Privacy Policy

Last updated: [EFFECTIVE DATE]

1. Who we are & scope

Terra is an astrocartography web app that turns your birth details into personalised guidance about places. This policy covers the Terra website and app. It applies to visitors, registered account holders, and paying customers worldwide, and is written to meet the EU/UK GDPR and California CCPA/CPRA.

2. The data we collect

• Birth & profile details you enter — your name, birth date, birth time, and birth place, plus what you’re “reaching for” and where you stand today. Your birth time and place can reveal location; we treat this as sensitive and use it only to generate your reading.
• Account data — email address and authentication details when you sign up or sign in (including via Google, if you choose it).
• Payment data — when you purchase, our payment processor (Stripe) collects and processes your card details. We never see or store full card numbers; we retain only a customer/subscription reference and your entitlement (whether you have premium).
• Usage analytics — pages/features used, anonymous session identifiers, device/browser type, and coarse interaction events, to understand and improve the product.
• Session recordings — we may record anonymised interaction sessions (clicks, navigation, scrolling) to diagnose problems and improve usability. We aim to exclude the content you type where feasible.
• Error logs — technical error details (message, page, browser) captured to fix bugs; captured in a privacy-safe form without your personal content.

3. How & why we use it (legal bases)

• To generate your reading — processing your birth details is necessary to provide the service you request (contract; and, for sensitive inferences, your explicit consent given when you submit them).
• To run accounts & take payment — to authenticate you and fulfil purchases (contract; legal obligation for tax/accounting records).
• To improve Terra — analytics, session recordings, and error logs (legitimate interests, or consent where required for non-essential cookies/recording).
• To communicate — service emails (sign-in, receipts, important notices).

We do not sell your personal information, and we do not use your birth data for advertising.

4. AI processing

To write your personalised reading, the details you submit are sent to our AI provider (Anthropic, the “Claude” model) acting as our processor. They process the input to return your reading and, per our agreement, do not use it to train their models.

5. Service providers (processors)

We share the minimum necessary data with trusted providers who process it on our behalf:

• Supabase — database, authentication, and backend hosting.
• Vercel — website/app hosting and delivery.
• Stripe — payment processing.
• Anthropic — AI generation of your reading.
• Unsplash — place photographs (image delivery).

Some providers are located outside your country (e.g. the United States). Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

6. Cookies & similar technologies

We use essential storage to keep you signed in and remember your reading. Non-essential analytics and session-recording technologies are used only where permitted; EU/UK visitors are asked for consent before non-essential tracking runs. You can change your choice at any time and use your browser controls to clear local storage.

7. How long we keep it

We keep your account and reading data for as long as your account is active, then delete or anonymise it within a reasonable period after closure. Payment/transaction records are kept as long as tax and accounting law requires. Analytics and recordings are retained for a limited period and then aggregated or deleted.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your data, to object to certain processing, and to withdraw consent. California residents may request access/deletion and to opt out of “sharing”. To exercise any right, email ruben.aknin@gmail.com. You may also complain to your local data-protection authority.

9. Security

We use encryption in transit, access controls, and row-level security so your data is accessible only to you (and to us for support). No system is perfectly secure, but we work to protect your information and to notify you of a material breach where the law requires.

10. Children

Terra is not intended for anyone under 16 (or the age of digital consent in your country). We do not knowingly collect data from children.

11. Changes

We may update this policy; we’ll change the “last updated” date above and, for material changes, provide a more prominent notice.