Privacy Policy

(Effective Date: August 2026)

NativeAstro.com ("we", "us", "our") is a project of the ATRAC Institute, a brand of Silvan Aubert (UID: CHE-457.222.729), a sole proprietorship registered in the Swiss Commercial Register with address at Allmentweg 6, 5073 Gipf-Oberfrick, Aargau, Switzerland. We respect your privacy and are committed to protecting your personal data.

1. Data We Collect

a) Account Data
When you create an account, we collect your name, email address, and a password (stored as a hashed value). We may also store your preferred language and currency settings.

b) Birth Data
To generate reports, you provide birth details (date, time, and location of birth) for yourself and optionally for others. This data is essential to provide the service you request. You control what data you enter and may update or delete saved profiles at any time.

c) Purchase & Payment Data
We process payments through third‑party payment providers (Stripe, Wise, NOWPayments, and/or PayPal). We do not store your full credit‑card number, CVV, or other sensitive payment credentials. We retain transaction records (date, amount, package purchased, billing country, and transaction ID) for accounting, tax compliance, and audit purposes.

d) Usage & Technical Data
We automatically collect information about how you use the Site, including pages visited, time spent on each page, referring URLs, and interactions with features. This may include your IP address, browser type and version, operating system, device type, and approximate location (city/country level).

e) Communications & Marketing
If you subscribe to our newsletter or opt in to marketing communications, we collect your email address and preferences. You can unsubscribe at any time using the link in any marketing email or by updating your account settings.

2. How We Use Your Data

• To create, manage, and authenticate your account.
• To generate and deliver personalized astrological reports based on your birth data.
• To process payments, maintain your wallet balance, and manage your transactions.
• To send transactional emails (purchase confirmations, order updates, password resets, account notifications).
• To send you newsletters and promotional content if you have provided consent.
• To improve and optimize the Site by analyzing usage patterns, trends, and user preferences.
• To comply with legal obligations, including tax reporting, fraud prevention, and dispute resolution.

3. Legal Basis for Processing (EEA, UK & Swiss Users)

We process your personal data on the following legal grounds, in compliance with the GDPR and the Swiss nFADP:

• Performance of a contract: to provide the services you request, including generating reports, processing payments, and delivering content.
• Consent: for sending marketing communications, placing non‑essential cookies, and any other processing for which we have obtained your explicit consent.
• Legitimate interest: to secure and improve the Site, prevent fraud, analyze usage, and maintain our business operations, provided these interests do not override your rights.
• Legal obligation: to comply with applicable tax, accounting, and regulatory requirements.

4. Cookies

We use essential cookies to keep you logged in, maintain your session, and protect the Site from security threats. We also use analytics cookies (via services like Google Analytics) to understand how visitors interact with the Site. You can manage or disable cookies in your browser settings; however, disabling essential cookies may affect the functionality of the Site. We do not use tracking cookies for advertising purposes.

5. Data Sharing & Third Parties

• Payment processors: we share limited data (order amount, currency, billing country, and transaction ID) with Wise, Paddle, and/or Binance Pay to process payments and comply with their requirements.
• Analytics providers: we may use third‑party analytics services (e.g., Google Analytics) that collect usage data through cookies and similar technologies.
• Hosting & infrastructure: your data is stored on servers operated by our cloud hosting provider(s) located in Switzerland, the EU, or other jurisdictions.
• Legal & regulatory: we may disclose data if required by law, regulation, or court order, or to protect the rights, property, or safety of NativeAstro.com, our users, or others.
• We will never sell, rent, or trade your personal data (including birth data) to third parties for marketing or commercial purposes.

6. Data Retention

• Account data is retained for as long as your account is active. If you close your account, we will delete or anonymize your data within a reasonable timeframe, except where retention is required for legal or regulatory purposes.
• Generated reports are stored indefinitely for your access. You can request deletion of individual reports or all your data at any time.
• Birth data is retained until you delete the saved profile, delete your account, or request deletion.
• Usage data (analytics) is retained for up to 26 months after collection, after which it is aggregated or anonymized.
• Transaction and tax records are retained for a minimum of 7 years to comply with Swiss tax and accounting regulations.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. These include encryption of data in transit (TLS/SSL), secure password hashing, regular security reviews, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction and applicable law, you may have the following rights regarding your personal data:

• Right of access: obtain a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your data, subject to legal retention requirements.
• Right to restrict processing: request limitation of how we process your data in certain circumstances.
• Right to data portability: receive your data in a structured, commonly used format.
• Right to object: object to processing based on our legitimate interests or for direct marketing.
• Right to withdraw consent: withdraw your consent at any time for processing based on consent.

To exercise these rights, please contact us by email. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. International Data Transfers

Your data may be transferred to and processed in countries outside Switzerland and the European Economic Area (EEA), including the United States, where our payment processors and cloud hosting providers are located. We ensure that appropriate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) adopted by the European Commission, or other legally recognized transfer mechanisms.

10. Children's Privacy

The Site is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without parental consent, please contact us, and we will take steps to delete that data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. The latest version will always be posted on this page with an updated effective date. Material changes will be notified to you by email or through a prominent notice on the Site. We encourage you to review this page periodically.

13. Contact

If you have any questions about this Privacy Policy, please contact us by email or through the Contact page.