☿ LEGAL
PRIVACY POLICY
Last updated: September 24, 2026
This policy explains what personal information Electional collects when you use electional.io and its API, how we use and share it, how long we keep it, and the choices and rights you have. By using the service you acknowledge this policy.
1. Who we are
Electional ("we", "us") operates electional.io, which calculates astrological charts, transits and timing windows. For privacy questions or requests, email privacy@electional.io.
2. Information we collect
Information you give us
- Account details: your email address, a hash of your password (never the password itself), your credit balance and plan, and your referral details if you joined through a referral link. We may ask you to confirm your email address.
- Birth data and chart inputs: birth date, time, place and time zone, and the settings you choose.
- Details about other people:some tools accept another person's birth details and a label, such as a second chart for compatibility or joint timing, or a child's chart in the natal reading's child mode.
- Things you type: life events and their labels in the Timeline tool, and a sentence describing a goal you want to time.
- Email sign-ups: if you ask us to email you results or updates, your email, the page you came from and when you signed up.
- Payments:Stripe handles card details. We keep Stripe's customer and payment references, what you bought, the amount charged and your subscription status.
- Messages: anything you send us, such as a privacy request.
Information we collect when you use the service
- Saved reports and settings: when you are signed in, many results are saved to your account automatically, together with the request that produced them (which includes birth data). Some forms also remember your last-used settings, and you can save chart presets.
- Report jobs: longer reports run as background jobs that hold your request until the job finishes.
- Network and device data: your IP address and browser user-agent, for example when you sign up, and your IP address to count free uses for visitors who are not signed in.
- Usage data: pages viewed and product events. If our analytics tools are not loaded, your browser holds a small queue of events and sends them to us.
- Email engagement: onboarding emails contain a tracking image and tracked links, so we can tell when an email is opened or a link is clicked.
- Cookies and similar technologies: see section 9.
- Logs: error reports and server logs.
3. How we use information
- To provide and operate the service: calculate your results, run your account, credits and purchases, save and share reports, and look up places.
- To write AI summaries and match your goals to timing intents.
- To maintain and improve the service, including debugging, testing and developing new features.
- To create aggregated or de-identified information, which we may use for analytics, research, product development and marketing. We do not try to re-identify de-identified information.
- To communicate with you: sign-in links, confirmations, report notices, service messages and, as described in section 7, product and marketing email.
- To measure and improve our marketing and advertising, subject to your choices in section 8.
- For security and to prevent fraud and abuse, including bot checks, breached-password screening and free-use limits.
- To comply with the law, enforce our Terms and protect our rights and the rights of others.
4. Who we share information with
We share personal information with the service providers below, who process it for us to provide their services, and as otherwise described in this policy.
| Category | Who | What they receive |
|---|---|---|
| Hosting and infrastructure | Our server, database and deployment providers | Everything we store or process, so the service can run. |
| Payments | Stripe | Your account reference, what you are buying and, for subscriptions, your email. You enter card details on Stripe's own page; we never receive them. |
| AI writing | Z.ai (GLM models), with Google (Gemini API) as an automatic backup | Prompts built from your chart data so the model can write a plain-English summary. Depending on the feature, a prompt can include the place name you entered, time zone, age or birth date, and chart findings. |
| AI classification and quality screening | OpenRouter (TypeSafe Jev), when enabled | Text that we first redact to strip birth details, email addresses and names (our redaction is designed to remove them), plus astrological details: your goal sentence for goal matching, and AI-written summaries for an honesty check. |
| Place lookup | OpenStreetMap Nominatim | The place name you type, sent from our server, to turn it into coordinates. |
| Bot protection | Cloudflare Turnstile, when enabled | A challenge token and your IP address at sign-up and email sign-in. Your browser also loads Cloudflare's widget. |
| Password safety | Have I Been Pwned (Pwned Passwords) | When you choose a password, only the first 5 characters of its SHA-1 hash, never the password itself, to check it against known breaches. |
| Email delivery | Our email (SMTP) provider | Your email address and the content of the emails we send you. |
| Analytics | Google Analytics 4 and PostHog, each when enabled | Page views and named product events from your browser, such as starting or finishing a tool. |
| Advertising measurement | Meta (Meta Pixel and Conversions API), when enabled and permitted by your choices | Browser events from the pixel and its cookies. From our server: a hashed (SHA-256) email, IP address, browser user-agent and Meta's browser cookies, at events such as sign-up, a Daily Elections run, starting checkout and a purchase. |
| Error monitoring | An error-collection service, when enabled | Error messages, a short stack trace and related context. |
| People you share with | Anyone who has a share link you created | The report you chose to share. |
Share links. Links you choose to create show the report you share, and anyone with the link can view it until you revoke it or it expires. A shared report can include personal details from that report, such as birth dates or times and chart labels, so share only what you are comfortable sharing.
Legal and safety. We may disclose information when we believe it is required by law or legal process, or needed to protect the rights, property or safety of Electional, our users or others, including to prevent fraud and abuse.
Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our assets, personal information may be transferred as part of that transaction, including during due diligence.
