or acquisition, in which case we will require the recipient to honour this Policy.

4. Data retention

We keep your account and profile information for as long as your account is active. If you delete a profile, it is removed from the active Service; if you close your account, we delete or anonymise your personal information within a reasonable period, except where we must keep limited records to comply with law, resolve disputes, or enforce our agreements. Backups and logs are retained for a limited time and then expire.

5. Security

We take the confidentiality of birth details seriously and use industry-standard measures, including:

• Encryption in transit (HTTPS / TLS) for all traffic to the Service.
• Encryption at rest for our database and stored data.
• Password protection using PBKDF2-HMAC-SHA256 with a unique per-user salt and a high iteration count. We never store passwords in plaintext or in any reversible form.
• Network isolation: our database is not publicly accessible and runs inside a private network, and application secrets are held in a managed secrets service.

No system is perfectly secure, but we work to protect your information and to improve our safeguards over time.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can:

• View and edit your account details and profiles directly in the app.
• Request access, correction, deletion, or a copy of your data by contacting us at privacy@shukraya.com.

We will respond within the time required by applicable law and will not discriminate against you for exercising these rights.

If you are in the European Economic Area, the United Kingdom, or a similar jurisdiction: our processing is based on performing our contract with you, our legitimate interests in operating and securing the Service, your consent where required, and compliance with law. Your data is transferred to and stored in the United States, and where required we rely on appropriate safeguards for such transfers.

7. Children

Shukraya is not directed to children and is not intended for anyone under 18. We do not knowingly collect personal information from anyone under that age. If you believe a minor has provided us information, contact us and we will delete it.

8. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated Policy.

9. Contact us

Questions or requests about this Policy or your data: email privacy@shukraya.com, Shukraya Technologies LLC.