Privacy policy · Kefero

Who processes your data

The data controller is Visualsense, a sole proprietorship with registered office at Via Santa Maria di Porta 27, 03037 Pontecorvo (FR), Italia, VAT number 02637440609.

For any request concerning your data write to info@visualsense.it. We reply within thirty days, as required by Article 12 of Regulation (EU) 2016/679.

What we collect

We collect only what is needed to give you what you asked for, plus — only with your consent — some data on how you use the site. No data bought from third parties.

Your email address, when you create an account or buy a coin.
Your password, stored hashed and not reversible: not even we can read it.
Your Google identifier, if you choose to sign in with Google.
The language you use the site in.
For each reading: the date, time and place of birth you enter, together with the matching coordinates and time zone. They are used to calculate the reading and for nothing else.
Payment data: amount, currency, outcome and the confirmation we receive from PayPal. Your card details never pass through us.
Some of the actions you take on the site: how many readings you opened, how many you shared, how many gifts you sent. To understand what works and what does not.
If you arrive through an affiliate’s link, we record that the purchase came through them, so we can credit their share. The affiliate sees how many purchases they brought and how much they earned: they do not see who you are, do not receive your address, and do not know what you bought.
Only with your consent: how you browse the pages (clicks, scrolling, time), collected by Microsoft Clarity, and the visits and purchases linked to our ads, measured by Meta. See the Cookies page.

We do not collect data revealing ethnic origin, political opinions, religious beliefs, health or sexual life. The birth date you enter is identifying data, not health data.

Why we collect it, and on what legal basis

To perform the contract you entered into with us, that is, to deliver the reading you paid for (Art. 6(1)(b) GDPR). Without this data the reading cannot be calculated.
To comply with Italian tax and accounting obligations (Art. 6(1)(c) GDPR): invoices and payment records must be kept by law.
For our legitimate interest in keeping the service secure and understanding how it is used (Art. 6(1)(f) GDPR), with measures that keep the data processed to a minimum.
With your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), for browsing statistics and to measure our ads. You can withdraw it at any time from the «Your privacy choices» link at the bottom of every page, with no effect on the service.

Who receives it

Some providers process data on our behalf, as processors. None of them use it for their own purposes.

Aruba S.p.A. hosts the site and the database. The servers are located in Italy.
PayPal (Europe) S.à r.l. et Cie, S.C.A. handles payments. It receives your email address and the amount.
Google Ireland Limited, only if you choose to sign in with Google, and only to verify that the address is yours.
OpenAI Ireland Limited and DeepSeek write the text of the reading. They receive the result of the calculation (the cards drawn, or the planetary positions) and the question chosen. They do not receive your name, your email address or your place of birth.
OpenStreetMap Foundation and Komoot GmbH turn the place name you type into coordinates. They receive only that name.
Microsoft Ireland Operations Limited (Clarity) — only with your consent to statistics: it receives browsing data, with the text of readings and birth details hidden.
Meta Platforms Ireland Limited (Facebook, Instagram) — only with your consent to marketing: it receives visits and, for purchases, the amount and your email address in irreversibly encrypted form (hash), to link them to our ads. For this data Meta and we are joint controllers; the agreement is Meta’s addendum for business tools (facebook.com/legal/controller_addendum).

We do not sell your data to anyone. Ever.

Transfers outside the European Union

Some of our providers process data outside the European Economic Area, and we want you to know exactly how.

OpenAI also operates in the United States. The transfer takes place on the basis of the standard contractual clauses approved by the European Commission in Decision 2021/914.

DeepSeek operates in the People’s Republic of China, a country for which the European Commission has not adopted an adequacy decision. The transfer takes place on the basis of the standard contractual clauses. Please note that the level of data protection in China may not be equivalent to the European one.

To both we send only the result of the calculation and the question: never your email address, your name or your place of birth.

Microsoft and Meta, only if you have given consent, may process data in the United States. Both participate in the EU-U.S. Data Privacy Framework, found adequate by the European Commission in its decision of 10 July 2023.

How long we keep it

Account data and your readings: for as long as your account exists. If you close it, they are gone.
Payment records: ten years from registration, as required by Article 2220 of the Italian Civil Code. We cannot delete them sooner, not even at your request: when you close your account they remain as accounting rows with no reference to you.
Provisional accounts, created by a purchase without registration or by a gift link, are removed after ninety days if they have no readings and no coins left.
Your cookie choice: six months, then we ask again.

Your rights

You may ask, at any time and without giving reasons:

to know what data we hold about you and to receive a copy (Arts. 15 and 20 GDPR);
to have it corrected, if it is wrong (Art. 16);
to have it erased (Art. 17): you can do this yourself from your account area, with «Close your account»;
to restrict processing or to object (Arts. 18 and 21).

Write to info@visualsense.it. If you believe we are handling your data improperly you may contact the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of the country where you live.

Minors

The service is not intended for anyone under eighteen and we do not knowingly collect data from minors. If we find that we have, we delete it.

Changes

If we change this policy, we will change the date at the top too. Changes affecting how we handle your data will be sent to you by email before they take effect.