Last updated: January 16, 2026
We care about your privacy. This document explains exactly how we process your personal data in accordance with the GDPR (General Data Protection Regulation).
The controller of your personal data is:
For any matters related to data protection, you can contact us at the email address above.
We collect the following personal data:
No VAT is charged on our prices, as we sell this Service internationally on the same basis as our other export services.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR)
We process your data solely for the purpose of:
To provide our services, we use professional technology tools. Your data is shared with the following trusted parties we work with:
What it is: Railway is a hosting platform for web applications.
What we store: All order data (name, email, date of birth, place of birth, answers to questions) and the generated analysis.
Where: Railway's servers are located in the United States (us-west region).
Data transfer to the USA:
In accordance with GDPR requirements, transferring data to the USA requires appropriate safeguards. Railway uses Standard Contractual Clauses (SCCs) approved by the European Commission, as well as appropriate technical and organizational measures to protect your data.
Railway meets SOC 2 Type II and ISO 27001 security standards.
How long: Data is stored on Railway's servers for a maximum of 60 days from the completion of the service (after which it is automatically anonymized - see §4).
Their policy: railway.app/legal/privacy
What it is: Anthropic is a US technology company, the creator of the Claude artificial intelligence.
What we share: Your name, date of birth, place of birth, time of birth, pronouns, and answers to questions.
Why: Claude AI generates your personalized astrological analysis based on this data.
Where the data goes: Anthropic's servers in the USA.
How long: Anthropic processes the data solely to generate the analysis and does not store it permanently, in accordance with their privacy policy. The data is deleted once the generation process is complete (usually within a few minutes).
Their policy: anthropic.com/legal/privacy
What it is: Stripe is a global online payment processor.
What we share: Full name, email, and billing address (if provided).
Card data: WE DO NOT HAVE ACCESS to it - it is processed directly by Stripe in accordance with the highest PCI-DSS Level 1 standards.
Why: Processing payment and ensuring transaction security.
Where: Stripe has servers in the EU and the USA and applies appropriate safeguards for international transfers.
Their policy: stripe.com/privacy
What it is: SendGrid (Twilio) is an email delivery service.
What we share: Your email address, name, and the content of the analysis (as a password-protected PDF attachment).
Why: To send you an order confirmation email and an email with the completed analysis.
Where: SendGrid's servers in the USA and the EU.
Their policy: twilio.com/legal/privacy
We may share data with:
We apply the principle of data minimization in accordance with the GDPR:
60 days after completion of the service, we automatically delete:
Due to tax and accounting obligations, we retain for 5 years:
This is the minimum required by Polish tax law (the Accounting Act).
You may request deletion of your data at any time. We will delete it promptly, except for data we are legally required to retain (see section 4.2).
You have full control over your data. Under the GDPR, you have the following rights:
You may ask us at any time what data about you we process. We will send you a copy within 30 days.
If your data is incorrect or incomplete, let us know and we will correct it.
You may request deletion of your data. We will delete it promptly, unless the law requires us to retain it (e.g. invoicing/accounting data - 5 years).
You may request that we suspend processing of your data (e.g. while a dispute is being resolved).
You may request that your data be provided in a format allowing it to be transferred to another controller (JSON/CSV).
You may object at any time to the processing of your data (subject to performance of the contract).
If you believe we are violating GDPR provisions, you may file a complaint with:
Polish Personal Data Protection Office (UODO)
Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl
Send an email to: contact@astrofinance.pro with the subject "GDPR - [name of right]" (e.g. "GDPR - right of access").
We will respond within 30 days.
We apply appropriate technical and organizational measures to protect your data:
We do not use tracking, analytics, or marketing cookies.
Stripe may use its own cookies to process payments - see their privacy policy for details.
We may update this policy in response to legal or technological changes. We will inform you of material changes by email (if we have your address) or by posting a notice on the website.
The date of the last update is shown at the top of this document.
Have questions about data protection? Contact us:
We will respond within 7 business days.
Your privacy is our priority. If you have any concerns, just ask. We're here to help.