Datenschutzerklärung

0. In short

• No tracking. We do not use analytics tools, advertising trackers, or third-party tracking mechanisms.
• No unnecessary cookies. We use only a single technical cookie for the sole purpose of remembering your selected display language.
• No passwords. Sign-in is handled through your Google account: we never receive, ask for, or store your password.
• No excess data. We request and process exclusively your email address, without accessing your name, profile picture, or contacts.
• No data sharing. We never sell or share your data with third parties, for any reason.
• Full control. You can completely delete your account and all your data at any time.

1. Who we are

Zodiria ("Zodiria," "we," "us," or "our") is an online service operated by a private individual. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website at zodiria.com (the "Service").

For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is the operator of zodiria.com. You can contact us regarding any privacy matter at:

Email: [email protected]

2. Age requirement

The Service is intended for users 18 years of age or older. By creating an account, you confirm that you are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we become aware that a user under 18 has registered, we will delete the associated account and data without delay.

3. What data we collect

We collect the minimum data necessary to operate the Service:

Account data (via Google Sign-In)
- Your email address

Birth data
- Date of birth, time of birth, and place of birth, as submitted by you for the purpose of generating reports
- Any optional name or label you choose to associate with a set of birth data

Usage data
- Credits balance and credit transaction history (grants, usage, redemptions)
- Reports generated through the Service and related timestamps
- Basic technical logs necessary for security and abuse prevention (e.g., IP address, timestamps, error logs)

Language preference
- Your selected display language, stored via a strictly necessary cookie (see Section 6).

We do not use Google Analytics, advertising trackers, or any third-party analytics or marketing tools.

4. How we use your data

We use your personal data only for the following purposes:

• To create and manage your account (via Google Sign-In)
• To operate the credits system, including granting free credits and tracking their use
• To generate and deliver the reports you request, which involves transmitting to our AI provider the astrological positions computed from your birth data, as described in Section 7
• To maintain the security, integrity, and proper functioning of the Service
• To communicate with you about your account or the Service, where necessary
• To comply with legal obligations, if and when applicable

5. Legal basis for processing

We process your personal data on the following legal bases under the GDPR:

• Performance of a contract (Art. 6(1)(b)): to create and manage your account, operate the credits system, and generate the reports you request, including the birth data you submit for that purpose.
• Legitimate interest (Art. 6(1)(f)): to secure the Service and prevent fraud or abuse, in a way that does not override your rights and freedoms.
• Legal obligation (Art. 6(1)(c)): where we are required to retain or disclose data under applicable law.

6. Cookies

We use only one strictly necessary cookie, used to remember your selected display language. This cookie does not track you, does not collect personal data beyond your language preference, and does not require consent under applicable ePrivacy rules, as it is strictly necessary for the Service to function as you expect.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

7. Sharing your data with third parties

We do not sell your personal data. We share limited data only with the following categories of service providers, strictly as necessary to operate the Service:

Category of recipient	Purpose	Data shared	Location
Sign-in provider	Authentication through your existing account	Email address	United States
AI provider	Generation of reports	The astrological positions computed from your birth data (planets, houses, aspects), and the name or label you gave the chart	United States
Hosting provider	Hosting of the Service and its database	All account and usage data described in Section 3	Switzerland (CH)
Email delivery provider	Delivery of transactional emails	Your email address, your name, and the content of the message (e.g. your credits balance)	European Union
Error monitoring provider	Detection and diagnosis of technical faults	Technical error data: timestamps, URLs, stack traces. Personal data is not intentionally transmitted	European Union

You may ask us at any time for the identity of the providers in each category, by writing to [email protected].

These providers act as data processors and are contractually bound to process data only on our instructions and in compliance with applicable data protection law.

Our AI provider receives only what is needed to write the reading: the astrological positions computed from your birth data, and the name or label you gave the chart. Your date, time, and place of birth are not transmitted. Two readings are chronological by nature and are a partial exception: the Cosmic Biography and the return charts include the dates of the periods they cover, from which the year, or the day and month, of birth can be inferred.

We never transmit your email address or your account identifier. Our AI provider processes what it receives solely to generate the report you requested, and does not use it to train its models.

International transfers. Where processing by a provider involves a transfer of personal data outside the EU/EEA, that transfer is governed by Standard Contractual Clauses approved by the European Commission, or by another transfer mechanism recognized under Chapter V of the GDPR. You may request a copy of the relevant safeguards by contacting us at [email protected].

We may also disclose data where required by law, regulation, or a valid legal request from a competent authority.

8. Where your data is stored

Your data is stored on servers located in Switzerland (CH), a country recognized by the European Commission as providing an adequate level of data protection. Email delivery and error monitoring are performed within the EU. Transfers of personal data outside the EU/EEA occur only towards our sign-in provider and our AI provider, both in the United States, and are subject to the safeguards described in Section 7.

9. Automated processing

Reports are generated automatically by an AI system on the basis of the astrological positions computed from the birth data you submit. This processing produces content intended for entertainment and personal reflection only. It does not produce legal effects concerning you and does not similarly significantly affect you, and therefore does not constitute automated decision-making within the meaning of Article 22 GDPR.

We do not use your data for profiling in connection with advertising, credit scoring, employment, or any similar purpose.

10. Data retention

• Account and credits data: retained for as long as your account remains active.
• Birth data and generated reports: retained for as long as your account remains active, so you can access your history. You may delete individual entries at any time from within the Service.
• Technical/security logs: retained for a maximum of 90 days, after which they are deleted or anonymized.

If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

11. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), subject to legal exceptions
• Restrict processing in certain circumstances
• Object to processing based on legitimate interest
• Data portability, i.e., receive your data in a structured, machine-readable format
• Lodge a complaint with your national data protection authority. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it)

To exercise any of these rights, contact us at [email protected]. We will respond within one month, as required by Article 12(3) GDPR.

12. Security

We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other appropriate means before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

14. Language

The English version of this Privacy Policy is the authoritative text. Translations into other languages, if provided, are offered for convenience only; in case of discrepancy, the English version prevails.

15. Contact

For any question about this Privacy Policy or how we handle your data, contact us at:

[email protected]