1. Rukovalac

Rukovalac obrade podataka za aplikaciju AstroVuk („Alat") je SIGOO GmbH, Ernst-Reuter-Straße 70, 65428 Rüsselsheim am Main, Nemačka. Kontakt za pitanja privatnosti: hallo@sigoo.de. Ova politika se odnosi samo na Alat; za sajt vinchy.ai važi tamošnja politika privatnosti.

2. Najkraća verzija

3. Koje podatke obrađujemo i gde oni žive

a) Nalog i tvoj profil. Nalog čini tvoja email adresa; lozinke nema — prijava ide jednokratnim kodom/linkom koji ti šaljemo mejlom. Tvoj profil — ime/nadimak, datum, vreme i mesto rođenja za tvoju kartu — čuva se uz nalog u našoj bazi (Supabase, region EU — Frankfurt), zaštićen pravilima pristupa po kojima svako može da čita i menja isključivo svoj red. To su lični podaci i obrađuju se samo da bi te tvoja karta pratila na svakom uređaju.

b) Karte drugih osoba. Sam proračun karte se i dalje izvršava lokalno u tvom browseru. Podaci drugih osoba koje uneseš (npr. za sinastriju) ostaju u lokalnoj memoriji browsera (localStorage) na tvom uređaju — ne šalju se na server i mi im nemamo pristup.

c) Pitanja tumaču (AI). Kada tumaču postaviš pitanje, tvoj tekst i proračunati kontekst karte šalju se našem serveru, koji ih prosleđuje AI provajderu isključivo radi generisanja odgovora. Sadržaj pitanja i odgovora se na našoj strani ne čuva i ne loguje. Radi dnevnog limita server pamti samo dan i broj postavljenih pitanja po nalogu — nikada sadržaj.

d) Sesija. Prijava koristi kratkotrajne tokene sesije u memoriji tvog browsera (localStorage) — bez marketinških kolačića, bez analitike i bez alata za praćenje.

e) Hosting. Pri svakom pristupu web-serveru tehnički nastaju standardni podaci o konekciji (npr. IP adresa) koje infrastrukturni provajder obrađuje radi isporuke i bezbednosti usluge (v. tačku 5).

4. Pravni osnovi

• Pružanje Alata (nalog, čuvanje tvog profila, proračun karte, generisanje odgovora tumača): čl. 6 st. 1 tač. b GDPR — izvršenje ugovora o korišćenju.
• Bezbednost i limiti (prijava, tokeni sesije, dnevni limit, odbrana od zloupotrebe): čl. 6 st. 1 tač. f GDPR — legitimni interes da Alat radi stabilno i bezbedno.
• Slobodan tekst pitanja: šta ćeš napisati tumaču, odlučuješ sam. Ako u pitanje uneseš posebne kategorije podataka (npr. o zdravlju, verskim uverenjima ili sličnom), obrađujemo ih isključivo da bismo generisali odgovor, na osnovu tvog izričitog pristanka koji daješ samim slanjem takvog pitanja (čl. 9 st. 2 tač. a GDPR). Nemoj unositi ono što ne želiš da se obradi — Alat u potpunosti radi i bez takvih podataka, a pristanak možeš za ubuduće povući tako što takve sadržaje jednostavno ne šalješ.

5. Primaoci — obrađivači (čl. 28 GDPR)

Podatke ne prodajemo i ne delimo ni sa kim osim sa obrađivačima bez kojih Alat tehnički ne radi:

• Supabase — baza naloga i profila; podaci stoje u regionu EU (Frankfurt). Za slučajeve podrške iz trećih zemalja važe standardne ugovorne klauzule (čl. 44 i dalje GDPR).
• Vercel Inc. (SAD) — hosting Alata i izvršavanje serverskih funkcija. Prenos u SAD zaštićen je EU-U.S. Data Privacy Framework-om odnosno standardnim ugovornim klauzulama (čl. 44 i dalje GDPR).
• Anthropic (SAD) — AI obrada: prima tekst pitanja i proračunati kontekst karte radi generisanja odgovora. Po komercijalnim uslovima ne koristi ovaj sadržaj za obuku svojih modela; sadržaj može ograničeno zadržati radi bezbednosti i sprečavanja zloupotrebe, u skladu sa svojom politikom. Prenos je zaštićen standardnim ugovornim klauzulama odnosno DPF-om.

6. Koliko dugo čuvamo podatke

• Nalog i profil: dok nalog postoji; brisanjem naloga (dugme u Alatu, v. tačku 8) profil i brojači se brišu odmah.
• Server: sadržaj pitanja i odgovora — nikako (ne čuva se); brojač dnevnog limita — dan i broj po nalogu.
• Tvoj uređaj: karte drugih osoba i keš stoje u browseru dok ih sam ne obrišeš (u Alatu ili brisanjem podataka sajta u browseru).

7. Tuđi podaci o rođenju

Ako unosiš podatke druge osobe, odgovoran si za to da imaš pravo da ih uneseš — po pravilu njen pristanak. Ne unosi podatke osoba koje to ne bi želele i ne unosi podatke maloletnika bez saglasnosti roditelja/staratelja. Ti podaci ostaju na tvom uređaju, po modelu iz tačke 3b.

8. Tvoja prava

Po GDPR-u imaš pravo na pristup (čl. 15), ispravku (čl. 16), brisanje (čl. 17), ograničenje obrade (čl. 18), prenosivost (čl. 20) i prigovor na obradu zasnovanu na legitimnom interesu (čl. 21). Brisanje je ugrađeno u Alat: u odeljku O ALATU klikni „Obriši nalog i sve podatke" — nalog, profil i brojači nestaju odmah, a razgovori se ionako nikad ne čuvaju. Podatke sa svog uređaja (tuđe karte, keš) brišeš u Alatu ili brisanjem podataka sajta u browseru. Za svaki zahtev ili pitanje piši na hallo@sigoo.de; odgovaramo bez nepotrebnog odlaganja. Imaš i pravo pritužbe nadzornom organu — nadležan za nas je Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Vizbaden, Nemačka), a možeš se obratiti i organu u svojoj zemlji.

