Legal

Privacy Policy

Last updated: 27 April 2026

1. Who we are

BirthBrief is operated by Matteo Rigo, an individual trader, ul. Popieluszki 2a/190, 80-864 Gdańsk, Poland. Contact: hello@birthbrief.com.

This policy explains what personal data we collect when you use birthbrief.com, why we collect it, and your rights under the General Data Protection Regulation (GDPR, EU 2016/679).

2. What data we collect and why

When you purchase or generate a natal chart report, we collect:

Name — to personalise your report
Email address — to deliver your report and provide support
Date of birth — required to compute your natal chart
Birth time (optional) — improves accuracy of house placements
Birth city and geographic coordinates — required to compute planetary positions at your exact location

We also log a one-way hash of your IP address for rate-limiting and fraud prevention. The hash cannot be reversed to identify you.

Legal basis (GDPR Art. 6(1)(b)): All data above is processed to perform the contract — i.e. to generate and deliver the natal chart report you purchased or requested. We do not use this data for advertising or sell it to third parties.

3. Sub-processors (third parties who handle your data)

To deliver the service we share your data with the following processors, each bound by data processing agreements:

Anthropic, Inc. (United States) — AI model that generates the written report from your birth data. Privacy policy
Stripe, Inc. (United States) — payment processing. Your card data is handled entirely by Stripe and never reaches our servers. Privacy policy
Resend, Inc. (United States) — transactional email delivery (sending you your report). Privacy policy
Railway Corp. (United States) — hosts the astronomical computation service (Swiss Ephemeris) that calculates planetary positions. Privacy policy
Cloudflare, Inc. (United States) — website hosting, CDN, and database. Privacy policy

All processors are based in the United States. Data transfers are covered by Standard Contractual Clauses (SCCs) where applicable.

4. Cookies and tracking

BirthBrief does not set any first-party cookies. We do not use Google Analytics, Meta Pixel, or any other third-party tracking technology.

Our fonts are self-hosted — no requests are made to Google Fonts or any font CDN when you visit this site.

Stripe sets cookies on their own domain (stripe.com) during payment. These are governed by Stripe's privacy policy, not ours.

Our analytics system records only anonymised, aggregated visit counts (no personal data, no fingerprinting).

5. How long we keep your data

Your report and birth data are retained for 12 months from the date of generation, then automatically deleted from our database. Payment records (held by Stripe) are retained in accordance with Stripe's policies and applicable accounting law.

6. Your rights

Under GDPR you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — ask us to delete your data before the 12-month retention period
Restriction — ask us to limit how we process your data
Portability — receive your data in a machine-readable format
Complaint — lodge a complaint with the Polish supervisory authority, UODO (Urząd Ochrony Danych Osobowych)

To exercise any of these rights, email hello@birthbrief.com. We will respond within 30 days.

7. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the service after a change constitutes acceptance of the updated policy.

8. Contact

Matteo Rigo
ul. Popieluszki 2a/190, 80-864 Gdańsk, Poland
hello@birthbrief.com