Privacy Policy
Last updated: 15 October 2026
This policy explains what personal data AstroSynth collects, why, who receives it, how long it is kept and what rights you have. It applies to astro-synth.com and to the emails we send.
1. Who we are
AstroSynth is operated by:
Serphot Media Group OÜ
Registry code 17221337
Sepapaja tn 6, 15551 Tallinn, Estonia
VAT number EE102852169
Email: support@astro-synth.com
Serphot Media Group OÜ is the controller of the personal data described here. For any privacy question or request, write to support@astro-synth.com.
2. The short version
- To make a compatibility report we need the first names, birth dates, birth times (if known) and birth places of two people, and your email address.
- We keep this data to produce the report, deliver it and resend it if you ask. We delete it 6 months after delivery.
- Card payments are handled by Stripe. We never see or store your full card number.
- The free calculators and tests run entirely in your browser. What you type into them is not sent to us.
- If you asked for a free relationship overview on gosta.ua, we use your email address and the two names and birth dates to prepare and send it, may send one reminder and one invitation to the Cosmic Wheel (one click stops them), and erase them 6 months later.
- We send marketing emails only if you asked for them, and every such email has an unsubscribe link.
- We do not sell personal data.
3. What we collect and why
3.1. When you order a report
| Data | Why we need it | Legal basis |
|---|---|---|
| First names of both people | To address the report | Performance of the contract with you (GDPR Art. 6(1)(b)) |
| Birth date, birth time (if known), birth city with its coordinates and time zone, for both people | To calculate the two birth charts and the aspects between them | Performance of the contract |
| Your email address | To deliver the report and to answer you | Performance of the contract |
| Report language | To write the report in your language | Performance of the contract |
| Payment reference, amount, currency, country of the card, time of payment | To confirm the payment and keep accounts | Performance of the contract; legal obligation (accounting law) |
| The finished report (PDF) | To deliver it and to resend it on request | Performance of the contract |
We do not ask for and do not need surnames, postal addresses, phone numbers or documents.
Data about another person. A compatibility report needs the birth details of your partner or another person. By entering them you confirm that you are allowed to share them with us for this purpose. We use that data only to produce your report. The other person may contact us at any time to learn what we hold about them or to have it deleted (section 9).
3.2. Payments
Payments are processed by Stripe. Your card details go directly from your browser to Stripe; we receive only a confirmation with the amount, a payment reference and the country of the card. Stripe also processes data as an independent controller, for example to prevent fraud and to meet its own legal duties. See Stripe's Privacy Policy.
3.3. Free calculators and tests
The calculators and tests under /free-tools calculate everything in your browser. Names, dates, ratings and answers you enter there are not transmitted to our servers and are not stored after you leave the page.
3.4. The Cosmic Wheel promotion
This applies only if you take part in the promotion.
| Data | Why | Legal basis |
|---|---|---|
| A random identifier stored in your browser | To remember your prize so that reloading the page does not change it, and to apply the limits of the promotion | Legitimate interest in running a fair promotion (Art. 6(1)(f)) |
| The prize you won, the time, the page you came from | To issue the right promo code and to measure the promotion | Legitimate interest |
| Your email address | To send you the promo code and the reminder before it expires | Performance of the promotion you asked to take part in (Art. 6(1)(b)) |
| Your consent to offers by email, with its wording and time | To send you further AstroSynth offers | Consent (Art. 6(1)(a)) |
| IP address in shortened or hashed form | To limit abuse (too many spins from one source) | Legitimate interest |
3.5. Emails
- Service emails: your report, payment problems, your promo code and its reminder, answers to your questions. These are part of the service you requested.
- Marketing emails: news and offers from AstroSynth. We send them only if you gave consent. You can unsubscribe at any time with the link in every email or by writing to us; this does not affect the service emails for an order in progress.
We record whether an email was accepted by the receiving mail server, so that we can retry or tell you if delivery failed.
3.6. When you write to us
If you email us we keep the correspondence to answer you and to have a record of what was agreed. Legal basis: legitimate interest in handling requests, or performance of the contract when the request concerns an order.
3.7. Technical data and analytics
- Server logs. Our web server records the IP address, time, requested page and browser type of each request. We use this for security and troubleshooting (legitimate interest). Logs are deleted after 14 days.
- Analytics. With your consent we use Google Analytics 4 to count visits and see which pages and tools are used. It sets cookies and sends usage data to Google. Without consent it is not loaded. Details are in the Cookie Policy.
