Privacy policy

1. Data we collect

We collect the following data:

Account: Email, name (optional), profile picture (via OAuth)
Usage: API requests, endpoints called, timestamps
Astrological charts: Birth data you choose to save
Consents: Terms, privacy, M1 opt-in, marketing

2. How we use your data

Your data is used to:

Provide the astrological calculation service
Manage your account and API keys
Track your usage and enforce your plan limits
Improve our services in an aggregated and anonymised form

3. Mantic M1 dataset - included by default with right to object

The Mantic M1 dataset is an internal research corpus used to train and evaluate astrological interpretation models. Inclusion in this corpus is part of the processing described in this policy. You can object at any time from your dashboard.

Before any inclusion, we apply the following anonymisation rules:

Identity removal: email, name and any technical identifier are stripped.
Aggregation: data is grouped into statistical profiles (sun sign, dominant aspects, etc.).
No sensitive raw data: exact birth city, precise GPS coordinates and birth time are not retained.
Reversibility: you can exercise your right to object at any time; no further data will then be included.

4. Data sharing

We never sell your data. We only share it with:

IshtarEngine / Kossmonot: PostgreSQL database hosting and authentication on our dedicated infrastructure
Stripe: Payment processing (where applicable)
OpenRouter: AI-assisted interpretation (beta feature). Your chart data is only sent to OpenRouter if you deliberately trigger this feature

Waitlist (public site)

The form on the home page collects one piece of data only: your email address, together with its consent checkbox.

Purpose: to keep you informed about the launch and news of Psychomantic. Legal basis: your consent (GDPR art. 6.1.a).

Retention: until you ask for removal, or until the end of the launch announcement campaign. Recipient: the email sending provider. No third-party prospecting, no resale.

To opt out, write to [email protected]: your address is deleted.

5. Security

Your data is protected by encryption in transit (HTTPS) and at rest. Passwords are hashed with argon2. API keys are hashed with SHA-256.

6. Your rights (GDPR)

Under the GDPR, you may:

Access your data (via the Dashboard)
Rectify your data (edit your profile)
Delete your account and all your data
Export your data
Withdraw your consent to the M1 dataset at any time

7. Account deletion

You can delete your account from the Data deletion page. This action is irreversible and removes your account, profiles, saved charts, API keys and sessions.

8. Cookies

We only use essential cookies to maintain your session. No tracking or advertising cookies.

9. Contact

For any question regarding your data: [email protected].

Dedicated address for the API and commercial requests: [email protected].