Privacy Policy

Monad Ventures B.V. ("we", "us", "our") operates PathFinder ("the Service"). This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable Dutch and European privacy laws.

This policy covers the PathFinder web application at app.pathfindercharts.com, this website, and the PathFinder mobile applications for iOS and Android. It applies the same way however you access the Service.

1. Data Controller

The data controller responsible for your personal data is:

Monad Ventures B.V. — registered in the Netherlands
Adriaan Kooningsstraat 262
3077 ML Rotterdam
Netherlands
KvK: 42146834
BTW: NL869922531B01
Email: [email protected]

Since 25 August 2026 the Service has been operated by Monad Ventures B.V. It was previously operated by the sole proprietorship Automa (KvK 75088088), whose business Monad Ventures B.V. has taken over in full; "Automa" remains a registered trade name of Monad Ventures B.V. Nothing about the Service itself changed as a result.

2. What Data We Collect

We collect the following personal data when you create an account and use the Service:

• Account information — your name, email address, and password (hashed)
• Birth data — date, time, and location of birth, used to calculate astrological charts
• Usage data — which charts and features you use within the Service
• Subscription status — whether you are on the free or paid plan, and the identifier your payment provider assigns to your subscription
• Sign-up attribution — if you reached the web app through a marketing campaign link, the campaign tags from that link (utm_source, utm_medium, utm_campaign, utm_content, utm_term) are stored with your new account so we can see which campaigns bring sign-ups. We record these whether or not you accepted analytics, based on our legitimate interest; they stay in our own database and are not sent to anyone. OpenAI's click reference and a Google Ads click identifier are kept and used only if you accepted, as described below.
• Device data (mobile apps only) — if you turn on notifications, a push notification token so we can deliver them. Turning notifications off removes it.

We do not collect or store payment information. Card numbers and billing details go directly to the payment provider — Stripe for web subscriptions, Apple or Google for subscriptions bought inside the mobile apps — and never reach our servers.

We do not show advertising or use advertising identifiers (Apple IDFA or Google Advertising ID). We do not track you across other apps or websites, and the iOS app therefore never asks for App Tracking Transparency permission. The only advertising references we handle are the click reference OpenAI adds to the link when you click one of our ads in ChatGPT and the click identifier Google Ads adds when you click one of our ads on Google, both described below.

Analytics and advertising measurement — only with your consent. On this website (pathfindercharts.com) and in the web app (app.pathfindercharts.com) we use two analytics tools to understand how the Service is used so we can improve it: PostHog, a product analytics service hosted in the European Union, and Plausible, a cookieless analytics tool we host ourselves in the Netherlands. Both run on both surfaces. Both are loaded only after you choose "Accept" in the consent banner shown on your first visit — each surface asks separately. If you choose "Reject", or make no choice at all, neither is loaded and no analytics data is sent anywhere — the only thing stored is your consent choice itself, kept in your browser's local storage. After you accept, PostHog stores a randomly generated identifier in your browser (a cookie and local storage) and records the pages you view and interactions such as clicks, along with technical details like browser type and screen size. Plausible sets no cookie and records only aggregate page views. We do not use session recording or surveys. On this website only — the web app does not load it — we also use the Meta Pixel for advertising measurement: measuring whether our Pinterest and Meta marketing works and building ad audiences. The Meta Pixel is loaded only after you choose "Accept" on this website; after acceptance, Meta sets the _fbp cookie. If you arrive by clicking one of our ads in ChatGPT, OpenAI adds a click reference (oppref) to the link. If you have accepted on this website, it keeps that reference, a Google Ads click identifier (gclid, gbraid or wbraid) if you arrived from one of our Google ads, and the campaign tags described in Section 2.1 in your browser's session storage for the rest of your visit, so they reach the web app from any page; they are removed when you close the tab or choose "Reject", except that a note that a guide request already carried the reference stays until you close the tab, and the code used to withdraw that guide request stays until the withdrawal goes through or you close the tab. If you have accepted in the web app, it keeps them in your browser's local storage for up to 30 days from when they were captured; they are removed once you sign up, choose "Reject", or sign out. If you have accepted on this website when you request our free guide, or in the web app when you sign up, our servers tell OpenAI when that ad click led to a guide request, sign-up, trial, or subscription. OpenAI receives its own click reference, the type of event, the time of the event, a random event identifier, the address of the relevant page on our site, and, for a trial or subscription, the plan type (monthly or annual) — never the price, your name, email address, IP address, or birth data — and no OpenAI pixel, script, or cookie is loaded on this website or in the web app. In the same way, if you signed up after clicking one of our Google ads and had accepted in the web app, our servers send Google Ads the click identifier, a random event identifier, and the time, amount and currency of your first payment, so Google Ads can count a paid subscription from that ad — never your name, email address, IP address, or birth data — and no Google Ads tag, script, or cookie is loaded on this website or in the web app. You can withdraw your consent at any time: on this website via the "Privacy choices" link in the footer of every page, and in the web app via the "Privacy choices" button on its privacy page. Choosing "Reject" stops analytics capture and the Meta Pixel immediately, and neither analytics tool nor the Meta Pixel will be loaded on future visits. Choosing "Reject" in the web app also withdraws your consent to notices to OpenAI and Google Ads about your account: immediately if you are signed in, and otherwise the next time you sign in on that device. Choosing "Reject" on this website withdraws your consent and also removes the click reference stored with a guide request you made in the same browser tab during that visit; for an earlier guide request, contact us or unsubscribe from our emails, which deletes your guide request and the click reference stored with it.

