← Back to Astro Berries

Privacy Policy of the Astro Berries Service

Document version V1.10 | effective from 21.07.2026

Definitions

1. Controller / We – Colours of Samadhi Sp. z o.o. with its registered office in Warsaw, ul. Lanciego 12/97, 02-792 Warsaw, Poland, NIP: 9512597744, REGON: 528808348, KRS 0001109196, entered into the National Court Register by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register, e-mail address: help@coloursofsamadhi.com.
2. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
3. Service – the Astro Berries website, available at `astroberries.com` and `astro.coloursofsamadhi.com`.
4. User / You – any natural person visiting the Service or using its functionalities.
5. AI Astrologer – a virtual conversation partner (chatbot) based on artificial intelligence models, available within the Service, appearing in two personas: Richard (a model supplied by Anthropic) and Elizabeth (a model supplied by Google). The Controller may make available additional AI Astrologer personas (including test personas with a limited circle of access) using models from the same providers — this does not involve transferring data to any new external entities. The current list of providers is set out in the "Recipients of data" section below.

This Privacy Policy applies exclusively to the Astro Berries Service. The rules for processing personal data in connection with the yoga services provided at coloursofsamadhi.pl are set out in a separate Privacy Policy available on that website.

Contact

Contact with the Controller on matters concerning the protection of personal data is possible at the e-mail address: help@coloursofsamadhi.com or in writing to the Controller's registered office.

What data we process and for what purpose

1. Data provided to generate a Horoscope

Data on the date, time, and place of birth of the subject of the Horoscope are not special category personal data within the meaning of Art. 9 GDPR (they do not reveal racial or ethnic origin, religious beliefs, health, sexual orientation, etc.) — they are processed on general terms.

Note on third-party data (Relationship Portrait / Synastry). If the User enters the birth data of another person in order to generate a comparison of two charts, the User declares that they are authorized to provide such data. The scope of this data is limited to the first name and the date, time, and place of birth and does not include special category data. The Controller processes it solely to generate the Relationship Portrait, including the optional relationship forecast and the Vedic compatibility analysis (Guna Milan / Ashtakoot, Mangal Dosha, comparison of Dasha periods), computed solely from the same birth data — without extending the scope of the data processed.

Note on the moon calendar. The optional moon calendar that the User may add to a Horoscope is computed solely from data already provided by the User (birth data and, if provided, place of residence for the purpose of determining the timezone). Generating it does not involve processing any new categories of personal data or transferring data to any new external entities.

Note on calendar subscription (iCal). The User may optionally enable a subscription to their moon calendar in an external calendar app (Google Calendar, Apple, Outlook). For this purpose the Controller provides an individual, tokenized URL that serves a calendar file (`.ics`) containing astrological data relating to the User's Horoscope (the day's rating and aspects to the Horoscope). This feature does not involve transferring data to any new external entities (the file is served from the Controller's infrastructure) — however, the calendar app chosen by the User (e.g. Google) will poll this address on its own. The subscription URL should be treated as personal data: anyone who knows the address can access the calendar's contents, so it should not be shared with anyone. The User may at any time generate a new address (which invalidates the previous one) or disable the subscription in the Account panel.

2. Content of the conversation with the AI Astrologer

1. The content of messages entered by the User in a conversation with the AI Astrologer is transferred to the provider of the artificial intelligence model corresponding to the selected persona — to Anthropic (Richard persona) or to Google (Elizabeth persona) — in order to generate a response. Together with the message content, the Horoscope's computed data (including planetary positions, aspects, transits) and the birth data necessary to converse about the Horoscope are transferred to the model provider. The Controller applies data minimization to the data transferred to model providers: in a conversation concerning the User's own Horoscope, only the User's first name is transferred to the model provider, without the last name. This limitation does not cover third-party data provided by the User in a Relationship Portrait (Synastry) or in a comparison of Horoscopes, nor free-text content typed by the User in the conversation, which may contain further data.
2. Conversation content is stored by the Controller in the Service's database, in encrypted form, in order to enable the User to resume and continue conversations, maintain continuity between conversations (concise summaries of earlier conversations), and download a record of a conversation in PDF format. The legal basis is the necessity to perform the service (Art. 6(1)(b) GDPR).
3. The User may at any time delete a generated Horoscope together with its associated conversations in the Customer Account panel. Conversation content is also subject to anonymization or deletion in accordance with the "Data retention period" section.
4. Within a given conversation, the AI Astrologer uses only the data of the Horoscope to which the conversation relates and a concise summary of the User's earlier conversations concerning the same Horoscope. The AI Astrologer has no access to the internet or to other Users' data.

