Who We Are
Data controller: Spirit River Inc.
- Website: spiritriver.life
- Product: elamap.com
- Contact: privacy@elamap.com
32566 Docs Place #5 - 122
Millville, DE 19967
United States
Spirit River Inc. is the data controller responsible for the personal information processed through ELA Map. "ELA Map," "we," "us," and "our" all refer to Spirit River Inc.
Information We Collect
Account and identity data
When you register, we collect:
- Email address — used for login and communications
- Display name or full name — as you provide it at registration
- Authentication method — email/password or Google Sign-In (we receive a token from Google; we do not receive your Google password)
Astrological and birth data
This is the most sensitive data we hold, and we treat it accordingly. When you set up your birth chart or save charts for other people, we collect:
| Data | Nature |
|---|---|
| Birth date (day, month, year) | Personal data — stored encrypted |
| Birth time (hour and minute) | Personal data — stored encrypted |
| Birth location (city name and coordinates) | Personal data — stored encrypted |
| Chart subject name | Personal identifier — stored encrypted |
Third-party charts:ELA Map allows you to save charts for people other than yourself. When you do this, you are providing a third party's personal information. By saving a third-party chart, you confirm you have a lawful basis to do so — either their consent or a legitimate interest consistent with applicable privacy law. See our Terms of Service for your responsibilities.
Current location (city-level)
During onboarding, if you use the "Detect my location" feature, ELA Map uses your device's GPS to identify your approximate city-level location. We then save this city-level location to your account for astrocartography features.
Analytics data (PostHog)
We use PostHog to understand how ELA Map is used and to improve the product. PostHog collects pages visited, session activity, device information, and general geographic region. PostHog is used solely for product improvement — not for advertising. It runs only if you accept analytics in the cookie banner, and you can withdraw that at any time in your account's Privacy Preferences. See PostHog's privacy policy.
Error and diagnostic data (Sentry)
We use Sentry to detect and fix bugs. Sentry may capture error messages, stack traces, limited session context, and device information. This data is used solely for diagnosing technical issues. Like analytics, Sentry stays switched off until you accept error tracking in the cookie banner. See Sentry's privacy policy.
Bot protection (Cloudflare Turnstile)
Forms that are open to the public — sign-up, sign-in, password reset, the waitlist form, and the signed-out chart preview — run a Cloudflare Turnstile check to keep automated abuse out. The check loads from Cloudflare, which receives your IP address and browser and device signals in order to decide whether the request looks human, and may store a short-lived token in your browser so it does not have to re-check you. When you submit the form, we send Cloudflare the resulting token together with your IP address so it can confirm the check was genuine. Cloudflare does not receive your account, birth, or chart data. See Cloudflare's privacy policy.
Payment data
Payments are processed by Stripe, Inc. ELA Map does not receive or store your payment card number, CVV, or full billing address. We receive a payment confirmation, transaction ID, and the last four digits of the card used. See Stripe's privacy policy.
Data we do not collect
- We do not collect data from users under 18. ELA Map is for adults only.
- We do not collect or infer racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data.
- We do not build advertising profiles.
- We do not track you across third-party websites.
How We Use Your Information
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and manage your account | Email, name, authentication data | Contract performance |
| Deliver astrocartography features | Birth data, current location, chart data | Contract performance |
| Generate optional AI reads, reports, and chat answers | Derived chart data; for the chat assistant, chart birth details (see AI Processing) | Contract performance / consent |
| Process payments and manage subscriptions | Payment confirmation data (via Stripe) | Contract performance |
| Improve ELA Map features and fix bugs | Analytics (PostHog), error logs (Sentry) | Legitimate interests |
| Send important account communications | Email address | Contract performance / legitimate interests |
| Send welcome and product/service updates to account holders (unsubscribe anytime) | Email address | Legitimate interests |
| Comply with legal obligations | As required | Legal obligation |
| Detect and prevent fraud or abuse | Account data, usage patterns, bot-protection signals (Cloudflare Turnstile) | Legitimate interests |
Legal Bases for Processing (GDPR)
If you are in the European Economic Area or UK, we process your personal data under the following legal bases:
Contract performance (Article 6(1)(b)):Most of ELA Map's core processing — account management, chart storage, location features, payment processing — is necessary to deliver the service you signed up for.
Legitimate interests (Article 6(1)(f)): We use analytics and error tracking to improve ELA Map and to maintain its security. These interests are proportionate and do not override your privacy rights.
Consent (Article 6(1)(a)): Where we send optional marketing communications, we do so only with your consent. You can withdraw consent at any time.
Legal obligation (Article 6(1)(c)): We process data as required to comply with applicable law.
AI Processing (Anthropic / Claude)
Most of ELA Map works without any AI. Our maps, lines, scores, and the bulk of our written interpretations are generated by our own deterministic and template-based systems, with no AI involved. The written interpretations themselves come from our professionally authored interpretation library, selected and sequenced programmatically for your chart. A small number of optional features, described below, additionally use a third-party large language model (LLM) to perform an editorial pass — weaving that already-selected material into flowing prose or speech. These features are only active when you choose to use them.
