The data controller for your personal data is Auraliax ("we", "our", "us"), based in the Republic of Argentina.

• Contact email: support@auraliax.com

Auraliax complies with Argentine Personal Data Protection Law No. 25,326 and its complementary regulations. The enforcement authority is the Agency for Access to Public Information (AAIP).

If you are located in the European Economic Area (EEA), Auraliax acts as the data controller within the meaning of the General Data Protection Regulation (GDPR). Argentina has received an adequacy decision from the European Commission, facilitating data transfers from the EEA.

We collect the following categories of information:

• Account data: name, email and password when you sign up.
• Birth data: date, time and place of birth you voluntarily provide to generate your astral chart or compatibility analysis.
• Usage data: IP address, browser type, operating system, pages visited, time spent, referring URL and device identifiers, collected automatically via cookies and similar technologies.
• Third-party authentication data: if you sign in with Google, we receive your name and email from the provider (Google OAuth).

If you are located in the EEA, we process your personal data under the following legal bases pursuant to Art. 6 GDPR:

• Consent (Art. 6(1)(a)): for non-essential cookies, newsletter and personalized advertising. You may withdraw your consent at any time.
• Performance of a contract (Art. 6(1)(b)): to create and manage your account, generate astral charts, horoscopes and compatibility analyses.
• Legitimate interest (Art. 6(1)(f)): to improve our services, prevent fraud and ensure site security.
• Legal obligation (Art. 6(1)(c)): when necessary to comply with applicable legal requirements.

We use the collected information to:

• Generate personalized horoscopes, astral charts and compatibility analyses.
• Manage your account and save your readings.
• Improve our services and user experience.
• Send updates if you subscribed to our newsletter (with your explicit consent).
• Protect against spam, fraud and misuse (reCAPTCHA).
• Comply with legal obligations.

We use cookies and tracking technologies. When you access the site, we display a consent banner allowing you to accept or reject non-essential cookies.

• Strictly necessary cookies: essential for site operation (session, language preference, CSRF token). No consent required.
• Analytics cookies: Google Analytics to understand site usage. Activated only with your consent.
• Advertising cookies: Google AdSense to show relevant ads. Activated only with your consent.

You can modify your cookie preferences at any time via the cookie banner or by configuring your browser. Rejecting non-essential cookies does not affect core site functionality.

We do not sell or share your personal information for third-party marketing purposes.

We share data only with the following service providers acting as data processors:

• Google Analytics: web traffic analysis (with IP anonymization enabled for EEA users).
• Google AdSense: contextual and personalized advertising (subject to your cookie consent).
• Google reCAPTCHA: spam and bot protection.
• Google OAuth: sign-in authentication.

These third parties are subject to their own privacy policies and to data processing agreements with us.

Your data is primarily stored and processed on servers located in the United States (through our hosting providers). Additionally, some of our service providers (Google Analytics, Google AdSense, Google OAuth) process data in the United States.

From Argentina: Law No. 25,326 permits international data transfers to countries with adequate levels of protection or when the data subject provides consent.

From the EEA: Argentina has received an adequacy decision from the European Commission (Decision 2003/490/EC), allowing data transfers from the EU to Argentina without additional safeguards. For transfers to the United States, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• The EU-US Data Privacy Framework, where providers are certified.

We ensure appropriate safeguards are in place to protect your data pursuant to Art. 46 GDPR.

We retain your personal information as long as your account is active or as needed to provide our services. Specifically:

• Account data: until you delete your account or request deletion.
• Readings and astral charts: while your account is active.
• Usage and analytics data: 26 months (Google Analytics configuration).
• Security logs: up to 12 months.

You can request account and data deletion at any time by contacting us at support@auraliax.com.

For all users:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Deletion: request deletion of your personal data.

Additional rights in the EEA (GDPR):

• Portability: receive your data in a structured, machine-readable format (Art. 20).
• Restriction: request restriction of processing in certain circumstances (Art. 18).
• Objection: object to processing based on legitimate interest (Art. 21).
• Withdrawal of consent: withdraw your consent at any time, without affecting the lawfulness of prior processing (Art. 7(3)).
• Complaint: lodge a complaint with the data protection authority of your country (list of EEA authorities) (Art. 77).

Additional rights in California (CCPA/CPRA):

• Right to Know: what personal information we collect, use and share.
• Right to Delete: request deletion of your personal information.
• Right to Opt-Out: we do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" opt-out mechanism.
• Non-discrimination: we will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, write to support@auraliax.com. We will respond within 30 days (or 45 days for CCPA requests).

Auraliax uses artificial intelligence to generate horoscopes and astrological interpretations. This automated processing:

• Is based on birth data you voluntarily provide.
• Is intended exclusively for entertainment purposes and does not produce legal effects or similarly significantly affect individuals.
• Is not used to make decisions that legally or similarly significantly affect you.

Pursuant to Art. 22 GDPR, since this processing is for entertainment purposes and does not produce legal effects, automated decision-making restrictions do not apply. Nevertheless, you may contact us if you have questions.

Auraliax is not directed to individuals under 16 years of age. We do not knowingly collect personal information from individuals under 16. If you are a parent or guardian and discover that a minor has provided us with personal data, contact us at support@auraliax.com to request deletion.

In compliance with the Children's Online Privacy Protection Act (COPPA) of the United States, we do not collect information from children under 13 under any circumstances.

Under Argentine Law No. 25,326, processing of minors' data requires the consent of their parents or legal guardians.

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), secure password storage (hashing) and restricted access controls.

However, no method of Internet transmission or electronic storage is 100% secure. In the event of a security breach affecting your data, we will notify you in accordance with applicable law.

We reserve the right to update this Privacy Policy. Material changes will be notified via a prominent notice on the site or by email. The "Last updated" date at the top of this document will indicate when it was last revised.

We recommend reviewing this policy periodically.

If you have questions about this Privacy Policy or wish to exercise your rights, you can contact us at:

• Email: support@auraliax.com
• Controller: Auraliax, Republic of Argentina
• Supervisory authority (Argentina): Agency for Access to Public Information (AAIP)