Privacy

2. What data we collect

• Email: to send you your birth chart, sign you in, and communicate with you.
• Birth details: your name, and your birth date, time, and place (along with that place's coordinates and time zone). Used solely to calculate your birth chart.
• Account data: credit balance, purchase history, and service usage history.
• Your analyses and chats: we store your analyses and chat messages to preserve context so you can revisit them. You can delete them.
• Payment data: handled by Stripe; we only store an identifier to link the purchase to your account.
• Technical data: an encrypted fingerprint of your IP address and browser type, solely to prevent abuse and keep the service secure.

3. What we use it for and on what legal basis

• Generating your birth chart and sending it to you (to provide the service you requested).
• Creating your analyses and enabling chat about your chart (to provide the service).
• Processing your purchases and managing your credits (contract performance and legal invoicing obligations).
• Responding when you write to us (our legitimate interest in supporting you).
• Preventing abuse and keeping the service secure (legitimate interest).
• Anonymously measuring how the site is used, only if you accept analytics cookies (your consent).

4. What we send to the AI

To write your analysis and answer in chat we use OpenAI. We send it only your name and your already-calculated chart (the signs, houses, and aspects). We never send it your birth date, time, place, or coordinates.

We also configure these requests so that OpenAI doesn't retain that information or use it to train its models.

5. What we do NOT do with your data

• We never store your card: payment is processed by Stripe in its secure environment; we never see your card number.
• We don't sell your data: we don't hand it over to third parties for advertising purposes, and we don't do cross-advertising.

6. Who we share it with

We only share what's strictly necessary with providers who help us deliver the service, each bound by its own policy and data processing agreements:

• Stripe: payment processing.
• Resend: sending emails (your chart, notices, and access links).
• OpenAI: generating analyses and chat (only your name and your calculated chart, as explained above).
• OpenStreetMap (Nominatim): converting the birth place you type into coordinates.
• Cloudflare Turnstile: verifying you're not a bot on our forms.
• Google Analytics: anonymous usage measurement, only if you accept analytics cookies.
• MongoDB Atlas and Vercel: data storage and service hosting.
• Telegram: we receive internal activity notices (for example, an alert when a purchase happens) so we can manage the service.

7. Cookies

We use the essential cookies needed for the site to work: keeping you signed in, remembering your language, and protecting forms (security and anti-bot). These don't require your consent.

Only if you accept them in the cookie notice do we use analytics cookies (Google Analytics) to understand, in aggregate, how the site is used. You can change your choice at any time by clearing your browser's site data.

8. Where your data is processed

Some providers (for example OpenAI, Stripe, Vercel, or Google) may process data outside the European Economic Area. In those cases, the transfer relies on the safeguards required by the GDPR, such as the European Commission's standard contractual clauses or recognized adequacy frameworks.

9. How long we keep it

We keep your data for as long as you have an account or keep using the service. If you ask us to delete your account, we erase your personal information except what the law requires us to keep (for example, billing records for the legally required period).

10. Security

We encrypt communications (HTTPS) and mask sensitive data in our internal logs. Payments are processed on Stripe's secure (PCI-DSS) infrastructure.

11. Your rights

You can exercise your data rights at any time:

• Access the data we hold about you.
• Correct or update it.
• Request that we delete it.
• Object to its use or request that we restrict processing.
• Take it with you to another service (portability).
• Withdraw your consent when processing is based on it.
• File a complaint with the Spanish Data Protection Agency (aepd.es) if you believe we haven't respected your rights.

12. Minors

The service is not directed at anyone under 14. If you're under that age, please ask an adult to accompany you.

13. Changes to this policy

If we make significant changes, we'll let you know by email or on the site itself before they take effect.