Privacy Policy

Last updated on June 1, 2025

Privacy Policy

Privacy Policy

Privacy Policy

Preamble
What are we talking about?

Personal data refers to all information that allows you to be identified, either directly or indirectly. For example, personal data includes your contact information (name, first name, postal address) as well as your location, an identification number (IP address), a photograph, etc.

This Privacy Policy applies only to natural persons, hereinafter referred to as "Users", whether individuals or professionals, excluding legal entities.

These users benefit from our automated astrological analysis services powered by artificial intelligence through the Moania platform, hereinafter referred to as "Moania Services".

IMPORTANT AGE RESTRICTION: our services are strictly reserved for adults according to the legislation of their country of residence, with an absolute minimum age of 18 years. This restriction applies to all our users, regardless of their nationality or place of residence.

At Andelios, we only collect personal data that is strictly necessary for the realization of determined, explicit, and legitimate purposes.

What is the applicable regulation?

This Privacy Policy is primarily based on:

  • The Regulation (EU) 2016/679 of April 27, 2016, hereinafter referred to as "GDPR"

  • The law No. 78/17 of January 6, 1978, as amended, hereinafter referred to as "Data Protection Act"

  • International standards for the protection of personal data

For our international users: Andelios applies the highest data protection standards, drawing inspiration from the European GDPR, even for users residing outside the European Union.

Where can I find the mentions that concern me?

For the greatest possible clarity, we offer you several sources of information:

  • This Privacy Policy explains how we handle your personal data

  • The General Conditions of Sale (GCS) govern the commercial conditions applicable to our offers

  • The Legal Notices provide access to any useful information regarding our company

  1. Data Controller

In accordance with the regulations (GDPR, article 4), the data controller is the entity that determines the purposes and means of processing.

ANDELIOS

  • Legal form: Simplified joint-stock company (SAS)

  • Head office: 17 Alfred Roll Street, 75017 Paris, France

  • RCS: Paris SIRET: 98820552200010

  • Intra-community VAT: FR49988205522

  • Email: support@moania.ai

  1. PERSONAL DATA COLLECTED

Which of your personal data is being processed?

2.1 Personal information provided by you

The personal information we collect depends on the context of your interactions with us and our Services, the choices you make, and the features you use:

Identification data:

  • Last name, first name, gender

  • Email address

  • Proof of majority (declaration on honor of your age)

Contact or authentication information:

  • Phone number (optional)

  • Postal address (if applicable)

  • Country of residence

Specific astrological data:

  • Complete date of birth (day, month, year)

  • Time of birth

  • Place of birth (city, country, postal code, region)

  • Specific astrological questions or themes submitted

  • Astrological preferences and interests

2.2 Technical and navigation data

If you use our platform, we collect automatically:

Device Data:

  • Identifier of your mobile device/computer

  • Device model and manufacturer

  • Operating system and version

  • System configuration information

  • Device and application identification numbers

  • IP Address (Internet Protocol)

  • Browser type and version

  • Language of the browser or mobile device/computer

Usage Data:

  • Pages visited and time spent

  • Features used

  • Actions taken on the platform

  • Usage preferences

  • Login and activity logs

2.3 Geolocation Data

We may request access to your device's location information to improve the accuracy of our astrological analyses. If you wish to change our permissions, you can do so in your device settings.

2.4 Payment Data
  • Billing information

  • Transaction history

  • Payment methods used (bank data is processed by our secure provider)

  • Currency of payment and billing country

Important : all personal information you provide to us must be truthful, complete, and accurate. You must inform us of any changes to this information.

Among the processed data, which ones are considered sensitive?

Under Article 9.1 of the GDPR and Article 6.1 of the Data Protection Act, certain data is considered "sensitive" and is prohibited from processing except in certain cases.

You are expressly informed that:

  • Your personal astrological data (date, time, place of birth, spiritual themes) may be considered indicative of your philosophical or religious beliefs.

  • The collection and processing of such data are based solely on your explicit consent, which you can withdraw at any time.

  • Specific purpose: this data allows for the generation of personalized astrological analyses and the improvement of our AI algorithms.

  1. PROCESSING TERMS OF YOUR DATA

We use your personal data for the following purposes:

3.1 Provision of services (legal basis: performance of the contract)
  • Generation of personalized astrological analyses by AI

  • Saving and consulting your analyses

  • Technical and customer support

  • Age eligibility verification (legal majority)

3.2 Improvement and development (legal basis: legitimate interest)
  • Assessment of your use of our Services

  • Improvement of existing Services

  • Creation of new Services

  • Development and training of our AI algorithms

  • Anonymized statistical analyses

3.3 Security and compliance (legal basis: legitimate interest + legal obligations)
  • Securing our systems

  • Detection of fraudulent or illegal activities

  • Verification of age restriction compliance

  • Verification of compliance with the terms of use

  • Cooperation with authorities if legally required

3.4 Personalization (legal basis: consent/legitimate interest)
  • Understanding your profile and preferences

  • Improving your user experience

  • Personalized recommendations

  • Adaptation based on your geographical location

3.5 Communications (legal basis: contract execution + consent)
  • Sending confirmations, invoices, updates

  • Support and administration messages

  • Newsletter and marketing communications (with your consent)

  • Communications tailored to your language and timezone

3.6 Commercial management (legal basis: execution of the contract + legal obligations)
  • Payment processing

  • Accounting management and invoicing

  • Customer relationship

  • Management of currencies and exchange rates

How do we collect your data?

