Privacy Policy

Account and identity data

When you register, we collect:

• Email address — used for login and communications
• Display name or full name — as you provide it at registration
• Authentication method — email/password or Google Sign-In (we receive a token from Google; we do not receive your Google password)

Astrological and birth data

This is the most sensitive data we hold, and we treat it accordingly. When you set up your birth chart or save charts for other people, we collect:

Third-party charts:ELA Map allows you to save charts for people other than yourself. When you do this, you are providing a third party's personal information. By saving a third-party chart, you confirm you have a lawful basis to do so — either their consent or a legitimate interest consistent with applicable privacy law. See our Terms of Service for your responsibilities.

Current location (city-level)

During onboarding, if you use the "Detect my location" feature, ELA Map uses your device's GPS to identify your approximate city-level location. We then save this city-level location to your account for astrocartography features.

Analytics data (PostHog)

We use PostHog to understand how ELA Map is used and to improve the product. PostHog collects pages visited, session activity, device information, and general geographic region. PostHog is used solely for product improvement — not for advertising. You can opt out at any time. See PostHog's privacy policy.

Error and diagnostic data (Sentry)

We use Sentry to detect and fix bugs. Sentry may capture error messages, stack traces, limited session context, and device information. This data is used solely for diagnosing technical issues. See Sentry's privacy policy.

Payment data

Payments are processed by Stripe, Inc. ELA Map does not receive or store your payment card number, CVV, or full billing address. We receive a payment confirmation, transaction ID, and the last four digits of the card used. See Stripe's privacy policy.

Data we do not collect

• We do not collect data from users under 18. ELA Map is for adults only.
• We do not collect or infer racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data.
• We do not build advertising profiles.
• We do not track you across third-party websites.

If you are in the European Economic Area or UK, we process your personal data under the following legal bases:

Contract performance (Article 6(1)(b)):Most of ELA Map's core processing — account management, chart storage, location features, payment processing — is necessary to deliver the service you signed up for.

Legitimate interests (Article 6(1)(f)): We use analytics and error tracking to improve ELA Map and to maintain its security. These interests are proportionate and do not override your privacy rights.

Consent (Article 6(1)(a)): Where we send optional marketing communications, we do so only with your consent. You can withdraw consent at any time.

Legal obligation (Article 6(1)(c)): We process data as required to comply with applicable law.

At launch: ELA Map does not use any AI or large language model in its current version. All chart interpretations and content are generated through static or template-based systems. No user data is sent to any third-party AI service.

Future premium reports (planned): We plan to offer enhanced PDF reports that may be generated using an LLM API. When this feature launches, we will clearly disclose which AI provider is used before any data is transmitted, you will have the opportunity to consent before processing, and only chart data relevant to your specific report will be transmitted. This policy will be updated accordingly.

We share your data only with service providers necessary to operate ELA Map. We do not sell your personal information. We do not share your data for advertising.

All subprocessors are bound by data processing agreements and must process your data only as directed by us and in accordance with applicable law. We will provide 30 days' advance notice by email before adding a new subprocessor that materially changes how your data is processed.

ELA Map is operated from the United States. If you are located in the EU, EEA, or UK, your personal data will be transferred to and processed in the United States.

We rely on Standard Contractual Clauses (EU Commission Decision 2021/914) and UK International Data Transfer Agreements for EU/UK data transfers to ensure adequate protection.

When you delete your account, we begin processing deletion within a reasonable period. Your data will be removed from active systems within 30 days and from backup systems within 90 days. Payment transaction records are retained for 7 years as required by tax law.

For all users

• Access: You can view your account data and charts within ELA Map at any time.
• Deletion: You can delete your account and all associated data at any time from your account settings, or by emailing privacy@elamap.com.
• Correction: You can update your account information and edit charts directly in the app.
• Data portability: To request an export of your personal data, email privacy@elamap.com.

For EU and UK residents (GDPR)

• Right of access (Art. 15): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate data
• Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to restriction (Art. 18): Request that we limit how we process your data
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests

To exercise any of these rights, email privacy@elamap.com. We will respond within one calendar month.

For California residents (CCPA/CPRA)

Under the California Consumer Privacy Act, California residents have the right to know, delete, correct, opt out of sale or sharing, and non-discrimination. ELA Map does not sell your personal information and does not share it for cross-context behavioral advertising.

To submit a CCPA request, email privacy@elamap.com from your account email address. We will respond within 45 days.

ELA Map is not for users under 18 years old. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will close their account and delete all associated data. If you believe a user under 18 has created an account, please contact privacy@elamap.com.

We take the security of your data seriously. Our security practices include:

• All birth data and chart data is stored encrypted at rest (AES-256)
• All data in transit is encrypted using TLS 1.2 or higher
• Access to production databases is restricted to authorized personnel only
• We conduct periodic security reviews

No system is perfectly secure. If you discover a security vulnerability, please report it to security@elamap.com. We will acknowledge your report within 24 hours.

We use cookies and similar technologies only as necessary to operate ELA Map and to collect analytics. We do not use advertising cookies or tracking pixels. See our Cookie Notice for full details and opt-out instructions.

When we make material changes to this Privacy Policy, we will notify you by email and display a notice within the app at least 30 days before the changes take effect. Your continued use of ELA Map after a policy update constitutes acceptance of the revised policy. If you do not agree, you may close your account before the changes take effect.

For privacy-related questions, requests, or concerns:

Spirit River Inc.
Email: privacy@elamap.com
Website: elamap.com

Response time: We aim to respond to all privacy inquiries within 5 business days and to fulfill access/deletion requests within one calendar month.