With your direction. We share information when you ask us to, for example through an API key you create.
5. How long we keep information
We keep personal information for as long as we need it for the purposes in this policy, or as required or permitted by law. Some specific periods:
- Account details, saved reports, presets and settings: until you delete them or your account is deleted.
- Report job records: deleted automatically 30 days after the job finishes or fails.
- Share links: new links stop working 90 days after they are created or renewed; links created before we introduced expiry work until revoked.
- Free-use counters keyed to an IP address or account: deleted automatically 14 days after last use.
- Sign-in links expire after 15 minutes, email confirmation links after 24 hours and password-reset links after 1 hour.
- Email sign-ups and consent records that are not linked to an account: kept until you ask us to delete them.
- Some records can outlive an account, for example security and audit records and usage events, and we may keep other records where we need them for legal, tax, security or accounting reasons. Aggregated or de-identified information may be kept indefinitely.
- Backups and server logs may hold copies of information for a period after it is deleted from the live service.
6. Your choices and rights
- Your content: you can delete saved reports from your saved reports, edit or delete presets, revoke API keys, revoke share links and change your password.
- Access, copy, correction and deletion: email privacy@electional.io to ask for a copy of your data, a correction, or deletion of your account. We may need to verify your identity first. If you have an active subscription, cancel it before we delete the account.
- Advertising: see section 8, including the Do Not Sell or Share control.
- Cookies: you can block or delete cookies in your browser. Sign-in and referral credit may stop working if you do.
Depending on where you live, you may also have the right to object to or restrict certain processing, to withdraw consent at any time (without affecting earlier processing), to data portability, and to complain to your local data protection authority. California residents may request to know, delete and correct personal information and to opt out of sale or sharing, and we will not discriminate against you for exercising these rights. You can use an authorized agent where the law allows. We respond within the time the law requires.
7. Email
We send service emails you need, such as sign-in links, email confirmations, password resets and report notices. Account holders may also receive a short series of onboarding emails about using Electional; each one has a one-click unsubscribe link.
Product-update emails go only to people who tick the optional product-updates box (at sign-up or on an email sign-up form) and then confirm by clicking the link we email them. You can unsubscribe at any time.
8. Advertising, sale and sharing
We do not sell personal information for money. When enabled, we use the Meta Pixel and the Meta Conversions API to measure our advertising. Under some US state laws, including California's, this may count as "sharing" for cross-context behavioral advertising or as a "sale".
- EU, EEA, UK and Switzerland: Meta advertising tracking stays off until you accept it in our banner, and nothing you did before accepting is sent to Meta afterwards. Declining is as easy as accepting, and every tool works the same either way. If we cannot tell where you are, we treat you the same way.
- Everywhere else: Meta advertising tracking is on by default. You can opt out at any time with our Do Not Sell or Share My Personal Information control.
- Global Privacy Control: if your browser sends a Global Privacy Control signal, we treat it as an opt-out of sale and sharing for that browser.
Your choice is stored in a cookie in your browser, and it applies to both the pixel and the events our server sends to Meta. If you clear your cookies or use another browser or device, make your choice again.
9. Cookies and similar technologies
- Sign-in session cookie: keeps you signed in.
- Referral cookie: remembers a referral code for up to 30 days, until you sign up.
- Experiment cookie: keeps the homepage design you see consistent, for up to 90 days.
- Advertising-choice cookie: remembers your advertising choice for up to 1 year.
- Analytics and advertising cookies from Google Analytics, PostHog and Meta, when those tools are enabled and, for Meta, permitted by your choice.
- Cloudflare Turnstile, for bot checks at sign-up and sign-in, when enabled.
- Browser storage for short-lived form and checkout state, and a small queue of analytics events.
10. Legal bases (EU, EEA, UK and Switzerland)
- Contract: to provide the service you ask for, run your account and process purchases.
- Legitimate interests: to secure the service and prevent fraud and abuse, enforce free limits, understand and improve the service through analytics, create aggregated or de-identified information, send onboarding emails to account holders, and protect our rights. We balance these interests against your rights, and you can object.
- Consent: for Meta advertising tracking and for product-update emails. You can withdraw consent at any time.
- Legal obligation: for example, keeping purchase records for tax purposes.
Our providers may process information in the United States and other countries whose data protection laws may differ from yours. Where the law requires it, we rely on recognized transfer safeguards, such as standard contractual clauses.
11. Children and other people's information
Electional is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has given us personal information, contact us and we will delete it.
Some tools let you enter details about other people, such as a partner's chart or your child's chart in natal child mode. Only enter someone else's details if you have the right to do so.
12. Security
We use safeguards such as hashed passwords, hashed sign-in, reset and API tokens, short-lived single-use links, signing out other sessions when a password changes, and screening new passwords against known breaches. No system is perfectly secure, and we cannot guarantee the security of information.
13. Changes to this policy
We may update this policy. We will post the new version here and change the "Last updated" date, and where the law requires it we will give additional notice or ask for consent.
14. Contact
For privacy questions or requests, email privacy@electional.io.