The mobile apps store your login session in the device's encrypted storage (iOS Keychain / Android Keystore) and keep a local copy of your display preferences. This data stays on your device and is removed when you sign out or uninstall the app. The apps request no access to your contacts, photos, camera, microphone, or location.

2.1 Email Capture

We collect email addresses on this website through an opt-in email capture form to send you a free astrology guide and occasional insights. This is a separate consent from analytics — you can accept marketing email without accepting analytics, and vice versa. When you submit the form, we collect:

• Your email address — needed to send you the guide and follow-up messages
• Your consent choice — the checkbox confirming you want to receive email from us
• The source of the form — which page or section you signed up from (e.g., "homepage-hero", "blog-footer")
• Campaign attribution metadata (optional) — if you arrived via a marketing campaign link, we capture: which campaign brought you here (utm_campaign), the medium it came through (utm_medium like "social"), the source platform (utm_source like "pinterest"), optional campaign content identifier (utm_content), and optional custom term (utm_term). If you arrived from one of our ads in ChatGPT, the link also carries OpenAI's click reference (oppref). We store it with your email address only if you have accepted in the consent banner on this website, so we can tell OpenAI that the ad click led to a guide request, and we pass it on to the web app when you follow a link to it, as described in Section 2.
• Your landing page — the pathname of the page you signed up on (e.g., "/blog/what-is-predictive-astrology"), never the full URL or query string
• Referring site hostname (optional) — the hostname of the site that referred you, if it's external to pathfindercharts.com and app.pathfindercharts.com (e.g., "pinterest.com" if you came from a social link). We exclude our own sites to avoid logging internal traffic.

The campaign attribution data, landing page, and referrer host allow us to understand which marketing campaigns and messaging work best, so we can improve future content. None of these fields are required — if you visit directly or without a campaign link, you can still sign up successfully.

We do not sell this email list. We use it only to send you the guide you requested and occasional astrology insights. You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email.

3. How We Use Your Data

We process your personal data for the following purposes:

• Providing the Service — calculating astrological charts and generating AI-powered interpretations based on your birth data
• Account management — authenticating your identity and managing your subscription
• Transactional emails — sending account-related communications (e.g., password resets, subscription confirmations)

4. Legal Basis for Processing

We process your data based on the following legal grounds under the GDPR:

• Performance of a contract (Art. 6(1)(b)) — processing necessary to provide the Service you signed up for
• Legitimate interest (Art. 6(1)(f)) — improving and securing the Service, and recording the campaign tags (utm_*) of the link that led to a new account
• Consent (Art. 6(1)(a)) — analytics and advertising measurement on the website and the web app, including telling OpenAI when a click on one of our ChatGPT ads led to a guide request, sign-up, trial, or subscription and telling Google Ads when a click on one of our Google ads led to a first payment, which run only after you accept them in the consent banner. You can withdraw this consent at any time via the "Privacy choices" controls described above; withdrawing it is as easy as giving it and does not affect your use of the Service.

5. Third-Party Services

We share data with the following third-party service providers, all of which maintain their own privacy policies. Most act as processors on our behalf; where one acts as a controller, we say so below:

• Stripe — payment processing for subscriptions bought on the web. Stripe receives your payment details directly; we never see or store them.
• Apple and Google — payment processing for subscriptions bought inside the iOS and Android apps. Your purchase is made with Apple or Google under their own terms and privacy policies; they tell us only that a valid subscription exists.
• RevenueCat — manages mobile subscription status. It receives your PathFinder account identifier and the purchase details needed to confirm your subscription. It does not receive your name, email address, or birth data.
• Fireworks AI — AI model provider used to generate astrological interpretations other than the yearly reading (and the yearly reading itself if Anthropic is unavailable). Your chart data (planetary positions derived from your birth data and, if you relocate your solar return in a yearly reading, the place you chose) is sent for processing. For relationship charts, the display names you have given the two profiles are included so the reading can refer to them. We never send your email address. Fireworks does not use what we send to train or improve their models, and operates zero data retention on the interface we use: your prompt and the generated interpretation exist only in memory for the duration of the request and are not logged or stored by them.
• Anthropic (contracting entity for customers in the EEA: Anthropic Ireland, Limited) — AI model provider used to generate your yearly reading. Your chart data (planetary positions and yearly-forecast chart data derived from your birth data and, if you relocate your solar return, the place you chose) is sent for processing. We never send your email address. Anthropic does not use what we send to train its models. Anthropic deletes inputs and outputs within 30 days by default, and may keep them longer where needed to enforce its usage policy or comply with law. We have no zero-data-retention agreement with Anthropic.
• Plausible Analytics — web analytics. Plausible is self-hosted by us on our EU infrastructure (no data sent to external servers), operates without cookies, and runs only if you have accepted analytics consent.
• Meta Platforms Ireland Limited — processor/joint controller for advertising measurement and building ad audiences on this website, loaded only after consent. See Meta's privacy policy.
• OpenAI Ireland Ltd — independent controller for advertising in ChatGPT. If you requested our free guide after clicking one of our ChatGPT ads and accepted on this website, or signed up after clicking one and accepted in the web app, our servers send OpenAI the click reference it added to the ad link, the type of event (guide request, sign-up, trial, or subscription), the time of the event, a random event identifier, the address of the relevant page on our site, and, for a trial or subscription, the plan type (monthly or annual) — never the price, your name, email address, IP address, or birth data. OpenAI uses this data under its own privacy policy to report on, deliver, and optimise ads and to improve its services. No OpenAI pixel, script, or cookie runs on this website or in the web app. See OpenAI's privacy policy.
• Google Ireland Limited — Google Ads. If you signed up after clicking one of our Google ads and accepted in the web app, our servers send Google Ads the click identifier it added to the ad link, a random event identifier, and the time, amount and currency of your first payment, so Google Ads can count a paid subscription from that ad — never your name, email address, IP address, or birth data. No Google Ads tag, script, or cookie runs on this website or in the web app. See Google's privacy policy.
• Hetzner Online GmbH — hosting provider for our primary application servers and database, in their Falkenstein, Germany data centre. Hetzner is a German company and the data it holds for us stays inside the EU.
• Cloudflare — content delivery network and edge network for the website and web app. Cloudflare provides DDoS protection and performance optimization for our edge traffic.
• GitHub and Slack — if you submit in-app feedback through the Service, its text (which may include technical diagnostics) is forwarded to our issue tracker and team chat for review. Both GitHub and Slack are US-based services.
• Resend — transactional email delivery
• PostHog — consent-based analytics on the website and the web app, hosted on PostHog's EU Cloud (data stored in the European Union). It receives usage data (pages viewed, clicks, browser and device details) only if you have accepted analytics, and never receives your name, email address, or birth data.

We do not sell your personal data, and we do not share it with other advertisers or data brokers. The only advertising platforms that receive data from us are Meta, OpenAI and Google Ads, as described above, and only with your consent.

5.1 Connecting Your Account to AI Assistants

You can connect your PathFinder account to a third-party AI assistant (such as Claude, ChatGPT, or Meta Muse) through our MCP server. This only happens when you choose to set up a connection.

• How a connection is made — the connection uses OAuth. You sign in on PathFinder and explicitly approve the connection. The assistant never sees your PathFinder password.
• What the assistant sends us — when you ask the assistant something, it sends PathFinder only the tool inputs needed to answer, such as a birth date, birth time, birthplace, or a place search term, and it can read your saved chart profiles and saved readings. PathFinder does not receive the rest of your conversation.
• What we send the assistant — PathFinder returns computed chart data (planet positions, houses, aspects, transits, and chart images) to the assistant. Once returned, the assistant provider's own privacy policy governs how they handle it.
• Usage limits — requests made through a connection count toward your usage limits and are processed like other PathFinder API requests.
• Disconnecting — access tokens are short-lived. A connection stays active until you disconnect it under Settings → Connected apps in the PathFinder app at app.pathfindercharts.com, after which the assistant loses access immediately. You can also remove the connection from the assistant's side.

