Lunthea

Privacy policy

Last updated: July 2026.

Data controller

The data controller is GATAX (SASU), 107 Promenade des Anglais, 06000 Nice, France (see Legal notice). For any question about your data: info@gatax.dev.

Data we collect

Purposes and legal basis

Your data is processed to provide the service (performance of the contract), manage your account and payments, and meet our legal and accounting obligations. Reading personalisation is based on your explicit request.

Processors

We use providers that process data on our behalf: Vercel (site hosting and cookieless audience measurement), Supabase (database and authentication), Stripe (payments), Resend (sending the email with the link to your reading) and Anthropic (AI-generated interpretations). Your reading input is sent to the AI model only to produce the text, and is not used to train it.

Your saved readings

Every paid reading is saved so you do not lose it, and its link is emailed to you. That link contains a random, unguessable identifier; anyone holding it can read the reading, so only share it with people you trust. We keep these readings for 24 months, after which they are deleted. You can ask for any of them to be deleted sooner at any time.

Retention

Account data is kept while the account is active. Readings are kept for 24 months. Billing data is kept for the period required by law (10 years for accounting records). You can request deletion of your account at any time.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, port and object to the processing of your data. You can exercise these rights by contacting us. You also have the right to lodge a complaint with the French data authority (CNIL, cnil.fr).

Anonymous readings

Free previews require no account, and your questions stay private.