Controller

Mindaugas Eidukas, individual activity certificate No. 1484762, email info@orion-academy.eu.

Data we collect

Email address, your question or name and birth date (depending on the reading), payment identifier, reading content, your messages to Orion and its replies, rating, ad source tags (UTM). Card details are handled only by Stripe.

For palm reading: a photo of your palm. It is sent to Anthropic's AI to read the lines and deleted straight away: we do not store the photo, only the reading text. The photo is used only for the reading, never to identify you.

For dream interpretation: your description of the dream and your answers to Orion's questions. The full dream text is stored encrypted; its opening, de-personalised, is used for anonymous topic analysis.

With your cookie consent: how you use the site (when you visited, which reading you chose, whether you opened checkout), linked to a random visitor identifier and, after a purchase, to your email. We do not store your IP address or what you type here. Without consent we only count anonymous events with no identifier.

Purposes and legal bases

Creating, delivering and storing your reading – performance of a contract.

Receipts and bookkeeping – legal obligation.

Offers about similar services to customers – legitimate interest, with an unsubscribe link in every email.

News and card of the day – your consent, confirmed by email. You can withdraw it at any time.

Measuring ad performance (Meta pixel) – only with cookie consent.

Understanding how the site and readings are used to improve them (our own analytics and Microsoft Clarity) – only with cookie consent.

Processors

Stripe (payments), Supabase (database, Europe), Vercel (hosting), Anthropic (AI that writes the reading and Orion's replies; the question, cards or numbers, your messages to Orion and, for palm reading, the palm photo, for dream interpretation, the dream and your answers to Orion's questions are sent), Resend (email); only with consent – Google Analytics, Microsoft Clarity (site usage analysis and session recordings) and Meta. Some processors may transfer data outside the EU under EU standard contractual clauses.

Retention

Readings and purchase data for 24 months, accounting records as required by law, marketing consents until you withdraw them, site usage events for 13 months.

Your rights

You can request access, correction, deletion, restriction or portability of your data and object to processing. Email info@orion-academy.eu. You may also complain to the State Data Protection Inspectorate (www.vdai.lrv.lt).