Privacy policy · Kefero

Who processes your data

The data controller is Visualsense, a sole proprietorship with registered office at Via Santa Maria di Porta 27, 03037 Pontecorvo (FR), Italia, VAT number 02637440609.

For any request concerning your data write to info@visualsense.it. We reply within thirty days, as required by Article 12 of Regulation (EU) 2016/679.

What we collect

We collect only what is needed to give you what you asked for. No advertising profiles, no data bought from third parties.

Your email address, when you create an account or buy a coin.
Your password, stored hashed and not reversible: not even we can read it.
Your Google identifier, if you choose to sign in with Google.
The language you use the site in.
For each reading: the date, time and place of birth you enter, together with the matching coordinates and time zone. They are used to calculate the reading and for nothing else.
Payment data: amount, currency, outcome and the confirmation we receive from PayPal. Your card details never pass through us.
Some of the actions you take on the site: how many readings you opened, how many you shared, how many gifts you sent. To understand what works and what does not.

We do not collect data revealing ethnic origin, political opinions, religious beliefs, health or sexual life. The birth date you enter is identifying data, not health data.

Why we collect it, and on what legal basis

To perform the contract you entered into with us, that is, to deliver the reading you paid for (Art. 6(1)(b) GDPR). Without this data the reading cannot be calculated.
To comply with Italian tax and accounting obligations (Art. 6(1)(c) GDPR): invoices and payment records must be kept by law.
For our legitimate interest in keeping the service secure and understanding how it is used (Art. 6(1)(f) GDPR), with measures that keep the data processed to a minimum.

Who receives it

Some providers process data on our behalf, as processors. None of them use it for their own purposes.

Aruba S.p.A. hosts the site and the database. The servers are located in Italy.
PayPal (Europe) S.à r.l. et Cie, S.C.A. handles payments. It receives your email address and the amount.
Google Ireland Limited, only if you choose to sign in with Google, and only to verify that the address is yours.
OpenAI Ireland Limited and DeepSeek write the text of the reading. They receive the result of the calculation (the cards drawn, or the planetary positions) and the question chosen. They do not receive your name, your email address or your place of birth.
OpenStreetMap Foundation and Komoot GmbH turn the place name you type into coordinates. They receive only that name.

We do not sell your data to anyone, and we do not share it for advertising. Ever.

Transfers outside the European Union

Two of our providers process data outside the European Economic Area, and we want you to know exactly how.

OpenAI also operates in the United States. The transfer takes place on the basis of the standard contractual clauses approved by the European Commission in Decision 2021/914.

DeepSeek operates in the People’s Republic of China, a country for which the European Commission has not adopted an adequacy decision. The transfer takes place on the basis of the standard contractual clauses. Please note that the level of data protection in China may not be equivalent to the European one.

To both we send only the result of the calculation and the question: never your email address, your name or your place of birth.

How long we keep it

Account data and your readings: for as long as your account exists. If you close it, they are gone.
Payment records: ten years from registration, as required by Article 2220 of the Italian Civil Code. We cannot delete them sooner, not even at your request: when you close your account they remain as accounting rows with no reference to you.
Provisional accounts, created by a purchase without registration or by a gift link, are removed after ninety days if they have no readings and no coins left.

Your rights

You may ask, at any time and without giving reasons:

to know what data we hold about you and to receive a copy (Arts. 15 and 20 GDPR);
to have it corrected, if it is wrong (Art. 16);
to have it erased (Art. 17): you can do this yourself from your account area, with «Close your account»;
to restrict processing or to object (Arts. 18 and 21).

Write to info@visualsense.it. If you believe we are handling your data improperly you may contact the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of the country where you live.

Minors

The service is not intended for anyone under eighteen and we do not knowingly collect data from minors. If we find that we have, we delete it.

Changes

If we change this policy, we will change the date at the top too. Changes affecting how we handle your data will be sent to you by email before they take effect.