Privacy Policy

Identity and contact data: your first name and email address.

Birth data: date of birth, time of birth (if you know it) and place of birth. Together with your quiz answers this is the input to your report.

Quiz answers: the lifestyle and focus questions you answer in the funnel, plus your chosen language.

Generated content: the profile we compute for you.

Technical data: IP address, device and browser type, and basic usage events.

To generate and display your report and to deliver it by email — performance of a contract (Art. 6(1)(b) GDPR).

To send marketing emails about new products — only with your consent (Art. 6(1)(a)), withdrawable at any time via the unsubscribe link.

To keep the service secure, prevent abuse and improve the product in aggregate — our legitimate interests (Art. 6(1)(f)).

To meet accounting and tax obligations for purchases — legal obligation (Art. 6(1)(c)).

Birth date, time and place are not special category data under the GDPR, but we treat them as sensitive because they are personal and permanent. They are used only to compute your report and are never enriched, profiled for advertising, or matched against third-party datasets.

Lead and profile data: kept while your account or profile remains active, and deleted 24 months after your last interaction.

Purchase and invoice records: kept for the statutory accounting period (typically 5 years).

Marketing consent records: kept until you withdraw consent, plus 12 months as proof of consent.

Anonymous aggregate statistics may be kept indefinitely — they cannot be linked back to you.

You have the right to access your data, to rectify it, to erase it, to restrict or object to processing, and to data portability in a machine-readable format.

Where processing is based on consent, you can withdraw that consent at any time without affecting prior lawful processing.

Write to hello@astrodecade.com and we respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

We never sell, rent or trade personal data. We do not pass birth data to advertising networks and we do not use it for automated decision-making with legal effects.

We share data only with processors acting on our instructions under a data processing agreement: our hosting and database provider, our email delivery provider, and our payment provider (which processes payment data as its own controller).

Where a processor operates outside the EEA, transfers are covered by the European Commission's Standard Contractual Clauses.

Essential storage: we use browser local storage to keep your generated profile available on your device and to remember your language and cookie choice. This is required for the service to work and does not need consent.

Optional analytics: we ask for consent in the cookie banner before setting any analytics cookie. Declining leaves the full product usable.

No advertising or cross-site tracking cookies are used. You can clear cookies and local storage from your browser settings at any time.

Data is stored on managed cloud infrastructure with encryption in transit and at rest, and access limited to those who need it.

We may update this policy; the current version is always published here with its last-updated date.