6. Data Storage and Security

Our primary application servers and database are hosted by Hetzner Online GmbH in their Falkenstein, Germany data centre, inside the European Union. AI inference processing is performed by Fireworks AI for all readings except the yearly reading (for which it is the backup), under Standard Contractual Clauses with zero-data-retention configuration, and by Anthropic for the yearly reading, under Standard Contractual Clauses without zero data retention (see Sections 5 and 7). Web traffic transits through Cloudflare's global edge network. We protect your data with:

• Encryption in transit (TLS/HTTPS) for all traffic
• Encryption at rest — the disks holding your data use full-disk encryption
• Passwords and tokens stored hashed (never in plain text)
• Access controls limiting who can access production systems

7. Data Retention

We retain your personal data for as long as your account is active. If you do not sign in for 24 consecutive months, we may delete your account and all associated data after giving you notice by email.

When you delete your account, your profile, birth data, charts, and interpretations are erased from our production database immediately. Copies in operational logs and short-lived caches age out on fixed retention schedules rather than being deleted instantly. We keep only the records we are legally required to keep — principally payment and invoice records, which Dutch tax law requires us to retain for seven years.

If you signed up after clicking one of our ChatGPT ads, we delete OpenAI's click reference 30 days after we captured it, or immediately when you withdraw your consent in the web app (see Section 2) or delete your account. If you requested our free guide after clicking one of our ChatGPT ads and accepted on this website, we delete the click reference stored with your guide request 30 days after we captured it, or immediately when you choose "Reject" in the same browser tab during that visit, unsubscribe, or delete your account. We keep a record of which notices we sent to OpenAI (event type, time, and, for a trial or subscription, plan type, without the click reference) so nothing is reported twice. The record of a sign-up, trial, or subscription is kept with your account and deleted with it; the record of a guide request is kept with your guide request and deleted when you unsubscribe or delete your account. A notice that has not been sent within 7 days expires and is never sent. Notices already delivered to OpenAI are held by OpenAI as an independent controller under its own privacy policy, and deleting your PathFinder account does not delete them.

If you signed up after clicking one of our Google ads, we delete the Google Ads click identifier 30 days after we captured it, or immediately when you withdraw your consent in the web app or delete your account. We keep a record of which notices we sent to Google Ads (time, amount, currency, and a random event identifier, without the click identifier) so nothing is reported twice. A notice that has not been sent within 30 days expires and is never sent. Notices already delivered are held by Google, and deleting your PathFinder account does not delete them.

Yearly readings are generated by Anthropic, which deletes the inputs and outputs we send within 30 days by default, and may keep them longer where needed to enforce its usage policy or comply with law. Deleting your PathFinder account does not shorten that period.

You may delete your account at any time (see Section 8).

8. Your Rights Under the GDPR

As a data subject, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — request that we limit how we process your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest

Deleting your account yourself

You do not need to contact us to erase your data. You can delete your account and everything associated with it directly from the Service:

• iOS and Android apps — Settings → Delete Account
• Web app — Settings → Delete Account

Deletion is permanent and takes effect immediately. If you have an active subscription bought through Apple or Google, cancel it in your App Store or Google Play subscription settings as well — deleting your PathFinder account does not cancel a store subscription on your behalf.

You can also export a copy of your data from Settings at any time.

To exercise any of these rights, or if you would rather we handled it for you, contact us at [email protected]. We will respond within 30 days.

9. International Transfers

Our primary application servers are located in Germany, inside the EU. Some third-party processors (Stripe, Apple, Google, RevenueCat, Fireworks AI and Anthropic for AI inference, Resend, PostHog, Plausible, Cloudflare, Meta) may process data outside the EU or at the edge. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission. For Anthropic, these are the SCCs and UK Addendum incorporated in its Data Processing Addendum. Meta relies on the EU-US Data Privacy Framework and SCCs. OpenAI Ireland Ltd, which receives advertising data from us as an independent controller (see Section 5), may also transfer it outside the EEA; its privacy policy states that it relies on the European Commission's adequacy decisions and, elsewhere, on SCCs. Google, which receives advertising measurement data from us (see Section 5), may also transfer it outside the EEA; see Google's privacy policy for the safeguards it relies on.

10. Children's Privacy

The Service is not directed at children. You must be at least 16 years old to create a PathFinder account, which matches the age of digital consent under the GDPR in the Netherlands. We do not knowingly collect personal data from anyone under 16.

If you are a parent or guardian and believe your child has created an account or provided personal data, contact us at [email protected] and we will delete the account and its data.

11. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

12. Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

13. Contact

For any questions about this privacy policy or your personal data, contact us at:

Monad Ventures B.V. — registered in the Netherlands
Adriaan Kooningsstraat 262
3077 ML Rotterdam
Netherlands
KvK: 42146834
BTW: NL869922531B01
Email: [email protected]