Privacy Policy

1. Data We Collect

Birth data (date, time, place) you enter for chart calculations · Email and authentication identifiers when you create an account · Test answers and AI chat history when you use those features · Subscription and billing information (collected and processed by our payment processors, not stored on our servers) · Standard web analytics (anonymised IP, page views, browser type) via Google Analytics 4.

2. How We Use Your Data

To provide the calculation, test and AI features you request · To run your subscription (only billing-related data, via processors) · To improve the service through aggregated analytics · To send transactional emails (trial reminders, password resets, important notices) and, only with your consent, marketing emails. We do not sell your data to third parties.

3. Payment Processors as Data Sub-Processors

When you start a subscription we share necessary identifiers (email, name, billing country) with our Merchants of Record so they can process your payment and issue tax invoices. Customers from India: Dodo Payments (India). Customers from all other countries: Paddle.com Inc. (USA) or its EU affiliate. These processors operate under their own privacy policies and applicable data-protection laws. We do not see or store your full card number.

4. Other Third-Party Services

• Google Analytics 4 — anonymised usage analytics
• Google Vertex AI (Gemini) — processes your chat messages to generate AI responses (US/global regions)
• Supabase (USA) — database hosting and authentication
• Cloudflare / Vercel — content delivery and DDoS protection

5. Cookies

We use essential cookies (session, language preference) and analytics cookies (Google Analytics). Payment processors set their own cookies during checkout. You can disable non-essential cookies in your browser settings; the calculator and free features will keep working.

6. Cross-Border Data Transfers

StarMeet is operated from Spain (EU). Some processors (Google, Supabase, Paddle) operate in the United States. Such transfers are protected by standard contractual clauses and the EU-US Data Privacy Framework where applicable. By using the service you consent to these transfers.

7. Data Retention

Account data is kept while your account is active and for up to 24 months after deletion (to handle disputes and meet tax-record obligations). Anonymised analytics are kept longer. You can request earlier deletion by emailing contact@star-meet.com.

8. Your Rights — GDPR (EU) and DPDPA (India)

Under the EU GDPR you have the right to access, correct, port, delete and restrict processing of your personal data, and to lodge a complaint with the Spanish AEPD. Under India's Digital Personal Data Protection Act (DPDPA, 2023) Indian residents have parallel rights and may contact our Data Protection Officer at contact@star-meet.com. We respond to verified requests within 30 days.

9. ARCO Rights (Mexico — LFPDPPP)

If you are a resident of Mexico, in addition to the GDPR/DPDPA rights described above you also have the ARCO rights under Mexico's LFPDPPP (Federal Law on the Protection of Personal Data Held by Private Parties): Access to your personal data, Rectification of inaccurate data, Cancellation (deletion) where applicable, and Opposition to specific uses. To exercise them, email privacy@star-meet.com with a copy of an official ID and the data you are acting on. We reply within 20 business days as required by article 32 of the LFPDPPP. If you feel your rights have not been respected you may file a complaint with INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales — www.inai.org.mx).

9. Children

StarMeet is intended for users aged 18 and over. We do not knowingly collect data from children under 18. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this policy periodically. Material changes will be announced in-app and emailed to subscribers at least 14 days before taking effect.