Privacy Policy

Stars & Signals is operated by Ham & Lettuce (hamandlettuce.com). We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR), the Australian Privacy Act 1988, and all applicable privacy legislation.

This policy explains what data we collect, why we collect it, how it is used, and your rights in relation to it.

1. WHO WE ARE

Data controller: Ham & Lettuce

Website: starsandsignals.com

Contact: [your contact email]

2. WHAT DATA WE COLLECT AND WHY

We collect the following categories of personal data:

Account Data

When you create an account: your name and email address.

Legal basis: Contract — necessary to provide you with an account and access to member features.

Birth Data

Your date of birth, time of birth, and place of birth.

This data is used to calculate your astrological natal chart (Sun sign, Moon sign, and Rising sign).

Legal basis: Consent — you provide this voluntarily. You may omit your birth time, in which case your Rising sign will not be calculated.

Personal Context Data

Your relationship status, career or occupation, a short personal bio, and up to three personal goals.

This data is used solely to personalise the horoscope content generated for you. It is never used for advertising, profiling, or any purpose other than content personalisation.

Legal basis: Consent — you provide this voluntarily and may update or delete it at any time.

Usage Data

Standard web analytics including pages visited, time on site, and device type. We use [analytics provider — e.g. Plausible / Fathom / Google Analytics] for this purpose.

Legal basis: Legitimate interests (anonymous/aggregated analytics) or Consent (if cookies are used).

3. AI-POWERED PERSONALISATION

Stars & Signals uses artificial intelligence to generate personalised horoscope content. When you request a personalised horoscope, the following data is sent to our AI service provider (Anthropic, PBC):

• Your astrological placements (Sun sign, Moon sign, Rising sign)
• Your relationship status (if provided)
• Your career/occupation (if provided)
• Your personal bio (if provided)
• Your stated goals (if provided)
• The horoscope period requested (daily, weekly, etc.)

Your name and email address are NOT sent to Anthropic.

Anthropic processes this data solely to generate your horoscope content. Anthropic does not use API prompt data to train its models. For full details of how Anthropic handles data, see:

https://www.anthropic.com/legal/privacy

The generated horoscope content and a snapshot of the data used to generate it are stored in our database and associated with your account. This allows us to serve you previously generated horoscopes without regenerating them.

Legal basis: Consent — you explicitly request this personalisation. You may choose not to provide personal context data at any time.

4. DATA SHARING AND THIRD PARTIES

We do not sell your personal data. We do not share your personal data with third parties for their own marketing or advertising purposes.

We share data with the following service providers solely to operate the site:

• Anthropic, PBC (AI content generation) — see Section 3 above
• [Your hosting provider, e.g. Vercel] (website hosting and infrastructure)
• [Your database provider, e.g. Neon] (database hosting)
• [Your email provider, e.g. Brevo] (transactional email)
• [Your payment provider, e.g. Lemon Squeezy] (subscription billing — processes payment data independently under their own privacy policy)

All service providers are contractually bound to process your data only on our instructions and in accordance with applicable privacy law.

5. DATA RETENTION

Account data: retained for the duration of your account plus 30 days after deletion to allow for account recovery.

Birth data and personal context: retained for the duration of your account. Deleted within 30 days of account deletion.

Generated horoscope content and snapshots: retained for the duration of your account. Deleted within 30 days of account deletion.

Usage/analytics data: retained for [X months] in aggregated, anonymised form.

6. YOUR RIGHTS UNDER GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with equivalent privacy legislation, you have the following rights:

Right of access — you may request a copy of all personal data we hold about you.

Right to rectification — you may correct inaccurate data via your Account Settings page at any time.

Right to erasure — you may request deletion of your account and all associated personal data. We will action this within 30 days.

Right to restriction — you may request that we restrict processing of your data while a dispute is resolved.

Right to data portability — you may request an export of your personal data in a machine-readable format.

Right to object — you may object to processing based on legitimate interests at any time.

Right to withdraw consent — where processing is based on consent, you may withdraw it at any time via your Account Settings or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to lodge a complaint — you have the right to lodge a complaint with your local data protection authority. In the EU, find your authority at edpb.europa.eu. In Australia, contact the Office of the Australian Information Commissioner (oaic.gov.au).

To exercise any of these rights, contact us at [your contact email]. We will respond within 30 days.

7. COOKIES

[Complete this section based on what cookies you actually use — session cookies, analytics cookies, preference cookies. If you use any non-essential cookies, a cookie consent banner is required under GDPR.]

8. CHILDREN'S PRIVACY

Stars & Signals is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

9. CHANGES TO THIS POLICY

We may update this policy from time to time. We will notify registered users of material changes by email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

10. CONTACT

For any privacy-related questions or to exercise your rights:

Email: [your contact email]

Website: starsandsignals.com/privacy-policy

Ham & Lettuce · hamandlettuce.com