Which features use AI, and what we send
When you use any of the features below, we send the relevant chart information to Anthropic, PBC (the maker of Claude) so its model can refine and stitch the selected interpretive material into finished text. We send only what each feature needs:
- Grounded daily reads ("Today"): we send derivedchart information — the names of the astrological and Human Design placements active for you (for example a planet's sign, house, gate, and line, the day's aspects), the city name you are viewing, your first name, and the date. We do not send your raw birth date, birth time, or birth coordinates for this feature. You can turn AI-refined readings off at any time in Account settings; when off, ELA Map serves the standard structured reading assembled without any AI pass, and no derived data is sent to the AI provider for this feature.
- Location Reports: we send derived chart and place information — the lines in orb at that location, their interpretive keywords, your relocated angles, the natal sign/house context for those lines, your first name, and facts about the place. We do notsend your raw birth date, birth time, or birth coordinates for this feature. If you request an audio narration of a report, the report's written text (which includes your first name and the location) is sent to our text-to-speech provider, Fish Audio, to generate the audio.
- Map chat assistant ("Copilot"), where offered: so the assistant can answer questions about your specific chart, we send a summary of the chart you have open. For this feature that summary doesinclude your chart's birth date, birth time, birth city/region/country, and time zone, along with your conversation messages. This is the one AI feature that transmits those birth details; if you would rather they not be sent, do not use the chat assistant.
How the AI provider handles your data
Anthropic processes this data to produce the refined text and returns it to us. Based on Anthropic's commercial terms, data submitted through its business API is not used to train its models. Anthropic retains inputs and outputs only for a limited period for trust-and-safety and operational purposes. Fish Audio processes the report text only to produce the audio file. We treat all of these providers as subprocessors bound by data processing terms (see the Subprocessors section below).
Legal basis (EEA / UK)
We rely on performance of a contract (Article 6(1)(b)) to deliver an optional AI feature you have chosen to use, and, to the extent applicable, your consent (Article 6(1)(a)) given by choosing to use it. You can stop using these features at any time.
International Data Transfers
ELA Map is operated from the United States. If you are located in the EU, EEA, or UK, your personal data will be transferred to and processed in the United States.
We rely on Standard Contractual Clauses (EU Commission Decision 2021/914) and UK International Data Transfer Agreements for EU/UK data transfers to ensure adequate protection. This includes transfers to our US-based subprocessors, such as the AI providers used by our optional features (Anthropic and Fish Audio).
Data Retention
| Data category | Retention period |
|---|---|
| Account data (email, name) | Until account deletion, then deleted within 30 days |
| Birth and chart data | Until account deletion, then deleted within 30 days |
| Current location data | Until account deletion, then deleted within 30 days |
| Location Reports and generated report audio | Until account deletion, then deleted within 30 days |
| AI feature inputs/outputs held by the AI provider | Per the provider's limited retention (Anthropic: limited trust-and-safety/operational retention) |
| Analytics data (PostHog) | Per PostHog's configured retention (default: 1 year) |
| Error logs (Sentry) | Per Sentry's configured retention (default: 90 days) |
| Payment records | 7 years (tax and legal compliance) |
| Backup systems | Overwritten within 90 days of deletion request |
When you delete your account, we begin processing deletion within a reasonable period. Your data will be removed from active systems within 30 days and from backup systems within 90 days. Payment transaction records are retained for 7 years as required by tax law.
Your Rights
For all users
- Access: You can view your account data and charts within ELA Map at any time.
- Deletion: You can delete your account and all associated data at any time from your account settings, or by emailing privacy@elamap.com.
- Correction: You can update your account information and edit charts directly in the app.
- Data portability: To request an export of your personal data, email privacy@elamap.com.
For EU and UK residents (GDPR)
- Right of access (Art. 15): Request a copy of the personal data we hold about you
- Right to rectification (Art. 16): Request correction of inaccurate data
- Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
- Right to restriction (Art. 18): Request that we limit how we process your data
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to object (Art. 21): Object to processing based on legitimate interests
To exercise any of these rights, email privacy@elamap.com. We will respond within one calendar month.
For California residents (CCPA/CPRA)
Under the California Consumer Privacy Act, California residents have the right to know, delete, correct, opt out of sale or sharing, and non-discrimination. ELA Map does not sell your personal information and does not share it for cross-context behavioral advertising.
To submit a CCPA request, email privacy@elamap.com from your account email address. We will respond within 45 days.
Children's Privacy
ELA Map is not for users under 18 years old. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will close their account and delete all associated data. If you believe a user under 18 has created an account, please contact privacy@elamap.com.
Data Security
We take the security of your data seriously. Our security practices include:
- All birth data and chart data is stored encrypted at rest (AES-256)
- All data in transit is encrypted using TLS 1.2 or higher
- Access to production databases is restricted to authorized personnel only
- We conduct periodic security reviews
No system is perfectly secure. If you discover a security vulnerability, please report it to security@elamap.com. We will acknowledge your report within 24 hours.
Changes to This Policy
When we make material changes to this Privacy Policy, we will notify you by email and display a notice within the app at least 30 days before the changes take effect. Your continued use of ELA Map after a policy update constitutes acceptance of the revised policy. If you do not agree, you may close your account before the changes take effect.
Contact Us
For privacy-related questions, requests, or concerns:
Spirit River Inc.
32566 Docs Place #5 - 122
Millville, DE 19967
United States
Email: privacy@elamap.com
Website: elamap.com
Response time: We aim to respond to all privacy inquiries within 5 business days and to fulfill access/deletion requests within one calendar month.
Related Documents
ELA Map is a product of Spirit River Inc. — spiritriver.life