3.8. Free relationship overview requested on gosta.ua
The site gosta.ua offers a free short relationship overview prepared by AstroSynth. If you asked for it there, that site passes your request to us and we prepare the overview and email it to you. If you do not open it within two days, we send one reminder; if you open it, about four days later we send one email inviting you to the Cosmic Wheel, a discount on our full report. That is all: at most three emails per overview, and none after you use the "Send me no more emails" link that each of these emails carries.
| Data | Why | Legal basis |
|---|---|---|
| Your email address | To send you the overview | Providing the service you asked for (Art. 6(1)(b)) |
| First names and birth dates of both people | To prepare the overview | Providing the service you asked for |
| Language, time of the request, the site it came from, whether the email was accepted | To write in your language and to send the overview once, not twice | Providing the service; legitimate interest in not writing to you repeatedly |
| Your email address, for the reminder and the invitation | To remind you of the overview once and to invite you once to the Cosmic Wheel | Legitimate interest (Art. 6(1)(f)); you can object at any time with the link in the email (Art. 21) |
| Whether and when you opened the overview page (counted in the browser only; the emails carry no tracking pixels) | To choose between the reminder and the invitation and to send each at most once | Legitimate interest in following up a service you asked for, limited to two emails (Art. 6(1)(f)) |
| Your request for no more emails | To respect it, for the overview and the Cosmic Wheel alike | Legal obligation and legitimate interest |
From the request we take only these fields. The overview is prepared by fixed rules from the two birth dates: no artificial intelligence and no outside service takes part. The email is sent from our own mail server and contains a personal link to a page with the overview on astro-synth.com. Anyone who has the link can open that page, so pass it on only to people you trust.
Six months after the overview is sent we erase the email address, the names and the birth dates, and the link stops working. What remains is a record without them (a one-way fingerprint of the request, its date and status), kept so that the same request is not served twice. Technical data collected by the form on gosta.ua stays with that site and is covered by its own privacy notice.
4. Artificial intelligence
Part of the text of a report is written by an AI language model (OpenAI) on the basis of the astrological calculations for your two charts. The birth data and first names are sent to the model for this purpose only. No decision with legal or similarly significant effect is made about you by automated means.
5. Who receives the data
We share personal data only with companies that help us provide the service, and only what each of them needs:
| Recipient | What it does for us | What it receives | Where |
|---|---|---|---|
| Hetzner Online GmbH | Hosts our servers | Everything stored on the servers | Finland (EU) |
| MongoDB, Inc. (MongoDB Atlas) | Stores order records | Order data | Sweden (EU) |
| Cloudflare, Inc. | Delivers the site, protects it from attacks, stores files | IP address and request data of visitors; stored files | Global network; EU; USA |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Card payments | Payment data, email for the receipt | Ireland; USA |
| OpenAI | Writes parts of the report text | First names, birth data, chart calculations | USA |
| Astrologer API (the Kerykeion project), reached through the RapidAPI marketplace | Calculates planetary positions and aspects | First names, birth data, coordinates | USA (RapidAPI marketplace) |
| GeoNames (Unxos GmbH) | Suggests a city as you type its name in the order form | The text you type, your IP address | Switzerland |
| Google Ireland Ltd. / Google LLC | Analytics, only with your consent | Usage data, cookie identifiers | Ireland; USA |
We do not sell personal data and do not pass it to advertisers. We may disclose data where the law requires it, for example to tax or law-enforcement authorities with a valid request.
6. Transfers outside the European Economic Area
Some of the recipients above are in the United States or Switzerland. Where data leaves the EEA, the transfer relies on an adequacy decision of the European Commission (Switzerland; US companies certified under the EU–US Data Privacy Framework) or on the Commission's standard contractual clauses. You can ask us for details of the safeguard used for a particular recipient.
7. How long we keep data
| Data | Kept for |
|---|---|
| Order data, birth details and the finished report | 6 months after the report is delivered, then deleted |
| Orders that were started but not paid | 30 days |
| Free relationship overview: email address, names and birth dates | 6 months after the overview is sent, then erased |
| Payment and accounting records (amount, date, payment reference, country) | 7 years, as required by Estonian accounting law |
| Promotion data without an email address | 90 days |
| Email address and consent record for marketing | Until you unsubscribe; after that we keep only the address on a suppression list so that we do not write to you again |
| Correspondence with support | 2 years after the last message |
| Server logs | 14 days |
If you want your report data deleted earlier, write to us and we will do it, except for the records the law obliges us to keep.
8. Security
The site is served only over HTTPS. Access to servers and databases is limited to the people who need it. Card data never reaches our servers. No system is perfectly secure; if a breach occurs that is likely to put you at risk, we will inform you and the supervisory authority as the law requires.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to processing based on our legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time (for marketing emails and analytics), without affecting what was done before;
- lodge a complaint with a supervisory authority.
To use these rights, write to support@astro-synth.com. We answer within one month. We may ask for information that confirms your identity, for example a reply from the email address used for the order.
Our supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, info@aki.ee, www.aki.ee. You may also complain to the authority of the country where you live.
10. Children
AstroSynth is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has given us personal data, tell us and we will delete it.
11. Changes
When we change this policy we publish the new version on this page with a new date. If a change significantly affects how we use data we already hold, we will tell you by email where we have your address.