Legal

Privacy Policy

Last updated: July 2026

Protecting your personal data is a core concern for us. This policy informs you, in accordance with Art 13 of the General Data Protection Regulation (GDPR), about which data we process, for which purposes, on which legal basis, and which rights you have.

1. Controller

Controller: [Vorname Nachname], sole proprietor
Address: [Strasse und Hausnummer], [PLZ] [Ort], Österreich
Email: contact@revealmystars.com

2. What data we process

We only process data required to operate the platform:

  • Account data: email address, display name, chosen language, time of registration and consent. Your real name is stored in encrypted form.
  • Birth data for astrological calculations: date, time and place of birth, each provided voluntarily by you. This data is stored encrypted and used exclusively to create your astrological content.
  • Usage and contract data: purchased credits, unlocked content, purchase history.
  • Technical data: during registration and sign-in your IP address is processed briefly to prevent abuse (limiting sign-in attempts). Your IP address is not permanently stored in your profile.
  • Session cookie: we only set one technically necessary sign-in cookie (rms_session). It contains a random identifier only, no personal data, and expires after 7 days. We do not use tracking, analytics or advertising cookies.

3. Purposes and legal bases

  • Providing the service, account management and creating your astrological content: performance of a contract under Art 6(1)(b) GDPR and your explicit consent under Art 6(1)(a) GDPR, which we obtain and document at registration and before processing your birth data.
  • Payment processing for credit purchases: performance of a contract under Art 6(1)(b) GDPR.
  • Abuse prevention, security and troubleshooting: legitimate interest under Art 6(1)(f) GDPR.
  • Compliance with statutory retention obligations, in particular under tax and company law: legal obligation under Art 6(1)(c) GDPR.

4. Content created with the support of artificial intelligence

Your astrological analyses and interpretations are created with the support of AI language models. For this purpose we transmit the astrological position data required for the calculation and questions you ask to our technical service provider OpenRouter Inc. (USA) as an intermediary to AI model providers. We do not transmit real names or contact details. Transfers to the USA are based on the EU Standard Contractual Clauses under Art 46 GDPR.

5. Recipients of your data

We only share your data to the extent necessary for operation, and only with the following categories of recipients:

  • Cloudflare, Inc. (USA): hosting, database and delivery of the website. Standard Contractual Clauses under Art 46 GDPR, processing predominantly in EU data centres.
  • Stripe Payments Europe, Ltd. (Ireland): payment processing. Your payment details (such as card data) are collected and processed directly by Stripe; we never receive complete payment data.
  • Resend (Plus Five Five, Inc., USA): sending transactional emails such as registration confirmation and password reset. Standard Contractual Clauses under Art 46 GDPR.
  • OpenRouter Inc. (USA): AI-supported text creation as described in section 4.
  • Google Ireland Ltd.: only if you use Sign in with Google. We receive your email address, your name and an account identifier from Google. Conversely, Google learns that you use our service. Please refer to Google’s privacy policy for details.

6. Retention periods

  • Account data and content: for as long as your account exists. After you delete your account, your personal data is erased unless statutory retention obligations require otherwise.
  • Invoicing and payment data: 7 years pursuant to Section 132 of the Austrian Federal Fiscal Code (BAO).
  • Sign-in sessions: 7 days.
  • Short-term abuse prevention data (rate limits): a few minutes to hours.

7. Your rights

Under the GDPR you have the following rights:

  • Access (Art 15 GDPR): you can request a copy of your stored data at any time. A direct data export is available in your account settings.
  • Rectification (Art 16 GDPR) of inaccurate data.
  • Erasure (Art 17 GDPR): you can delete your account yourself at any time in the settings.
  • Restriction of processing (Art 18 GDPR).
  • Data portability (Art 20 GDPR): the data export is provided in a common, machine-readable format.
  • Objection (Art 21 GDPR) to processing based on legitimate interests.
  • Withdrawal of consent (Art 7(3) GDPR) with effect for the future, for example by deleting your birth data or your account.

8. Right to lodge a complaint

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at. However, we would appreciate it if you contacted us first so that we can resolve your concern directly.

9. Data security

We implement state-of-the-art security measures: all communication is encrypted via HTTPS. Passwords are stored exclusively as cryptographic hashes. Particularly sensitive information such as real names and birth data is additionally stored in encrypted form. Access to production data is restricted to the necessary minimum.

10. No automated decision-making with legal effect

No automated decision-making within the meaning of Art 22 GDPR takes place that produces legal effects concerning you or similarly significantly affects you. Astrological content is an entertainment and reflection offering without legal or factual binding force.

11. Changes to this policy

We will adapt this privacy policy if the service or the legal situation changes. The current version can always be found on this page.