Privacy Policy

Effective date: October 14, 2026 · Version 2.1.1

1. Who we are

1.1. Inner Space 1 LLC ("Inner Space," "we," "us," or "our") is a limited liability company registered in Georgia, identification code 445650251, with its legal address at Georgia, Ajara, Batumi, Selim Khimshiashvili 17, 6004. Inner Space 1 LLC is the controller of the personal data described in this Policy.

1.2. We operate the website en.innerspacebot.com and the web application app-en.innerspacebot.com (installable as a Progressive Web App), together referred to as the Service. The Service generates personalized astrology reports — Western astrology, Jyotish, BaZi and Human Design — along with forecasts, compatibility reports, and a chat feature about your report. Report and chat text is generated with the help of an AI language model.

1.3. This Privacy Policy explains what personal data we collect through the Service, why we collect it, who we share it with, how long we keep it, and the rights you have over it. We process personal data in accordance with the Law of Georgia on Personal Data Protection and, where it applies to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

2. Scope of this Policy

2.1. This Policy covers personal data processed through the Service. It does not cover third-party websites or services you may reach through links from the Service; those have their own privacy practices.

2.2. A separate Terms of Service governs your use of the Service, including payment terms and acceptable use. This Policy addresses privacy and data protection specifically; where the two documents both touch on data handling, this Policy controls.

2.3. By using the Service, you acknowledge that you have read this Policy.

3. Information we collect

3.1. Account information. Email address, the name you enter, and a password (we store only a hashed version of your password, never the plain text).

3.2. Google sign-in. If you choose to sign in with Google, we receive your Google account identifier, email address, and name from Google.

3.3. Birth data. Date, time and place of birth (city and country, which we convert to geographic coordinates and a time zone for the calculation), and gender.

3.4. Compatibility products. If you order a compatibility report, the same birth data about another person, entered by you. See Section 4.

3.5. Chat. The questions you type into the chat about your report, and the Service's answers.

3.6. Generated reports. The report, forecast, or compatibility text the Service produces for you.

3.7. Reviews and feedback. A rating, text you write, and an optional screenshot, if you choose to leave a review.

3.8. Technical information. Your IP address and browser user-agent, recorded when you accept our terms (this forms a consent log); device type, operating system, browser, and visit times, recorded by the app's own visit counter (which does not store IP addresses); and server logs.

3.9. Orders and payments. The product ordered, amount, date, payment status, and order identifier. We never receive your card number — payment is handled entirely by the payment processor named at checkout.

3.10. Current location. Optionally, the city where you are now, which you may enter for daily forecasts and the day score; we convert it to coordinates and a time zone.

3.11. Notifications. If you turn on push notifications, your browser's push subscription endpoint and your notification preference, so we can deliver the daily notice you asked for.

3.12. No third-party tracking. We do not use third-party analytics or advertising trackers on this Service. Cookies and local storage are limited to what is described in Section 6.

3.13. Shared compatibility readings. If someone saves a compatibility reading you sent them, a record that it is saved in their account. If you save a reading that someone sent you, the same record in your account. See Section 4.

4. Other people, and sharing a compatibility reading

4.1. If you order a compatibility report, you provide the birth data (date, time, place of birth, and gender) of another person. By submitting that data, you confirm that you have the right to provide it to us.

4.2. We use that data to generate the compatibility report you requested and, in the one case described in 4.7, to fill in that person's own birth details. We use it for nothing else, and we handle it under the same protections described in this Policy.

4.3. Sending a reading to the other person. After you buy a compatibility reading, you can send it to the other person by link, using the option in the app to send the reading to your partner. It is your decision alone: we never send the reading or the link to anyone ourselves.

4.4. Who can open the link. The link is not tied to an account or an email address. Anyone who has it can read the reading and download it as a PDF for 30 days from the moment the link is created, so send it only to the person you mean.

4.5. What the link shows. The reading and its PDF do not show your name, your email address, or your birth details (date, time and place of birth). The text of the reading itself is about both of you, though, and describes your chart as well as the other person's.

4.6. Saving a reading. In the app, a person who opens the link can save the reading to their own Inner Space account. Only the first person who does so can; after that, nobody else can save it while that person keeps their account. If they delete their account, the next person to open the link while it still works can save the reading. There is no chat about a saved reading.

4.7. Birth details of the person who saves. If the account that saves the reading has no birth details yet, we fill them in with the birth details you entered about the other person for the compatibility reading, and that person can change them. Once filled in, these details belong to that account and stay there even if you later delete the reading or your account. Whoever saves the reading receives these details this way, whoever they are, so keep the link to yourself and the person you mean.

4.8. How long a saved reading stays. A saved reading stays in the other person's account only while it exists in yours. If you delete the reading or your account, it disappears from theirs too. If you are the person who saved a reading, you can remove it from your account at any time — the option is in the reading itself (see also Sections 9.9 and 11.4).

