Politika zasebnosti

1. Information We Collect

Account Data

When you create an account, we collect your email address, name, and password (stored in hashed form). If you subscribe to a paid plan, we collect billing contact information as required by our payment processor.

Usage Data

We automatically collect information about how you interact with the platform, including pages visited, features used, session duration, browser type, operating system, IP address, and referring URLs. This data is collected through server logs and analytics tools (subject to your cookie consent preferences).

Client Data You Store

As a practitioner using our platform, you may upload or input data about your clients, including names, birth dates, birth times, and birth locations for the purpose of generating astrological charts and readings. You are the data controller for this client data. We act as a data processor on your behalf under the terms described in this policy.

Profile and Branding Data

You may optionally provide a business name, profile image, custom colors, and branding assets for use on practitioner profiles and generated reports. This information is stored securely and used only to deliver the service to you and your clients.

2. How We Use Your Information

We use the information we collect to:

• Deliver the service — generate astrological charts, readings, and reports; manage your account and subscription; provide scheduling and client management features.
• Billing and payments — process subscription payments and manage your billing history through our payment processor.
• Communication — send transactional emails (account confirmation, password reset, subscription notifications), respond to support requests, and provide service announcements.
• AI-assisted interpretations — pass astrological chart data to an AI processing service to generate natural-language interpretations. No personally identifiable information is included in these AI requests beyond chart data.
• Analytics and improvement — understand how the platform is used to improve features and user experience. Analytics are only collected with your explicit cookie consent.
• Legal and compliance — comply with applicable laws, enforce our Terms of Service, and protect the rights and safety of users and the platform.

3. Data Processing

We rely on the following third-party processors to deliver the service. Each processor is bound by a data processing agreement and handles data only as instructed by us:

• Cloud hosting provider — stores your account data, practitioner profiles, client records, and generated reports on secure cloud infrastructure with encryption at rest.
• Payment processor (Merchant of Record) — handles all payment card data and billing compliance. We do not store or process card numbers directly. The payment processor acts as the Merchant of Record for all transactions, which simplifies VAT and tax compliance for you.
• AI processing service — receives astrological chart parameters (planetary positions, aspects, house data) to generate natural-language interpretations. Requests contain no client names, emails, or other directly identifying information.
• Email delivery service — sends transactional emails on our behalf (account confirmations, password resets, reading deliveries).

4. Data Sharing

We do not sell, rent, or trade your personal data or your clients' data to any third party. Data is shared only in the following limited circumstances:

• With the service processors listed in Section 3 above, solely to deliver the platform.
• If required by law, court order, or governmental authority, we may disclose information as necessary to comply with legal obligations.
• In the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred as part of that transaction, subject to standard confidentiality protections.

Practitioners are responsible for obtaining appropriate consent from their clients before storing client data on the platform and for complying with applicable data protection laws in their jurisdiction.

5. Data Retention

We retain your data for the following periods:

• Account data — retained while your account is active. When you delete your account, your practitioner profile, client records, and generated readings are permanently deleted within 30 days.
• Billing records — retained for 7 years as required by applicable financial regulations, even after account deletion.
• Server logs — retained for up to 90 days for security and debugging purposes, then automatically purged.
• Analytics data (if consented) — retained in aggregated, anonymized form after account deletion.

To request deletion of your account and associated data, please contact us at privacy@stellaxa.com or use the account deletion option in your dashboard settings.

6. Your Rights under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights with respect to your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — you may request deletion of your personal data, subject to legal retention obligations.
• Right to data portability — you may request an export of your data in a commonly used, machine-readable format.
• Right to object — you may object to processing of your personal data for direct marketing or based on our legitimate interests.
• Right to restriction of processing — you may request that we restrict processing of your data in certain circumstances.
• Right to withdraw consent — where processing is based on your consent (e.g., analytics cookies), you may withdraw consent at any time by updating your cookie preferences.

To exercise any of these rights, contact us at privacy@stellaxa.com. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority.

7. Cookies and Tracking

We use the following categories of cookies:

Essential Cookies (always active)

These cookies are strictly necessary for the platform to function. They handle authentication sessions, security tokens, and preference storage. They cannot be disabled without breaking core functionality.

Analytics Cookies (consent required)

We use a privacy-focused analytics tool to understand platform usage. Analytics cookies are only loaded after you provide explicit consent via the cookie consent banner. You may withdraw consent at any time; analytics will stop loading on subsequent page loads.

No advertising, retargeting, or third-party tracking cookies are used on this platform.

8. International Data Transfers

Stellaxa Pro is operated from the European Union (Republic of Slovenia). Your data is primarily stored and processed within the EU/EEA. Some processors (AI processing service, email delivery service) may process data outside the EEA. In such cases, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions where the destination country has been deemed to provide adequate data protection.

9. Children's Privacy

Stellaxa Pro is a professional platform intended for use by adult practitioners. Our service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child under 16 has provided us with personal data, please contact us at privacy@stellaxa.com and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Sending an email to the address associated with your account.
• Displaying a prominent notice on the platform before the change takes effect.

The updated policy will be effective on the “Last updated” date shown at the top of this page. Your continued use of Stellaxa Pro after that date constitutes acceptance of the updated policy.

11. Contact Information

For privacy-related inquiries, data subject requests, or questions about this policy, please contact:

We aim to respond to all privacy-related requests within 30 days. For complex requests or disputes, the response period may be extended by up to two additional months, in which case we will notify you of the extension and the reasons for the delay.