3. Billing unit counter (Tokens / "berries")

The Controller records the number of billing units (Tokens, presented in the interface as "berries") used in a conversation with the AI Astrologer solely for the purpose of managing the Service's cost limits and settlements. This data is not used for analytical or marketing purposes. The legal basis is performance of a contract and the Controller's legitimate interest (Art. 6(1)(b) and (f) GDPR) in managing the Service's operating costs.

4. Payment data

In the event of a payment, data necessary for its execution is processed (first name, last name, e-mail address, amount). Payment card data is not processed by the Controller — it is transferred directly to the bank (ING Bank Śląski S.A.) via the ING Pay payment gateway (formerly imoje). The legal basis is performance of a contract (Art. 6(1)(b) GDPR) and, with respect to accounting documents, the Controller's legal obligation (Art. 6(1)(c) GDPR).

5. Login data (Customer Account)

1. In order to create a Customer Account and log in, the Controller processes the e-mail address, first name, last name, and password. The password is stored only as a cryptographic hash (bcrypt) — the Controller does not know and does not store the password in plain text.
2. Alternatively, the User may log in without a password using a one-time link (Magic Link) sent to the e-mail address, valid for 15 minutes. The Controller also provides a password reset mechanism carried out by e-mail.
3. To confirm the e-mail address, the Controller may send a verification message. The legal basis is performance of a contract (Art. 6(1)(b) GDPR).

6. Newsletter consent (marketing)

The User may voluntarily consent to receiving marketing information (newsletter). Consent is optional, does not condition the use of the Service, and may be withdrawn at any time. The Controller records the fact and time of granting consent. The legal basis is the User's consent (Art. 6(1)(a) GDPR). Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

7. Technical data and system logs

The User's IP address and browser/operating system data are processed automatically for technical purposes, ensuring the security of the Service, and preventing abuse. System logs do not include the content of the User's conversations with the AI Astrologer. The legal basis is the Controller's legitimate interest (Art. 6(1)(f) GDPR).

Data security

The Controller applies technical and organizational measures to protect Users' personal data, in particular: encryption of AI Astrologer conversation content stored in the database, storage of passwords solely as cryptographic hashes (bcrypt), optional two-factor authentication (2FA), access control restricting access to Horoscopes and conversations to the User who owns them (including logging of unauthorized access attempts in technical logs), transmission of data over an encrypted connection (HTTPS) together with appropriate security headers, and protection against cross-site request forgery (CSRF). Passwordless login (Magic Link) serves solely to log in to an existing Account and does not create a new Account.

Is providing data mandatory?

Providing personal data in the Service is always voluntary. However, providing data marked as "Required" in the table above is necessary to generate the Horoscope — without it, the service cannot be performed. Providing data marked as "Optional" is voluntary also in the sense that it does not affect the ability to use the basic functionality of the Service.

Recipients of data — third parties (subprocessors)

The Controller uses the following third parties to provide the Service. Each of them processes data only to the extent necessary to perform its function.

Transfer of data outside the European Economic Area

1. In connection with the use of services of entities established outside the European Economic Area (in particular Railway Corporation, USA; Anthropic PBC, USA; Google LLC, USA; Resend / Plus Five Five, Inc., USA), Users' personal data may be transferred to the United States.
2. Such transfers take place on the basis of appropriate compliance mechanisms provided for in the GDPR — in particular the Standard Contractual Clauses approved by the European Commission, included in the data processing agreements with the respective entities, and for Anthropic, Google, and Resend — also on the basis of the certification of those entities under the EU-US Data Privacy Framework.
3. The User may obtain a copy of the appropriate safeguards by contacting the Controller at the address indicated in the "Contact" section.

