Privacy Policy

Last updated: [DATE]. Data controller: [COMPANYNAME], [COMPANYADDRESS]. Contact: [SUPPORTEMAIL]._

1. What we collect

• Data you provide: first name (or any name you choose), date of birth, gender, email address, locale.
• Payment data: processed by Stripe; we never see or store full card details.
• Technical data: anonymous analytics events (page views, funnel steps) via PostHog in EU mode, and error diagnostics via Sentry. Analytics cookies are set only after your consent in the cookie banner.

2. How we use your data (including AI profiling)

Your date of birth and gender are used solely to compute your chart and to generate interpretive texts with large language models (automated processing/profiling in the sense of GDPR Art. 22 — used only to produce the entertainment report you requested, with no legal or similarly significant effects). Your email is used to deliver the report, receipts, sign-in links and — at most once — a reminder about an unfinished purchase.

3. What we never do

We do not sell your data. We do not send marketing mailings on the MVP. We do not write your date of birth into analytics events, error trackers or server logs.

4. Storage and processors

Data is stored in our database (EU-hosted). Processors: Stripe (payments), Anthropic/OpenAI (text generation — receive chart numbers and first name placeholder, never your email), Resend (email delivery), PostHog EU (analytics), Sentry (errors), Cloudflare R2 (PDF storage).

5. Your rights

Under GDPR you may request access, rectification, export or deletion of your data at any time: email [SUPPORT_EMAIL] from the address you used. Deletion removes your account, reports and PDFs (except payment records we must keep by law). You may also lodge a complaint with your supervisory authority.

6. Retention

Reports and accounts are kept while the account exists. Magic-link tokens expire after 15 minutes. Email delivery logs are kept up to 12 months. Payment records are kept as required by tax law.