1.Who is responsible for your data
2M ADV S.r.l. (VAT 10773560965) operates Astrid and is the controller of your personal data. Contact: [email protected].
2.What we collect
- What you tell us in the quiz: your first name, email address, date, time and place of birth, and your answers (for example what you want to know, or how you feel about love this year).
- Another person's birth details, when you add them (for example a partner's name and date of birth for a compatibility chart). Please add them only if you have the right to share them.
- Payment information: handled by Stripe. We never see or store your full card number; we receive a confirmation, the last four digits and the card brand.
- Your use of the Service: pages and quiz steps you view, emails you open, and technical data such as IP address, browser, device and approximate location (country), collected with cookies and similar tools as described in our Cookie Policy.
- Messages you send us, for example to support.
3.Why we use it
| Purpose | Legal basis (EU visitors) |
|---|---|
| Calculate your chart, write your preview, reports and Astrid Weekly, and send them to you | Performance of our contract with you |
| Take payments, prevent fraud, keep accounting records | Contract and legal obligation |
| Emails about our products, and measuring our ads | Your consent, which you can withdraw at any time, or our legitimate interest in telling customers about similar products, with an unsubscribe link in every email |
| Keep the Service secure and improve it | Legitimate interest |
Your birth details are not sensitive data under the law, but we treat them with care: they are used to calculate your chart and are never sold.
4.How AI is used
The texts of Astrid are written with artificial intelligence models from OpenAI, used through Microsoft Azure OpenAI Service. To write your texts we send the model the positions we calculated for your chart, your first name and, when relevant, your question. Under our agreement with Microsoft, this data is not used to train their models.
6.International transfers
Some providers process data in the United States and other countries. When data leaves the European Economic Area we rely on the safeguards the law provides, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
7.How long we keep it
- Your account, chart and reports: as long as your account is open, and deleted within 30 days after you ask us to delete it.
- If you never buy, your quiz answers and email: up to 24 months after your last activity, or until you unsubscribe and ask us to delete them.
- Payment and tax records: as long as the law requires (usually 10 years).
8.Your rights
Wherever you live, you can ask us to access, correct, delete or export your data, and to stop using it for marketing. If you are in the EU or UK you can also object to processing based on legitimate interest, restrict processing, withdraw consent at any time, and complain to a data protection authority (for us, the Garante per la protezione dei dati personali). If you live in California or another US state with a privacy law, you have the right to know, delete, correct, and opt out of the sale or sharing of your data and of targeted advertising, and we will not treat you differently for using these rights.
To use any of these rights, write to [email protected] from the email address of your account. We answer within 30 days.
9.Children
Astrid is not meant for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
10.Security
We protect your data with encryption in transit, access controls and sign-in links that expire. No system is perfectly secure, but we will tell you without undue delay if a breach affects your data.
11.Changes
If we change this policy in a way that matters to you, we will tell you by email or on the site before the change takes effect.
Questions?
Write to [email protected]. We answer within two business days.