이 법적 페이지는 현재 영어로만 제공됩니다. 문의 사항은 daniel@garden-stack.com 으로 연락해 주세요.

Privacy Policy

1. Who We Are

ZODAIYA is operated by Fontaine Farm SRL (TVA BE 1004.190.223), Greenbizz.brussels, Rue Dieudonné Lefèvre 17, 1020 Bruxelles, Belgium. We provide daily horoscopes and astrology-related blog content for entertainment purposes.

Data Controller: Fontaine Farm SRL — daniel@garden-stack.com

2. Data We Collect

You can browse our horoscopes and blog without creating an account. We collect the following categories of data:

• Account data: If you create an account, we store your email address, a securely hashed password (never the plaintext), and an optional display name. We also record a timestamp, IP address, and browser user-agent when you accept these Terms and this Privacy Policy, as an audit record of your consent.
• Birth data (special category): If you complete the astrology quiz or generate a personalised reading, we store the birth date, birth time, and birth place (including the resolved coordinates and time zone) you provide. We treat these as special-category data under Article 9 GDPR; we collect them only after you give explicit consent, and they are encrypted at rest.
• Reading & journal content: Saved readings, mood logs, and dream-journal entries you create. Free-text journal notes and dream descriptions are encrypted at rest.
• Payment & subscription data: If you purchase a subscription, payment is processed by Stripe. We do not receive or store your full card number. We store a Stripe customer/subscription identifier and your plan, status, and renewal dates so we can manage your subscription.
• Usage data: Pages visited, time spent, browser type, device information, and interaction diagnostics — collected via server logs and optional analytics tools according to your region and preferences.
• Cookies: We use essential cookies for site functionality and optional analytics cookies (see our Cookie Policy).
• IP address: Processed to determine your approximate geographic region (for cookie-consent compliance), for security purposes, and as part of the consent audit record described above.

3. How We Use Your Data

• To create and operate your account and authenticate you
• To generate the personalised horoscopes, readings, and astrology content you request
• To process payments and manage your subscription (via Stripe)
• To send you account and service emails (for example email verification and password reset)
• To provide and improve our horoscope and blog content
• To analyze site usage and optimize performance
• To detect and prevent abuse or security threats
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your data based on:

• Contract: To create your account and provide the readings and subscription features you request
• Explicit consent (Article 9): For your birth data and any other special-category data; you can withdraw this consent at any time
• Consent: For analytics and non-essential cookies (you can withdraw consent at any time)
• Legitimate interest: Site functionality, security, and abuse prevention
• Legal obligation: Where we must retain certain records (for example payment records)

5. Data Sharing

We do not sell your data. We share data only with the service providers (processors) needed to operate the service:

• Hosting provider: Vercel Inc. (processes requests on our behalf)
• Payment processor: Stripe (processes your payment details directly; see Stripe's privacy policy)
• Email provider: Our transactional email provider, to deliver account emails such as verification and password reset
• Analytics and diagnostics providers: Used only for site performance, aggregate usage, and usability diagnostics according to your region and preferences
• Image providers: Unsplash, Pexels, Pixabay (for blog hero images — no user data is shared)

6. Data Retention

We retain your account, birth data, readings, and journal entries for as long as your account remains active. When you delete your account, this data is deleted. You can also export your data at any time from your account settings. Payment and subscription records may be retained where required to meet legal obligations. Server logs are retained for up to 30 days. Analytics data is aggregated and anonymized. Cookie consent preferences are stored locally in your browser.

7. Your Rights

Under GDPR and applicable privacy laws, you have the right to:

• Access the data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

If you have an account, you can export all of your data or permanently delete your account directly from your account settings. You may also exercise any of these rights by contacting us at the address below.

For Belgium, the supervisory authority is the Autorité de protection des données (APD/GBA), Rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be

8. International Transfers

Our hosting infrastructure (Vercel) operates globally. Data may be processed in the United States or other countries. Vercel maintains appropriate safeguards for international data transfers.

9. Children's Privacy

Our service is not directed at children under 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

11. Contact

For privacy-related inquiries:

Fontaine Farm SRL
Greenbizz.brussels, Rue Dieudonné Lefèvre 17
1020 Bruxelles, Belgium
Email: daniel@garden-stack.com