Personal Data Protection Policy

1. Data controller

The controller of personal data collected through the astreya.life platform is "Di Si Team" Ltd., UIC 207913681, with registered seat and correspondence address: BULGARIA, city of Sofia (1680), Krasno Selo district, Borovo neighborhood, bl. 222A, entr. A, fl. 3, apt. 9, email: ivet.genero@gmail.com.

2. What personal data we collect and why

For the platform to operate and calculate accurate astrological profiles, we collect and process the following data:

• Registration data: name, email address, password (encrypted).
• Astrological and Human Design data: exact date of birth, time of birth and place of birth (country and city). These data are critically required to calculate planetary positions using the Swiss Ephemeris.
• Payment data: when purchasing premium services, your payment details (card number, CVC) are processed directly by the certified payment processor Stripe. Astreya does not store bank card information on its servers.
• Technical data: IP address, browser type, operating system and on-site behavior history (via cookies) for security and to improve UX/UI design.

3. Legal basis for processing

We process your personal data on the basis of:

• Contract: to provide the services and analyses you requested upon registration or purchase.
• Explicit consent: for calculating specific profiles (natal charts, synastry) and for sending marketing newsletters (if subscribed).
• Legal obligation: for accounting and tax reporting when issuing invoices for paid services.

4. Retention period

We retain your personal data only for as long as necessary to provide the services or while you have an active account. You may delete your account and associated astrological data at any time from your dashboard settings. Data from paid transactions is retained for 10 years pursuant to Bulgarian accounting legislation.

5. Third parties using the data

We do not sell or provide your personal data to third parties for marketing purposes. We share data only with trusted partners that support the site's operation:

• Server providers: for secure storage of the database.
• Stripe: for secure processing of payments.

6. Your rights (GDPR)

You have the right to access your data, correct it, port it, restrict processing, as well as the right "to be forgotten" (data erasure). To exercise these, you can delete your account directly or contact us at ivet.genero@gmail.com. If you believe your rights have been violated, you have the right to file a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).