9. Bez profilisanja i automatizovanih odluka

Alat ne donosi automatizovane odluke koje bi prema tebi proizvodile pravno ili slično značajno dejstvo (čl. 22 GDPR). Tumačenje piše AI i jasno je tako označeno (oznaka TUMAČ (AI), u skladu sa Uredbom EU o veštačkoj inteligenciji) — ono je zabava i samorefleksija, ne procena tebe kao osobe.

10. Izmene ove politike

Politiku ažuriramo kako se Alat razvija (npr. uvođenje naloga ili novih jezika povlači dopunu). Važeća verzija je uvek na ovoj stranici, sa datumom poslednje izmene na vrhu.

1. Controller

The controller for data processing in the AstroVuk application (the "Tool") is SIGOO GmbH, Ernst-Reuter-Straße 70, 65428 Rüsselsheim am Main, Germany. Privacy contact: hallo@sigoo.de. This policy covers the Tool only; for the vinchy.ai website see the privacy policy there.

2. The short version

3. What data we process and where it lives

a) Account and your profile. Your account consists of your email address; there is no password — you sign in with a one-time code/link we email you. Your profile — name/nickname, birth date, time and place for your own chart — is stored with your account in our database (Supabase, region EU — Frankfurt), protected by access rules under which everyone can read and modify only their own row. This is personal data, processed solely so that your chart follows you on every device.

b) Other people's charts. The chart computation itself still runs locally in your browser. Data of other people you enter (e.g. for synastry) stays in your browser's local storage (localStorage) on your device — it is not sent to the server and we have no access to it.

c) Questions to the interpreter (AI). When you ask the interpreter a question, your text and the computed chart context are sent to our server, which forwards them to the AI provider solely to generate the answer. On our side, the content of questions and answers is not stored and not logged. To enforce the daily limit the server remembers only the day and the number of questions per account — never the content.

d) Session. Sign-in uses short-lived session tokens in your browser's memory (localStorage) — no marketing cookies, no analytics, no tracking tools.

e) Hosting. Each access to the web server technically generates standard connection data (e.g. IP address) which the infrastructure provider processes to deliver and secure the service (see section 5).

4. Legal bases

• Providing the Tool (your account, storing your profile, chart computation, generating interpreter answers): Art. 6(1)(b) GDPR — performance of the usage agreement.
• Security and limits (sign-in, session tokens, daily limit, abuse prevention): Art. 6(1)(f) GDPR — our legitimate interest in running the Tool stably and securely.
• Free-text questions: what you write to the interpreter is up to you. If you include special categories of data in a question (e.g. about health, religious beliefs or similar), we process them solely to generate the answer, based on your explicit consent given by sending such a question (Art. 9(2)(a) GDPR). Do not enter anything you do not want processed — the Tool works perfectly well without such data, and you can withdraw consent for the future simply by not sending such content.

5. Recipients — processors (Art. 28 GDPR)

We do not sell data and share it with no one except the processors without which the Tool cannot technically run:

• Supabase — database for accounts and profiles; data resides in the EU (Frankfurt) region. For support access from third countries, standard contractual clauses apply (Art. 44 et seq. GDPR).
• Vercel Inc. (USA) — hosting of the Tool and execution of server functions. Transfers to the USA are safeguarded by the EU-U.S. Data Privacy Framework and/or standard contractual clauses (Art. 44 et seq. GDPR).
• Anthropic (USA) — AI processing: receives the text of your question and the computed chart context to generate the answer. Under its commercial terms it does not use this content to train its models; it may retain content for a limited period for safety and abuse prevention, in line with its policy. Transfers are safeguarded by standard contractual clauses and/or the DPF.

6. How long we keep data

• Account and profile: for as long as the account exists; deleting the account (button in the Tool, see section 8) removes the profile and counters immediately.
• Server: content of questions and answers — not at all (never stored); daily-limit counter — day and count per account.
• Your device: other people's charts and caches remain in your browser until you delete them yourself (in the Tool or by clearing the site data in your browser).

7. Other people's birth data

If you enter another person's data, you are responsible for having the right to do so — as a rule, their consent. Do not enter data of people who would not want it, and do not enter a minor's data without parental consent. That data stays on your device, under the model in section 3b.

8. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interest (Art. 21). Erasure is built into the Tool: in the ABOUT section click "Delete account and all data" — your account, profile and counters are removed immediately, and conversations are never stored in the first place. Data on your own device (other people's charts, caches) you remove in the Tool or by clearing the site data in your browser. For any request or question write to hallo@sigoo.de; we respond without undue delay. You also have the right to lodge a complaint with a supervisory authority — the one competent for us is the Hessian Commissioner for Data Protection and Freedom of Information (Wiesbaden, Germany), and you may also contact the authority in your own country.

9. No profiling, no automated decisions

The Tool makes no automated decisions producing legal or similarly significant effects concerning you (Art. 22 GDPR). Interpretations are written by an AI and clearly labelled as such (the TUMAČ (AI) tag, in line with the EU AI Act) — they are entertainment and self-reflection, not an assessment of you as a person.

10. Changes to this policy

We update this policy as the Tool evolves (for example, introducing accounts or new languages will require additions). The current version is always on this page, with the date of the last change at the top.