Privacy Policy – SphereAstrale.com

Last updated: 17/01/2026

Introduction

This Privacy Policy describes how Sphere Astrale (hereinafter "we" or "the Publisher") collects, uses, retains and protects the personal data of users (hereinafter "you" or "the User") when using the website www.sphereastrale.com.

We are committed to complying with applicable regulations, in particular Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and the French Data Protection Act of January 6, 1978, as amended.

1. Data Controller

The data controller for personal data collected on the SphereAstrale.com website is the site publisher. Complete legal information is available in our legal notice.

2. Data Collected

When using the site, we may collect the following data:

  • Registration data : email address, username, encrypted password.
  • Navigation data : IP address, connection logs, browser type, pages visited.
  • Consultation data : messages exchanged with AI (encrypted), consultation history, credits used.
  • Payment data (subscribers only): billing information, subscription date and amount. Payments are processed by a secure provider and we do not have access to your complete bank details.

3. Processing Purposes

The collected data is used for:

  • Service management: create and manage your user account, provide psychic consultations
  • Billing: manage paid subscriptions and billing
  • Service communications: welcome emails, confirmations, important notifications, security alerts
  • Marketing communications: newsletters, promotional offers, news (with your explicit consent only)
  • Service improvement: optimize site operation and user experience
  • Security: ensure site security, prevent fraud and abuse
  • Legal obligations: comply with our accounting, tax and regulatory obligations
  • Customer support: respond to your assistance requests and complaints

No data is used for sensitive profiling or automated decision-making producing legal effects.

4. Legal Basis for Processing

In accordance with Article 6 of the GDPR, the processing of your data is based on:

  • Contract performance (art. 6.1.b): account management, service provision, service emails
  • Explicit consent (art. 6.1.a): marketing communications, newsletters, satisfaction surveys
  • Legal obligation (art. 6.1.c): billing (10 years), tax declarations, fraud prevention
  • Legitimate interest (art. 6.1.f): site security, abuse prevention, service improvement

Important: You may withdraw your consent at any time for consent-based processing, without affecting processing necessary for the service.

5. Data Retention Period

  • Account-related data : retained as long as your account is active, then deleted no later than 3 years after the last activity.
  • Billing data : retained 10 years in accordance with accounting obligations.
  • Navigation data : retained 12 months maximum.

6. Data Sharing and Recipients

Your data is never sold to third parties. It may only be transmitted to:

  • Our technical providers (host, payment solution, IT maintenance, technology provider for message processing via artificial intelligence (OpenAI))
  • Competent authorities if required by law

Message processing by our AI provider enables chat response generation. This data is not used to train models and is never sold.

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • password encryption,
  • HTTPS protocol,
  • secure backups,
  • access limited to authorized personnel only.

However, no system is infallible. The Publisher cannot guarantee absolute security but commits to notifying any data breach in accordance with GDPR.

8. Your Rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • Right of access : obtain confirmation that your data is being processed and receive a copy.
  • Right of rectification : correct inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten").
  • Right to restriction of processing
  • Right to object : object to certain processing, particularly direct marketing.
  • Right to portability : receive your data in a structured, readable format.

You can exercise your rights by contacting us at:

📧 contact@sphereastrale.com
📮 Postal address available in our legal notice

In case of dispute, you can contact the CNIL (www.cnil.fr).

9. Cookies

The site uses cookies and similar technologies to:

  • improve navigation,
  • measure traffic (anonymous statistics),
  • manage service access.

On your first visit, a banner informs you about cookie use and allows you to accept, refuse or configure your preferences.

10. Transfers Outside the EU

By default, your data is stored within the European Union.

To enable our psychic chat functionality, messages are sent to a technology provider based in the United States (OpenAI). These transfers are strictly governed by GDPR-compliant contractual clauses and your data remains protected. It is not used to train models and is never sold.

11. Email Communications - Consent Management

11.1. Service Emails (mandatory)

By creating your account, you agree to receive the following emails, essential for proper service operation:

  • Welcome email and registration confirmation
  • Order confirmations and subscription invoices
  • Security notifications and important alerts
  • Information about changes to terms of use
  • Customer support and responses to your requests

11.2. Marketing Communications (optional)

With your explicit consent, we may send you:

  • Newsletters with news and astrological advice
  • Promotional offers on our premium services
  • Information about new features
  • Satisfaction surveys to improve our services

11.3. Managing Your Preferences

You can at any time:

  • Manage your preferences from your personal space
  • Unsubscribe via the link in each marketing email
  • Contact our service : contact@sphereastrale.com

Frequency: Maximum 2 marketing emails per month. Service emails are sent as needed.

Consent withdrawal: Unsubscribing from marketing communications is effective immediately and does not affect necessary service emails.

12. Privacy Policy Modifications

We may modify this Policy at any time. Users will be notified of significant changes by email and/or notification on the site. The applicable version is the one in effect at the time of use of the site by the User.

13. Fraud Prevention and Abuse Prevention

To ensure the proper functioning of our free offer (8 daily credits for unregistered visitors) and to prevent fraudulent or abusive use, we implement a technical security system. This system relies on creating an anonymous technical identifier associated with your browser or device. This identifier is used only to verify compliance with usage limits and to prevent fraud (for example: repeated attempts to bypass the daily limit).

Legal basis: legitimate interest (Article 6.1.f of GDPR).

Data processed: your IP address (no sensitive data is collected).

Retention period: limited to 24 hours, corresponding to the validity period of the free offer.

Exclusive purpose: security and abuse prevention. The collected information is in no way used for advertising or analytical purposes.

Exercise your GDPR rights: for any request for access, modification, objection or deletion of your personal data, contact our Data Protection Officer (DPO) at: contact@sphereastrale.com. We will process your request as soon as possible in accordance with the General Data Protection Regulation (GDPR).

14. CNIL Compliance and French Regulations

14.1. CNIL Declaration

In accordance with Article 30 of the GDPR, we maintain a register of personal data processing activities. This register is made available to the CNIL upon request.

14.2. Compliance with French Regulations

We comply with French data protection regulations:

  • Data Protection Act of January 6, 1978, as amended
  • GDPR (EU Regulation 2016/679)
  • Consumer Code for electronic communications
  • ePrivacy Directive transposed into French law

14.3. Your Remedies

In case of dispute or if you believe your rights are not being respected:

  • Contact us first: contact@sphereastrale.com (response within 30 days maximum)
  • Contact the CNIL:
  • Legal action: Competent courts of Paris

14.4. Data Protection Officer (DPO)

You can contact our Data Protection Officer for any question regarding the processing of your personal data:

DPO Email: dpo@sphereastrale.com
General contact: contact@sphereastrale.com

14.5. Audits and Controls

We commit to:

  • Conducting regular audits of our data protection practices
  • Training our staff on GDPR requirements
  • Notifying data breaches to the CNIL within 72 hours if necessary
  • Fully cooperating with supervisory authorities
Back to home