Privacy Policy

1. Who we are

Vedik is a digital product for analyzing personal cycles, based on astronomical calculation using the KP system, operated by Paula Eller Pamplona - ME (Brazilian company registry, CNPJ 66.987.668/0001-82), reachable at privacidade@vedik.com.br. We are the controller of the personal data collected on this site.

2. Data we collect

We collect only what is necessary to provide the service:

• Sign-up: full name and email address
• Birth chart: date, time, and city of birth
• Service use: your chat history with the Vedik AI
• Payment: processed entirely by Stripe: we do not store card data
• Technical: access and error logs (via Sentry), needed for security and operation
• People you add: for a combination or an extra chart, the name or nickname, the type of relationship and the date, time and city of birth you enter. They serve only the reading you asked for and are deleted with the chart or with your account
• Conversation memory: an AI-made summary of the facts you shared (work, relationships, open decisions), kept per chart to give context to future answers. This summary does not record sensitive data
• Diary: Vedik's predictions, whether they happened, the date and time you enter and your comment. A note only becomes a testimonial, always anonymous, if you authorize it
• Notifications: the browser delivery address and device type, if you turn them on
• Preferences: your email choices and your acceptance or refusal of cookies

We do not ask for sensitive data. If you share something like that in a conversation (for example, about health), the message stays in your history and is sent to the AI to answer, but it does not go into the memory summary.

3. How we use your data

Your data is used exclusively to:

• Generate and display your Vedic KP birth chart
• Personalize Vedik's responses based on your chart
• Process payments and manage your subscription
• Send transactional communications and messages about your account and service use, each with its own unsubscribe option
• Keep the platform secure and operating correctly

We do not sell or rent your data. Browsing data only goes to Google and Meta, to measure campaigns, if you accept cookies.

4. Legal basis (Brazilian LGPD, art. 7)

• Contract performance, to provide the service you signed up for
• Legitimate interest, for security, fraud prevention, and service improvement
• Legitimate interest, for emails about your own account and service use (welcome messages, reminders, and re-engagement). You can unsubscribe at any time via the link in the footer of any email, which stops all of them
• Consent, for analytics and campaign-measurement cookies and third-party promotional campaigns (where applicable)
• Compliance with a legal obligation, when required by law or a competent authority

5. Your rights (Brazilian LGPD, art. 18)

• Confirm whether we process your data
• Access the data we hold about you
• Correct incomplete, inaccurate, or outdated data
• Request anonymization, blocking, or deletion of unnecessary data
• Port your data to another provider
• Withdraw consent at any time
• Request full deletion of your account and data

To exercise any of these rights: privacidade@vedik.com.br. We confirm receipt of your request immediately and reply with the full information within 15 (fifteen) calendar days (LGPD art. 19).

6. Data retention

We keep your data while your account is active. When you delete your account, the data leaves our database right away. Cost and page-usage records may be kept with no link to you, and payment records stay with Stripe for the period required by tax law. Security logs are kept for up to 12 months.

7. Storage and security

Your data is stored on Supabase (AWS us-east-1), encrypted at rest (AES-256) and in transit (TLS 1.3). We use Row Level Security so each user can only access their own data. Error monitoring is handled by Sentry.

8. International data transfer

Part of the processing happens outside Brazil, mainly in the United States and the European Union, by our providers Supabase (database), Vercel (hosting and logs), Anthropic (AI for chat and readings), Stripe (payment), Resend and Loops (email), Sentry (error monitoring), Google and Meta (campaign measurement, only with consent), Microsoft (Clarity, page-usage analytics, only with consent), komoot (Photon, in Germany, which receives the city typed in the search, with no name or email), Open-Meteo (time zone, which receives the city coordinates) and your browser notification service, if you turn it on.

9. Cookies and tracking

We use strictly necessary cookies for authentication and the service to function. With your explicit consent, we also use Google Analytics and Facebook Pixel for analytics and campaign measurement, and Microsoft Clarity to understand how pages are used (clicks, scrolling, and session recording). Clarity masks all text on product screens (chat, readings, charts and account). On the public pages of the site, text appears in the recording. These cookies only load after you accept them in the consent banner. When an error occurs, Sentry may record the session for diagnosis, with all text masked and images blocked. This recording serves security and the operation of the service and does not depend on the banner. You can withdraw that consent at any time via the "Manage cookies" link in the footer.

10. Security incidents

In the event of an incident that may affect your data, we will notify the Brazilian data protection authority (ANPD) and affected users within the timeframes set by the LGPD (art. 48). Notification to data subjects will be sent by email in clear language.

11. Account deletion

You can delete your account directly on the platform, in your account area (the "Delete my account" button); deletion immediately removes from our database your charts, the people you added, conversations, memory, Diary, credits and notifications. Payment records stay with Stripe for the period required by tax law. This action cannot be undone. If you prefer, you can also request it via privacidade@vedik.com.br.

12. Data Protection Officer (DPO)

Responsible for personal data processing at Vedik:
Email: privacidade@vedik.com.br
Response time: immediate confirmation of receipt; full response within 15 calendar days (LGPD art. 19)