4.9. A link cannot be withdrawn. Once a link has been sent, you cannot take it back. The only way to cancel it before it expires is to delete the reading (the option is in the reading itself) or your account; either way, any saved copy is removed too (4.8). Deleting the reading cannot undo a PDF or text that someone has already downloaded or copied.

4.10. Nothing goes to Anthropic. Sharing, opening, downloading or saving a reading does not generate any new text, so nothing new is sent to Anthropic because of it.

5. How we use information, and our legal bases

5.1. We use personal data to:

5.2. These legal bases are those provided for by Article 5(1) of the Law of Georgia on Personal Data Protection — subparagraphs (b) (contract), (c) and (d) (processing provided for by law or necessary for our statutory duties), (i) (legitimate interests) and (a) (consent) — and, where the GDPR applies, by GDPR Art. 6(1)(b) (contract), Art. 6(1)(c) (legal obligation), Art. 6(1)(f) (legitimate interests) and Art. 6(1)(a) (consent).

5.3. Today, we send only service-related emails (account, order, and delivery notices) — see Section 14. We do not currently send marketing email.

5.4. Special categories of data. We do not ask for health, religious, ethnic, political, or sexual-life data. A warning next to the chat input tells you not to type identifying details or such data. If you include them in a chat question anyway, we process them only to answer that question, and they are erased on the same schedule as other chat content (Section 9).

6. Cookies, local storage, and Do Not Track

6.1. We use cookies only for your login session and for saved preferences such as language. We use browser local storage for small per-device flags (such as "don't show this intro again") and for a randomly generated, anonymous visit identifier that lets our own visit counter recognize a returning device, described in Section 3.8; it is not linked to your account or any other personal data.

6.2. We do not use third-party analytics, advertising, or cross-site tracking cookies on this Service.

6.3. Do Not Track. We do not respond to browser Do Not Track signals. We are not able to respond to them in any meaningful way because, as stated above, we do not track users across third-party sites — there is no cross-site tracking for a Do Not Track signal to turn off.

7. Who we share information with

7.1. We share personal data only with the recipients below. Service providers that help us run the Service (our processors) receive only what their function needs. The last item is a person you choose yourself:

7.2. Inner Space 1 LLC itself is established in Georgia, and our staff may access data from Georgia to operate the Service.

7.3. We do not sell or share personal information with third parties for their own advertising purposes, and we do not use any advertising trackers on this Service.

8. International data transfers

8.1. Your data is stored on our hosting provider's servers in Amsterdam, Netherlands (EU). The controller, Inner Space 1 LLC, is established in Georgia. Georgia is not currently covered by an adequacy decision of the European Commission; where the GDPR applies to you, it applies directly to our processing of your data, wherever we access it from.

8.2. Transfers to Anthropic PBC (United States). The United States is not among the countries recognised as ensuring an adequate level of personal data protection under the Law of Georgia on Personal Data Protection, and no other safeguard recognised under that Law — such as a transfer agreement authorised by the State Audit Office of Georgia — covers this transfer. Under Article 37(2)(d) of that Law, we therefore transfer your data to Anthropic only on the basis of your written consent, given in electronic form when you create your account — or, if your account was created before this consent was introduced, on a confirmation screen shown before the Service next sends your data to Anthropic: the consent box you tick lists the data sent to Anthropic, names the United States as its destination and informs you, before you tick it, that the United States does not provide the same level of data protection as Georgia or the EU and that no such safeguard covers the transfer. Until you give this consent, we send nothing about you to Anthropic, and features that need the AI model stay unavailable. We record your consent in the consent log, together with the version of the consent text you accepted (Section 9.6). For users in the EEA and the UK, the transfer is in addition covered by Standard Contractual Clauses incorporated into our agreement with Anthropic under its Data Processing Addendum; we rely on these contractual safeguards for transfers from the EEA/UK.

8.3. Withdrawing your consent to the transfer. You may withdraw this consent at any time by deleting your account in the app's account settings (Section 11) or by writing to [email protected]. Every report, forecast, compatibility report, daily text and chat answer is written with Anthropic's model, so the Service cannot work without this transfer: withdrawing your consent means closing your account, and we will delete it as described in Section 11. Withdrawal does not affect transfers made before it.

8.4. Transfers to Brevo SAS stay within the European Union (France). Transfers to Google LLC occur only if you choose Google sign-in.

9. Data retention

9.1. Chat messages — the text is erased automatically no later than 90 days after you send it. A service marker recording that a question was asked is kept without its content, so we can track usage. You can also ask us to erase a chat thread earlier, as described in Section 10.

9.2. Support correspondence — kept up to 12 months.

9.3. Technical logs — kept up to 6 months.

9.4. Visit statistics — kept up to 400 days.

9.5. Reports, birth data, and order history — kept until you delete your account. If you delete a single report, its text is erased at once (copies in our encrypted backups are removed as those backups rotate out, Section 11.2); the order record (which report, when, and the birth details it was ordered with) stays with your order history until you delete your account.

