1. Who we are (data controller)
This Privacy Policy explains how Yarify s.r.o. (“we”, “us”, “our”) collects and processes personal data when you use https://astrooly.com (the “Site”) and related services (the “Service”).
Controller: Yarify s.r.o., Raisova 916/15, Mariánské Hory, 709 00 Ostrava, IČO: 23050403
Contact (privacy): astrooly@yarify.tech
2. Data we collect
- Account data: email, name (optional), password hash (if you use email/password), authentication identifiers.
- Purchase & billing metadata: plan, payment status, invoices/receipts IDs, country, currency. (We do not store full card details.)
- Astrology inputs: date of birth, time of birth, place of birth, and derived chart data you generate (planet positions, houses, aspects).
- Usage & device data: IP address, pages viewed, approximate location (from IP), device/browser info, logs for security and debugging.
- Support communications: messages you send us and our replies.
3. Why we use your data (purposes)
- Provide the Service (accounts, chart generation, delivering reports).
- Process payments, prevent fraud, and manage subscriptions.
- Customer support and communications.
- Security, monitoring, and improving performance.
- Analytics to improve the product and user experience.
- Legal compliance (accounting, tax, responding to lawful requests).
4. Legal bases (GDPR)
- Contract (Art. 6(1)(b)): to provide the Service you requested.
- Legal obligation (Art. 6(1)(c)): accounting/tax obligations and other legal duties.
- Legitimate interests (Art. 6(1)(f)): security, fraud prevention, service improvement.
- Consent (Art. 6(1)(a)): where we ask for it (e.g., certain cookies/marketing, where applicable).
5. Cookies and similar technologies
We use cookies and similar technologies for authentication, security, preferences, and analytics. Depending on your configuration and jurisdiction, you may be able to manage cookie preferences via a cookie banner or browser settings.
6. Sharing data (processors and third parties)
We may share data with service providers who help us run Astrooly, such as:
- Payment processors (e.g., Stripe): to process payments and prevent fraud.
- Hosting & infrastructure (e.g., Google Cloud): to host databases, servers, and logs.
- Email delivery (e.g., Resend or similar): to send transactional emails.
- Analytics (e.g., privacy-friendly analytics or standard tools you configure).
- AI providers (if enabled): if you generate AI-based interpretations, your chart data and prompts may be sent to an AI provider to generate text output.
These providers act as processors under GDPR and process data under our instructions and appropriate contractual safeguards.
7. International transfers
Some of our providers may process data outside the EU/EEA. Where applicable, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions, and we implement additional technical and organizational measures as needed.
8. How long we keep data (retention)
- Account data: kept while your account is active; deleted or anonymized after deletion requests, unless we must retain some data for legal reasons.
- Chart/report data: kept to provide your history and re-access (until you delete it or your account, subject to legal obligations).
- Billing records: retained as required by applicable accounting/tax laws.
- Logs/security: retained for a limited period for security and troubleshooting.
9. Your rights (GDPR)
If you are in the EU/EEA/UK, you typically have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase data (in certain cases).
- Restrict or object to processing (in certain cases).
- Data portability (where applicable).
- Withdraw consent at any time (where processing is based on consent).
To exercise your rights, contact us at astrooly@yarify.tech. You also have the right to lodge a complaint with your local supervisory authority.
10. Security
We use reasonable technical and organizational measures to protect personal data (encryption in transit, access controls, monitoring). No system is 100% secure, but we work to minimize risk.
11. Children
The Service is not intended for children under the age where parental consent is required by applicable law. If you believe a child provided us personal data, contact us and we will take appropriate steps.
12. Changes to this Privacy Policy
We may update this policy from time to time. The latest version is always available on this page, and we will indicate the “Last updated” date.
13. Contact
Yarify s.r.o.
Raisova 916/15, Mariánské Hory, 709 00 Ostrava
IČO: 23050403
Privacy contact: astrooly@yarify.tech