Privacy Policy

Last updated: 28 September 2026

The controller of the data Own Sky collects — your account, birth details, reports and conversations with the astrologer — is the operator of Own Sky: [OWN SKY OPERATOR] (“Own Sky”, “we”). Payment data is collected by Dodo Payments, the seller in every purchase, and processed under its own privacy policy (see sections 6 and 7). For any questions about your data, write to [email protected].

1. What data we process

Depending on how you use Own Sky, we may process:

identification and contact details, such as your name and email address;
birth details: date, time and place of birth;
details you enter for another person in products that need two charts;
account data, purchased reports and purchase history;
a record of the consent you give before paying: when it was given and which text was accepted;
messages you write in the conversation with the astrologer (“Ask the astrologer”);
your email address, if you sign up for updates;
technical data, such as IP address, device type, browser, logs and security events;
communication with support and information you send us yourself.

We do not use analytics or user-tracking tools. If we introduce them, we will first update this policy and, where required, ask for your consent.

Own Sky does not ask you to enter data about your health, political views, religion, sex life or other special categories of data. Please do not enter such data in free-text fields or messages unless it is necessary to handle a specific request and there is an appropriate legal basis.

2. Why we process data

We may process data in order to:

calculate the astrological chart and create purchased or free content;
create and maintain your user account;
process purchases, link purchases to an account and provide customer support;
prevent fraud and misuse and protect the security of the system;
comply with tax, accounting, consumer protection and other legal obligations;
measure and improve the product where there is an appropriate legal basis for such processing;
send newsletters and marketing messages only when we have appropriate consent or another permitted legal basis.

3. Legal basis

Depending on the purpose, processing is based on the performance of a contract or pre-contractual steps requested by the user, compliance with a legal obligation, legitimate interest (for example security and preventing misuse, where the legal conditions are met), or consent, for example for certain marketing features.

4. Other people’s data

In products such as the relationship analysis you can enter another person’s details. That data is processed to create the specific report. The user who provides it is responsible for having permission or another appropriate legal basis to provide it. Own Sky must not be used for covert profiling or for making decisions that would significantly affect another person.

5. Automated systems and AI

Parts of the Own Sky process use automated systems and artificial intelligence models to write the text of the interpretation, based on previously calculated astrological data and structured rules. These systems are not intended to make decisions that produce legal or similarly significant effects for the user. A report is informational and interpretive content.

We share data only as far as needed to provide the service, with reliable processors and partners. We do not sell personal data to advertisers. They are:

Cloudflare — hosting of the site and servers, storage of finished reports, PDF creation and protection against misuse;
Supabase — database (account, people, purchases, reports) and account sign-in;
Anthropic — the artificial intelligence model that writes the report text and the answers in the conversation with the astrologer; it receives the name you enter, grammatical gender (for correct Serbian text), the calculated astrological positions and, in a conversation, your questions;
Resend — sending email (sign-in code and link, purchase confirmation with access, notice that a report is ready);
Dodo Payments — the seller and merchant of record in every purchase; it receives from us the buyer’s email and what is being bought, and collects payment data itself, under its own privacy policy;
Google — sign-in with a Google account, if you choose it; the site’s fonts are loaded from Google’s servers, so Google sees your IP address when they load;
Open-Meteo — birth place search: the place name you type is sent to this service to find its coordinates.

7. Payment

Payment card data is processed by Dodo Payments with its payment processing partners. Own Sky does not see or store your card details: from Dodo Payments we receive only the payment confirmation, amount, currency and the buyer’s email address. Dodo Payments processes the data it collects at payment under its own privacy policy.

8. International data transfers

Most of the providers listed above are based outside Serbia, most often in the United States, so some data may be processed outside Serbia and/or the European Economic Area. Where required, appropriate transfer mechanisms and contractual, technical and organisational safeguards are applied in accordance with applicable law.

9. How long we keep data

We keep data only as long as necessary for the purpose for which it was collected, to maintain the account and purchased reports, handle requests, ensure security and meet legal obligations. When data is no longer needed, we delete or anonymise it unless the law requires longer retention. Specifically:

account, saved people, purchases, reports and conversations with the astrologer — for as long as the account exists; if you ask for deletion, we delete them within 30 days, except data we must keep by law;
purchase without an account — the person’s details and the report are kept with the purchase so that you can access it and save it to an account; we delete them at your request, within 30 days;
free relationship preview — the birth details of the two people are deleted automatically 30 days after the preview, unless the preview turns into a purchase;
sign-in — a session expires after 30 days of inactivity;
email for updates — until you ask for it to be deleted;
payments and receipts — kept by Dodo Payments under its own rules and applicable law; we keep a record of the purchase (product, amount, currency, time, email and the consent given before paying) for as long as the purchase or account exists, and longer where the law requires it;
technical records — as long as needed for security and fixing errors;
data in your browser — stays on your device until you delete it (see section 12).

10. Your rights

Under applicable law you may have the right to:

receive information about processing and access your data;
correct inaccurate or complete incomplete data;
request deletion where the conditions are met;
request restriction of processing;
object to certain processing;
receive your data in a portable format where the conditions are met;
withdraw consent for future processing where processing is based on consent;
lodge a complaint with the competent data protection authority (in Serbia: the Commissioner for Information of Public Importance and Personal Data Protection).

To exercise your rights, write to [email protected]. We may ask for reasonable verification of your identity before acting on a request.

11. Security

We apply reasonable technical and organisational measures to protect data, including access control, account protection, secure communication and system monitoring. No system is absolutely secure, but we will respond to incidents in line with our legal obligations.

12. Cookies and browser storage

We use only cookies that are necessary for the site to work: the sign-in cookie (os_s), which keeps you signed in, and a short-lived cookie (os_g), which protects sign-in with Google and is deleted after ten minutes. In your browser’s storage (localStorage) we keep your settings (language, tier), your calculated chart, readings you have opened and access to a purchase made without an account, so that you do not have to enter them again.

We do not use analytics or advertising cookies, and therefore no cookie consent notice. If that changes, we will first update this policy and ask for consent where required.

13. Users in the EU

If Own Sky specifically offers services to people located in the European Union, the GDPR may apply even though the controller is not established in the EU. In that case the additional GDPR obligations will also apply, including appropriate transparency, the rights of individuals and data transfer mechanisms.

14. Contact

[email protected]
[OWN SKY OPERATOR]