9.6. Consent log (date of acceptance, IP address, browser, and the version of the consent text and documents you accepted) — kept while your account exists and afterwards, tied to the anonymized account record, for as long as we may need to evidence your acceptance of the terms.

9.7. Notification subscriptions — until you turn notifications off or delete your account.

9.8. Payment records — kept as long as required by applicable tax and accounting law.

9.9. Shared compatibility readings — a link works for 30 days from the moment it is created. A reading saved to another person's account stays there until that person deletes it, or until the sender's reading or account is deleted, whichever comes first (Section 4).

10. Your rights

10.1. Everyone. Wherever you are, you can view and change your account details and birth data in the app's account settings at any time. You may also ask us to give you access to your personal data, correct it, or delete it, and you may raise a complaint with us at the contact in Section 16.

10.2. Under the Law of Georgia on Personal Data Protection, you have the right to be informed about the processing of your data (Article 13); to access your data and obtain a copy (Article 14); to have it corrected, updated or completed (Article 15); to have its processing terminated, or to have it erased or destroyed (Article 16); to have it blocked (Article 17); to receive the data you provided to us in a structured, commonly used and machine-readable format, or to have it transmitted to another controller (Article 18); not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects for you (Article 19; we do not make such decisions); and to withdraw your consent at any time where processing is based on consent (Article 20). You may lodge a complaint with the Georgian supervisory authority for personal data protection — since 2 March 2026, the State Audit Office of Georgia, which took over the functions of the former Personal Data Protection Service — or apply to a court (Article 22).

10.3. EEA and UK users. Under GDPR (and UK GDPR), you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on our legitimate interests, and the right to withdraw consent at any time where processing is based on consent. You may also lodge a complaint with the data protection supervisory authority in your country — in the United Kingdom, the Information Commissioner's Office (ICO).

10.4. California residents. You have the right to know what personal information we collect, to delete it, to correct it, and to be free from discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising, so there is no sale or sharing to opt out of.

10.5. We respond to requests without undue delay and within the time limits set by the law that applies to your request: under the Law of Georgia on Personal Data Protection, within 10 working days (Articles 13 to 16 and 20) — for a request for information or access, this period may be extended in special cases by up to 10 more working days, in which case we will tell you (Articles 13(2) and 14(3)) — and, for a request to block your data, with a decision within 3 working days (Article 17(5)); under GDPR, within one month. We may need to verify your identity before acting on a request.

11. Deleting your account

11.1. The "Delete account" option in the app's account settings erases your personal data in a single transaction: account details, birth and location data, reports (including any compatibility readings you saved from other people), chat, day scores, reviews, sign-in links and notification subscriptions. The account record itself remains only as an anonymized tombstone, so that your email address can be re-registered later if you choose; the consent log entry and payment records stay attached to that anonymized record as legal evidence (see Section 9).

11.2. Copies held in our encrypted backups are removed as those backups rotate out on their normal schedule.

11.3. You can also request deletion by writing to [email protected].

11.4. If you sent a compatibility reading to someone who saved it, deleting that reading or your account removes it from their account too (Section 4.8).

12. Security and incident notification

12.1. We protect personal data with TLS encryption in transit, access controls, hashed passwords, encrypted backups, and the 90-day automatic purge of chat content described in Section 9.

12.2. If a security incident affects your personal data, we will notify the competent authorities and affected users as required by applicable law — under the Law of Georgia on Personal Data Protection, the supervisory authority within 72 hours of identifying the incident unless it is unlikely to cause significant harm (Article 29), and affected users without undue delay where the incident is likely to cause significant harm (Article 30), and, where GDPR applies, as required by Articles 33 and 34 of the GDPR.

13. Children

13.1. The Service is intended for adults 18 years of age and older. We do not knowingly collect personal data from anyone under 18.

13.2. If we learn that we have collected personal data from someone under 18, we will delete it.

14. Email communications

14.1. We currently send only service-related email: account verification, password reset, and order and delivery notices. If we ever need to notify you of an important change to the Service itself — for example, a change in how a report is delivered — we will send that notice by email as well.

14.2. If we ever send commercial or marketing email, we will do so only with your consent, and every such message will identify our postal address and include a working unsubscribe mechanism, which we will honor within 7 working days, as required by Article 12(4) of the Law of Georgia on Personal Data Protection and consistent with the GDPR, the EU ePrivacy rules and the US CAN-SPAM Act where they apply.

15. Changes to this Policy

15.1. We may update this Policy from time to time. When we do, we will publish the new version here with a new effective date.

15.2. For material changes, we will notify you by email or through an in-app notice.

16. Contact

Data controller: Inner Space 1 LLC
Identification code: 445650251
Legal address: Georgia, Ajara, Batumi, Selim Khimshiashvili 17, 6004
Privacy and support email: [email protected]
Website: en.innerspacebot.com