Privacy Policy

The data controller under GDPR is: Aura Horoscope / SkriptLab Oy
Email: hello@aurahoroscope.com

Account data: your email address and display name, used to identify your account and send service communications.

Reading inputs: date of birth, approximate birth time, and personal preferences such as life stage and current chapter. Used solely to generate your reading. Note: date of birth is not a special category of data under GDPR. We do not collect health data, ethnic origin, religious beliefs, or other special category data.

Payment data: processed entirely by Stripe. We receive only a transaction confirmation and tokenised payment reference. We never store your card number, CVV, or expiry date.

Usage data: pages visited, features used, reading history. Used to improve the Service.

Technical data: IP address, browser type, device type, operating system. Used for security and service operation.

Communications: if you contact us, we retain correspondence to resolve your enquiry.

Contract performance: account data, reading inputs, and payment data are processed to provide the Service you signed up for.

Legitimate interests: usage and technical data are processed to maintain and improve the Service and prevent fraud.

Legal obligation: certain data is retained to comply with Finnish tax law.

Consent: marketing emails require your explicit opt-in. You may withdraw at any time.

We use your data to: create and manage your account; generate personalised readings; process payments; send transactional emails; send marketing emails if you have opted in; detect and prevent fraud; improve the Service; and comply with legal obligations. We do not use your data for automated decision-making with significant legal effects.

Stripe, Inc.: payment processing under their own GDPR-compliant framework.

AI reading generation. Your reading inputs (date of birth, preferences, selected domains) are sent to the AI service API. No personally identifying information (name or email) is included in API requests. We configure our AI service APIs to ensure your reading inputs are not used to train AI models.

Email provider for transactional and marketing emails.

Analytics for understanding Service usage.

We do not sell, rent, or trade your personal data. We may disclose data if required by law or valid legal request.

Some providers, including Stripe, are US-based. Transfers outside the EEA are covered by Standard Contractual Clauses approved by the European Commission.

Account data: duration of account plus 12 months after deletion.

Reading history: deleted when you delete your account.

Payment records: 7 years, to comply with Finnish accounting law.

Marketing consent records: until withdrawal plus 3 years.

Support correspondence: 3 years after resolution.

Essential cookies are required for the Service to function and cannot be disabled. Analytics cookies, if used, require your consent and can be withdrawn at any time. We do not use advertising cookies or share cookie data with ad networks.

You have the right to: access your data; correct inaccurate data; erasure (we comply within 30 days, subject to legal retention obligations); restrict processing; data portability; object to processing based on legitimate interests; and withdraw consent at any time.

To exercise any right, contact hello@aurahoroscope.com. We respond within 30 days and may ask you to verify your identity.

To complain to the supervisory authority: Office of the Data Protection Ombudsman (Finland), tietosuoja.fi, +358 29 566 6700.

The Service is for users aged 18 and over. We do not knowingly collect data from minors. Contact us to request deletion if you believe a minor has submitted data.

We may update this policy and will notify you by email and update the effective date. Continued use after changes constitutes acceptance.

For privacy questions or to exercise your rights:
hello@aurahoroscope.com
We respond within 30 days.

Supervisory authority: Office of the Data Protection Ombudsman, tietosuoja.fi