Privacy policy
Some publisher details are being published and are marked “to be completed”.
Who is responsible
The data controller is Vianney Bertrand, sole trader (EI), to be completed. For any question about your data: vianney.bertrand@gmail.com.
What we keep, and why
Without an account: your chart is calculated on our servers and then shown; the birth you entered stays in your browser, we do not record it.
Your order: when you click Pay, we record the first names, genders, birth dates, times and places of both people, the chosen bond and the plan, to prepare the report after payment. Your agreement on withdrawal is given on Stripe's payment page, which keeps it with the payment.
Your account: your email address, and your encrypted password if you choose one, to identify you. If you pay without being signed in, it is created with the email address given at payment; your report is sent there by a link, and you enter your space with a code sent to that address.
Your profiles: the first name, gender, birth date, time and place of each person you save, including you, with the history of their corrections and the calculated charts.
Your reports: the text of each report, your questions and their answers. The link sent by email opens a report and its PDF without signing in, for whoever holds it: only pass it on to someone you want to show it to. We keep only a fingerprint of it, from which it cannot be rebuilt.
Your payments: the plan, amount, status and payment identifiers. Your card is collected by Stripe, not by us; Stripe passes on to us the email address given at payment.
This data is used to do what you ask of us: calculate, write, show you your reports and take your payments (performance of the contract).
A daily count of steps (for example “report requested”), with no visitor identifier at all, helps us understand the journey (legitimate interest). Your IP address is only used, in memory, to limit abuse; it is not recorded.
The people you add
When you add a person, you entrust us with their birth data. Only use information you are entitled to use. That person can exercise the same rights as you over their data with us.
Who receives it
Supabase keeps the database and the accounts, in Ireland.
Vercel hosts the site and runs the calculations, in the United States.
Stripe takes the payments. So that you can check your order before paying, Stripe also receives the first names, birth dates, times and places of both people and the chosen bond: it shows them on its payment page and keeps them with the payment record.
An automated writing provider, based in the United States, receives, to write a report or an answer: the first names and genders of both people, their birth dates, whether the time is known, the calculated facts and your questions. It receives neither the birth time nor the birth place, nor your email address.
The site’s fonts are loaded from Google’s servers, which receive your IP address.
Nothing is sold or used for advertising.
Transfers outside the European Union
Vercel, Stripe, Google and the writing provider are based in the United States. These transfers are covered by the safeguards provided by the GDPR: the EU–US Data Privacy Framework for providers that adhere to it, or the European Commission’s standard contractual clauses.
How long
Your account, profiles and reports: as long as your account exists. You can delete it yourself at any time, from the account menu: everything goes at once. On request, we erase them within one month.
An order: unpaid, it is erased after 7 days; paid, it belongs to your account and disappears with it.
Payment records: ten years, as required for bookkeeping, even after the account is deleted, from which they are then detached.
What your browser keeps: until you clear it.
Your rights
You can ask to access your data, correct it, erase it, receive it in a portable format, restrict its processing, or object to it, by writing to vianney.bertrand@gmail.com. We answer within one month.
You can also lodge a complaint with the CNIL, the French data protection authority, at cnil.fr.
Security
Each account can only read its own profiles and reports: the database checks this on every request.