Note on computational software (outside the scope of GDPR)

The Service uses the Swiss Ephemeris library (Astrodienst AG, Switzerland) for astronomical calculations, operating locally within the Controller's infrastructure. Use of this library does not involve the transfer of any of the User's personal data to Astrodienst AG — the data provided by the User does not leave the Controller's infrastructure for this purpose. This information is provided solely for transparency regarding the technical components used by the Service; details concerning the license of this software (AGPL v3) are described in the Terms and Conditions of the Service.

The function of downloading a conversation with the AI Astrologer as a PDF file is carried out locally within the Controller's infrastructure and does not involve the transfer of the User's data to third parties in order to generate such a file.

Data retention period

1. The birth/inception data provided by the User and the generated Horoscope files (Natal File, Forecast File) are stored permanently, until deleted by the User or an effective request for deletion of data is submitted — subject to the periods resulting from the Controller's accounting and tax obligations.
2. A Customer Account inactive continuously for a period longer than 3 years may be anonymized. Before anonymization, the Controller will make efforts to notify the User at the e-mail address assigned to the Account at least 30 days in advance. Anonymization consists in the permanent deletion or removal of features enabling the identification of the User; data subject to record-keeping obligations (accounting, tax) is retained for the period required by law.
3. Conversation content with the AI Astrologer is stored in encrypted form until the associated Horoscope is deleted by the User or the Customer Account is anonymized. Deleting a Horoscope results in the deletion of the associated conversations.
4. Data for settlement and tax purposes (sales documents) is retained for the period required by law, generally 5 years from the end of the tax year in which the tax obligation arose.
5. Technical data (system logs) is retained for the period necessary to ensure the security of the Service, no longer than 12 months, unless a longer period is required in connection with establishing, pursuing, or defending against claims.

Cookies

1. The Service uses cookies to ensure basic functionality (e.g. session identification, remembering the selected interface language and currency).
2. The use of cookies for purposes other than those necessary for the operation of the Service (e.g. analytical, marketing) requires the User's consent expressed on first entry to the Service.
3. The User may manage cookie settings in their web browser. Disabling cookies necessary for the operation of the Service may limit its functionality.

Your rights

As a data subject, you have the right to:

1. access the content of your data and request its rectification,
2. request the deletion of data,
3. request restriction of processing,
4. data portability,
5. object to processing of data based on the Controller's legitimate interest,
6. lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

Submitting requests electronically. Requests concerning the processing of personal data — including requests for information about the data processed, access to it, its rectification, erasure, restriction of processing, portability, and objection — may be submitted electronically, by e-mail to the personal data Controller's address: pomoc@coloursofsamadhi.com. The Controller responds to the request without undue delay, within the time limits arising from the GDPR.

To the extent that data is processed on the basis of consent (e.g. place of residence data for a relocation chart, newsletter consent), you may withdraw it at any time by contacting the Controller or — in the case of the newsletter — using the opt-out option. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Automated decision-making and profiling

The Controller does not make decisions towards Users producing legal effects based solely on automated processing, including profiling. Content generated by the AI Astrologer is of an informational and entertainment character and is not used to make any decisions affecting the User's legal situation.

Age of users

The Service is intended for persons who are at least 18 years old. The Controller does not knowingly collect personal data of minors. If the Controller obtains credible information that the personal data of a minor has been provided to the Service, it will take steps to delete it.

Changes to the Policy

This Policy is continuously reviewed and updated as needed, in particular in connection with changes to the third parties indicated in the table above. The current version of the Policy (V1.10) is effective from the date indicated at the beginning (21.07.2026).

Note on language versions: This Privacy Policy has also been prepared in an English version. In the event of any discrepancies between the Polish and English versions, the Polish version prevails.