Privacy Policy

Who we are

AstroGarden is a product of Forgewise.tech, a Spannings LLC brand. This policy describes how we handle information collected through the AstroGarden website and any site powered by the AstroGarden platform.

What we collect and why

• Contact form submissions — name, email address, and message. Used solely to respond to your enquiry.
• Newsletter subscriptions — email address only, and only with your explicit opt-in consent. Used to send occasional content updates. You can unsubscribe at any time via the unsubscribe link included in every newsletter email, or by emailing [email protected].
• Booking requests — name, email, and any details you provide in the booking form. Used only to process and respond to your booking request.
• Blog comments — name, email, and comment text. Shown only after moderation approval. Email is never displayed.

We do not collect any data automatically beyond standard server access logs (IP address, browser, referring URL), which are kept for a limited period for security and troubleshooting purposes and are not used for tracking or profiling.

AI-assisted content generation

Blog posts on this site are written with the assistance of the DeepSeek AI API. Cover images are generated using the Google Imagen API (part of Google Gemini). These are third-party AI services with their own privacy policies.

• DeepSeek (blog text) — When an administrator generates a blog post, a text prompt is sent to DeepSeek's API. The prompt is created by the site operator and does not include your personal data. The generated text is then reviewed and published on this site. DeepSeek's own data handling is governed by the DeepSeek Privacy Policy. Their data retention and model training practices are subject to their own policy, which we encourage you to review.
• Google Imagen (cover images) — Cover images are generated by sending a text description (derived from the post title and excerpt) to the Google Imagen API. This service is subject to the Google Privacy Policy. Their data retention and model training practices are subject to their own policy.

Visitor data — such as contact form submissions, comments, booking requests, or newsletter email addresses — is never sent to these AI services. The prompts are written by the site administrator; while they are not intended to contain personal information, any text the administrator includes in a prompt is transmitted to the respective provider.

How we store your data

Submitted information is stored in a MongoDB Atlas database, a cloud database service operated by MongoDB, Inc. Data is stored only as long as necessary to fulfil the purpose for which it was collected, and raw personal-data records are automatically deleted on the following schedule:

• Contact enquiries — deleted 25 months after submission.
• Booking requests — deleted 25 months after the request.
• Newsletter subscriptions — deleted 25 months after subscribing, unless you re-subscribe.
• Blog comments — deleted 13 months after posting, unless re-approved.

These periods are enforced by database TTL indexes and are applied automatically. You may also request immediate erasure of all of your data at any time (see Your rights below).

Newsletter subscriptions may also be forwarded to Mailchimp (Intuit) for email list management when that integration is enabled. In that case, Mailchimp's retention is governed by the Mailchimp Privacy Policy.

Who we share your data with

We do not sell your personal information. We share data only with vetted sub-processors necessary to operate the service:

• MongoDB Atlas — database hosting.
• Resend — transactional email delivery.
• Mailchimp (Intuit) — email marketing, only for users who explicitly opt in to the newsletter.
• Stripe — payment processing.
• DeepSeek — AI blog post generation (receives administrator-written prompts, never visitor data).
• Google (Imagen API) — AI cover image generation (receives administrator-written prompts, never visitor data).
• Google (Fonts CDN) — web font delivery. When you load any page on this site, your browser makes a request to fonts.googleapis.com, which transmits your IP address and browser information to Google. This is subject to the Google Privacy Policy.
• GitHub & DigitalOcean — source-control and hosting for client sites you provision.

Data may also be shared where required by law or to protect our legal rights.

Cookies and browser storage

This site does not use tracking cookies or third-party analytics cookies. No advertising pixels are used.

The application uses browser sessionStorage (not cookies) for the following limited purposes:

• Public site settings cache — site branding, navigation labels, and feature flags (e.g. whether the bookings page is enabled) are cached in sessionStorage for up to 30 seconds to reduce server requests. No personal data is stored.
• Booking and contact availability — the same public settings cache is also read by the bookings and contact pages to check whether those features are enabled before rendering.
• Administrator session token — when an administrator signs in via a magic-link email, their session token is held in sessionStorage for the duration of their browser session. This token identifies the administrator to the server and is never shared with third parties.

SessionStorage is a browser-tab-local store. It is cleared automatically when you close the browser tab and is not accessible to other websites. No cross-site tracking or persistent identifiers are stored in sessionStorage.

Your California privacy rights (CCPA)

California residents have the right to know what personal information we collect, to access it, to request deletion, and to opt out of any "sale" or "sharing" of personal information. We do not sell your personal information. To exercise these rights, email [email protected].

Your rights

You may request access to, correction of, or deletion of any personal data we hold about you (including erasure of all records tied to your email address). To make a request, email us at [email protected]. We will respond within 30 days.

Changes to this policy

We may update this policy from time to time. The effective date at the top of this page indicates when it was last revised. Continued use of the site after a revision constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email [email protected].