Privacy Policy

Last updated: 19 August 2026

1. Controller

The data controller responsible for processing your personal data is Dmytro Boguslavskyy, Amsterdamer Str. 13, 13347 Berlin, Germany, reachable at [email protected]. This policy explains what we collect through https://velanomi.com (the "Service"), why, and your rights under the EU General Data Protection Regulation (GDPR) and other applicable law.

2. What we collect

• Account data: name, email address, country/locale. There is no password — you sign in with a link we email you, or with Google.
• Report input data: full name, birthdate, and optionally house number or phone number, which you provide so we can generate your personalised numerology report.
• Payment data: handled by our payment processor (Stripe); we store transaction status and identifiers, not full card numbers.
• Usage data: pages visited, the step of the quiz you reached, device/browser type, country, referring site and ad-campaign parameters (utm and click ids), linked to a first-party visitor id (see our Cookie Policy). We do not use a third-party analytics tool for this.
• Communications: messages you send to support.

3. Purposes and legal bases

• Generating and delivering your report/subscription content — performance of a contract (Art. 6(1)(b) GDPR).
• Processing payments and billing, invoicing — performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
• Sending transactional emails (order confirmations, report delivery, renewal notices) — performance of a contract (Art. 6(1)(b) GDPR).
• Customer support — performance of a contract / legitimate interest (Art. 6(1)(b)/(f) GDPR).
• First-party measurement of how the Service is used (which pages and quiz steps are reached, which ad campaign a visit came from) — legitimate interest (Art. 6(1)(f) GDPR); you may object at any time (email us, or clear the site's cookies).
• Marketing and advertising via Meta Pixel and TikTok Pixel, and the matching server-side Meta Conversions API / TikTok Events API — consent (Art. 6(1)(a) GDPR), only after you accept marketing cookies in our cookie banner; outside the EU/EEA, UK and Switzerland on the basis of legitimate interest with the right to opt out in the banner, which we honour for both the pixels and the server-side sending.
• Fraud prevention and legal compliance — legal obligation and legitimate interest (Art. 6(1)(c)/(f) GDPR).

4. Use of AI to generate reports (AI transparency)

The written text of your readings is generated by an AI language model without human review of each individual reading, and is marked as such where it appears. We do not use AI to make decisions with legal or similarly significant effects about you, and we do not build profiles of you for third parties. To generate your report text, we send your first name, what you told us is on your mind, and the computed numbers and their meanings to Anthropic's Claude API for processing — not your full name, exact birthdate or address. Anthropic processes this data on our behalf as a processor, under a data processing agreement, and does not use it to train its models. This is necessary to deliver the core Service you purchased.

5. Processors and recipients

We share personal data only with service providers who process it on our behalf under data processing agreements, or as strictly necessary to run the Service:

• Stripe (payment processing, USD/EUR) — payment and fraud data.
• Resend (transactional email delivery) — your email address and email content; Resend keeps delivery logs for a short period.
• Anthropic (Claude API, report text generation) — first name, focus, computed numbers. Anthropic does not use API data to train its models and retains it only briefly for abuse monitoring.
• Cloudflare (CDN, security, and edge network) — technical/traffic data.
• Hetzner Online GmbH (application hosting, Germany) — all data stored to run the Service.
• Meta and TikTok (advertising measurement) — only if you consent to marketing cookies (or, outside the EU/EEA/UK/CH, have not opted out). Besides the pixel in your browser we send conversion events (quiz completed, sign-up, checkout started, purchase, subscription) from our server: a SHA-256 hash of your email address, your IP address, browser user agent, the Meta/TikTok click and browser ids (_fbp, _fbc, _ttp, ttclid) and the purchase value. Never your name, birthdate or reading.
• Google (optional OAuth sign-in) — only if you choose to sign in with Google; we receive your name and email from your Google account.

We do not sell your personal data to third parties.

6. International transfers

Hetzner and Cloudflare process EU data primarily within the EU/EEA. Some processors (e.g. Anthropic, Stripe, Resend, Meta, TikTok, Google) may process data in the United States or other third countries. Where this occurs, we rely on the EU-US Data Privacy Framework (DPF), Standard Contractual Clauses (SCCs), or another valid transfer mechanism recognised under GDPR Chapter V.

7. Retention

We keep account and report data for as long as your account is active. When you delete your account, your readings, profiles, name and email address are removed at once; payment records are kept in anonymised form for as long as the law requires (German tax law generally requires retaining invoice-relevant data for 10 years). Sign-in links are deleted a day after they expire; usage events and visitor ids are deleted after 13 months. Database backups are kept for 14 days, so deleted data disappears from backups within that time. You may request earlier deletion of data not subject to a retention obligation.

8. Your rights

Under GDPR, you have the right to access, rectify, erase, or restrict processing of your personal data, to data portability, and to object to processing based on legitimate interest or direct marketing. Where processing is based on consent, you may withdraw it at any time without affecting past processing. To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with your local data protection supervisory authority.

9. Cookies

We use essential cookies to run the Service, first-party measurement cookies (no third party receives them), and marketing pixels (Meta Pixel and TikTok Pixel) only with your consent. See our Cookie Policy for the full list and how to change your preferences.

10. Contact

Questions about this policy or your data can be sent to [email protected].