Privacy Policy
What the Asterwise API, MCP server, website and dashboard keep about you, who else sees it, and for how long. Every period below is enforced by code that runs every day.
Who we are
This service is operated by Asterwise Labs Private Limited ("Asterwise", "we", "us"), incorporated in India (CIN U62011HR2025PTC136714, GSTIN 06ABDCA8258P1Z2). This policy covers the API at api.asterwise.com, the MCP server at mcp.asterwise.com, the dashboard, asterwise.com and docs.asterwise.com.
What we keep
- Account: your email, your name, a hashed password or your Google account ID, and your API keys (stored as hashes; we show only the last four characters). If you came from a link, we also record where from: the site name (not the full address), the first page you opened, and any campaign tags.
- Usage: for each call made with an API key, the endpoint path, method, time, status code and response time. This powers your usage dashboard, your call log and billing. We do not store your IP address, browser details or request bodies with it.
- Billing: your plan, orders and subscription status. Dodo Payments, our merchant of record, takes the payment; we never see or store card numbers.
- Sign-in: session records (as hashes), and the AI apps you have connected through the MCP server.
The MCP server keeps no data of its own. It passes each tool call to the API with your key, so the records above are the only ones.
Calculation inputs
Birth dates, times, places and names you send to calculation endpoints are inputs to a calculation. We do not write them to our database or build a profile from them.
To answer a repeated request instantly, we cache the result of Vedic astrology and numerology calculations for up to 30 days (24 hours for transits and panchanga). The cache is kept separately for each account, so no other account can see or detect your results. Send the header X-No-Cache: true to skip the cache for a request. Deleting your account removes your cached results.
When you send a place name instead of coordinates, we look it up with OpenStreetMap's geocoding service. Only the place text is sent, nothing about you or your account. Results of the geocode endpoint are cached for 90 days by place name, not by account.
How we use it
- To run, secure and rate-limit the API and MCP server.
- To show your usage, call log and billing in the dashboard.
- To send account email: confirmation links, password resets, deletion codes, billing and usage notices.
- To find and fix errors.
- To understand how the website is used: page visit counts from Cloudflare Web Analytics, which uses no cookies, and Google Analytics, only if you press Allow on the cookie banner.
We do not sell personal data. We do not send your requests or personal data to AI model providers, and we do not use your inputs to train models.
Cookies and browser storage
aw_session: keeps you signed in. Set by api.asterwise.com, not readable by scripts, sent only over HTTPS. Lasts 30 days, or 1 day if you don't tick "remember me".- A short-lived cookie while you connect an AI app (10 minutes).
- Google Analytics cookies on asterwise.com, only after you press Allow on the cookie banner. Press Decline and Google Analytics never loads; if you change your mind later, its cookies are deleted.
- Google's own cookies if you use "Sign in with Google".
Change your choice at any time with Cookie settings, at the bottom of every page and in the dashboard under Your data. Signing in, the dashboard and checkout work the same either way.
The website also stores small values in your browser: your cookie choice, whether you are signed in, your email (cleared when you sign out), the last dashboard tab and a checkout in progress. Only if you allow analytics, it also keeps where you first came from (sent once when you sign up) and your account ID for analytics. For one browser tab only, it keeps the new API key shown after sign-up and the token from a link we emailed you (for example, to confirm your address).
How long we keep it
| Data | Kept for |
|---|---|
| Call log (per request) | 90 days |
| Usage history | 13 months |
| Cached calculation results | 30 days (24 hours for transits and panchanga) |
| Geocode results (not linked to you) | 90 days |
| Sign-in sessions and one-time links | Until they expire, then deleted within 7 days |
| AI app connections | Until you disconnect them; records deleted 30 days later |
| Payment notifications from Dodo | 180 days |
| Rate-limit counters with your IP address | 1 hour at most |
| Password sign-ups whose email is never confirmed (never paid, no calls in the last 30 days) | Reminder after 23 days, deleted after 30 days |
| Account, keys and usage after you delete your account | Erased 30 days after you ask |
| Orders, plans and tax invoices | 8 Indian financial years, as tax law requires |
| Server logs (kept by Railway) | Up to 30 days, then deleted by Railway |
| Error reports (kept by Sentry) | Up to 90 days, then deleted by Sentry |
Deleting your account
Delete your account from Settings in the dashboard. We email you a 6-digit code to confirm it is you.
- At once: the account locks. API keys stop working, every device is signed out, AI apps are disconnected, and a paid plan won't renew.
- For 30 days: you can undo it from the email we send, or by signing in.
- After 30 days: we erase your account, keys, usage, call log, sessions and cached results. If you ever paid, your orders, plans and tax invoices stay for 8 financial years on a record with no email, name or credentials, then they are deleted too. Payment notifications from Dodo follow their own 180-day schedule.
Your rights
- See and download your data: Settings → Your data → Download my data gives you everything we hold about your account as a file.
- Correct it: change your name in Settings. To change your email, write to us.
- Delete it: see above.
For anything else, or a concern, email us. We usually reply within 24 to 48 hours. That is our usual time, not a promise.
Contact
Privacy questions: [email protected]. Postal: Asterwise Labs Private Limited, Haryana, India.