myastro.report

Privacy notice

WEBVAY DIGITAL MEDIA EST., Office G01-628, Dubai Investment Park 1, Dubai, United Arab Emirates, is responsible for the personal data processed on this site. Contact: r.parlak@webvay.ae

This notice is written under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Where a customer is in the European Union, the General Data Protection Regulation applies to that sale as well; the section For customers in the European Union below sets out what that adds.

What we collect, and why

To produce a report

• Name, as you enter it — the numerology is calculated from its letters, and the report is addressed to you.
• Date, time and place of birth — the chart cannot be cast without them.
• The language you choose, and any question you ask.

This is the whole purpose of the site. Without these there is no report.

To deliver it and answer questions about it

• E-mail address, if Stripe passes one on from the payment.

To take payment

Payment is handled by Stripe. Card details are entered on Stripe's own page and never reach our server. We receive the session, the amount, the currency and, where given, an e-mail address. Nothing in our records contains a card number.

To count visitors

Each page view is recorded as a row holding: the path, whether the visitor was on a phone or a desktop, the site that linked here (host only, never the full address), the language, the date, and a visitor identifier that is a truncated hash of a salt that changes every day, the IP address and the browser string.

The IP address itself is not stored. Because the salt rotates daily, the same person hashes to a different value tomorrow, so the file cannot be turned into a history of anyone. Six fields are written and no others.

Who else sees your data

• Stripe (Stripe Payments Europe, Ltd. and affiliates) — payment processing. Stripe is a controller in its own right for the payment; see stripe.com/privacy.
• Anthropic (Anthropic PBC, USA) — the report text is written by a large language model operated by Anthropic. Your birth details and name are sent for that purpose. Anthropic acts as a processor on our instructions and does not use this material to train models.
• The hosting provider on which this site runs.

We do not sell personal data, and we do not pass it to anyone else.

How long we keep it

• The finished report — 14 days from purchase, then deleted automatically.
• A share link you create — 14 days, and never longer than the report itself.
• The order record (name, birth details, e-mail) — kept encrypted, for support and accounting.
• Page-view rows — no personal data in them; kept for statistics.

The stored report and the order record are encrypted at rest with AES-256-GCM. Only the session identifier, the report type, the language, the currency, the amount and the dates are readable without the key.

Download your report within the 14 days. After that it is gone from our side and cannot be recovered — we would have to produce it again.

Your rights

You can ask us to:

• tell you what we hold about you,
• correct it,
• delete it — we do this on request, and it removes the stored report, the order record and any error log entry that names you,
• restrict or object to a particular use,
• receive it in a portable form.

Write to r.parlak@webvay.ae. We answer within 30 days.

Under UAE law you may also complain to the UAE Data Office.

Where this product comes from

This is a product of the United Arab Emirates.

• The seller is WEBVAY DIGITAL MEDIA EST., licensed in Dubai and established there.
• The contract is concluded in Dubai and governed by the law of the United Arab Emirates.
• The chart calculation, the assembly of your report and its storage all take place on our own server, operated from the United Arab Emirates.
• Support and erasure requests are handled in Dubai.

Two parts of the service are not in the UAE, and we say so rather than round it off:

• Payment is handled by Stripe, in the European Union and the United States. Card details never reach our systems.
• The report text is written by a large language model operated by Anthropic in the United States. Your name and birth details are sent there for that purpose and for nothing else.

For customers in the European Union

If you are in the EU, the GDPR applies to your purchase regardless of where we are established (Art. 3(2) GDPR).

Legal bases. Producing and delivering the report is performance of a contract (Art. 6(1)(b)). Counting visitors and keeping records for accounting rest on our legitimate interests (Art. 6(1)(f)) in running and improving the shop.

Special category data. Birth details are not special category data under Art. 9. What is read from them is an interpretation offered as such, not a statement about your health, beliefs or anything else in that article.

Transfers outside the EU. Neither the United Arab Emirates nor the United States has an adequacy decision covering this processing. Both transfers are made on the basis of the Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), module two, controller to processor:

• Anthropic PBC — the Standard Contractual Clauses incorporated in Anthropic's data processing addendum, which forms part of our commercial agreement with them.
• The hosting provider — the Standard Contractual Clauses incorporated in its data processing agreement.

A transfer impact assessment has been carried out for both. The material transferred is a name, a date, a time and a place of birth; no payment details and no identity documents leave our systems, and payment data never enters them.

Representative in the Union. *[To be completed — see the legal notice.]*

Supervisory authority. You may complain to the supervisory authority of your habitual residence or place of work.

Cookies

This site sets no advertising or tracking cookies. It uses:

• a cookie carrying your session with the checkout, where one exists,
• an administrative cookie for the operator's dashboard.

Neither is used to follow you across other sites.

Changes

If this notice changes, the version on this page is the one that applies. Reports already bought keep the terms they were bought under.