We collect your data in three ways:

  • Direct collection: through your browsing and use of our platform

  • Indirect collection: via our technical partners (with consent)

  • Automatic collection: technical and browsing data

Are your data shared with third parties?

We only share your personal data with recipients who strictly need it:

Technical providers:

  • Hosting and infrastructure (OVH)

  • Payment processing (Stripe, PayPal)

  • Emailing services (Brevo)

  • Analytics and audience measurement (Google Analytics)

  • Customer support and client relations

  • Referral platforms (GetRewardful, Tremendous)

Legal obligations:

  • Regulatory authorities, jurisdictions if required

  • Accountants, statutory auditors

  • Lawyers, bailiffs in case of disputes

All our service providers are bound by subcontracting contracts that comply with GDPR or equivalent international standards.

Is your data transferred outside of the European Union?

Some data may be transferred to third countries, primarily to the United States and Canada where our technical service providers are located.

We ensure that any transfer is:

  • Made to a country with an adequacy decision from the European Commission, OR

  • Governed by standard contractual clauses with appropriate safeguards

  • Protected by additional technical and organizational measures

For our international users: we apply the same standards of protection during transfers, regardless of your location.

How long are your data retained?

Active account data:

  • Identification data: for the duration of the contractual relationship

  • Age verification data: for the duration of the contractual relationship

  • Astrological data: for the duration of the contractual relationship + 3 years

  • Generated analyses: according to your settings (deletion possible at any time)

Closed/Inactive Account Data:

  • Automatic deletion 3 years after closure or last login

  • Possible retention for legal obligations (accounting: 10 years)

Technical data:

  • Connection logs: maximum of 12 months

  • Cookies: according to chosen settings (maximum 13 months)

Commercial prospecting:

  • Non-clients: 3 years from the last contact

  • Former clients: 3 years from the end of the relationship

  1. YOUR INDIVIDUAL RIGHTS
What rights do you have regarding your personal data?

Right of access (article 15 GDPR) You can request confirmation that your data is being processed and obtain a copy of your personal data.

Right to rectification (article 16 GDPR) You can obtain the rectification of inaccurate data or their completion.

Right to erasure (article 17 GDPR) You can obtain the erasure of your data, in particular when:

  • They are no longer necessary for the original purposes

  • You withdraw your consent

  • They have been subject to unlawful processing

Right to restriction (article 18 GDPR) You can obtain the restriction of processing your data in certain circumstances.

Right to object (article 21 GDPR) You can object to processing based on legitimate interests for reasons relating to your particular situation.

Right to data portability (article 20 GDPR) You can receive your data in a structured, machine-readable format, and transmit it to another controller.

Rights related to automated decision-making (article 22 GDPR) You can contest a decision made solely through automated processing and request human intervention.

For our international users: Andelios acknowledges these same rights to all its users, regardless of their geographical location.

How to exercise your rights?

Contact : Email : support@moania.ai

Required Information:

  • Clear indication of the rights exercised

  • Proof of identity if there are doubts about your identity

  • Country of residence (to tailor our response according to applicable regulations)

Response time: 1 month maximum (extendable to 3 months for complex requests)

Do you have the right to file a complaint?

For EU residents: You can file a complaint with the National Commission on Informatics and Liberty (CNIL):

  • Online: www.cnil.fr

  • Mail: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

For international users: you can contact the relevant data protection authority in your country of residence, or contact us directly to resolve the dispute amicably.

  1. MANAGEMENT OF COOKIES AND TRACKERS

In order to improve the functioning of the site and optimize your browsing, we may place cookies through subcontractors or partner companies.

Types of cookies used

Essential cookies (no consent required)

  • User session management

  • Authentication and security

  • Shopping cart functionality

  • Essential browsing preferences

  • Age eligibility verification

Analytical cookies (consent required)

  • Audience measurement

  • Visit statistics

  • User experience improvement

  • A/B testing for optimization

  • Anonymized geographical analyses

Marketing Cookies (consent required)

  • Advertising personalization

  • Social networks

  • Remarketing

  • Campaign performance measurement

Management of your cookie preferences

You can set your preferences via:

  • The consent banner during your first visit

  • Your account settings

  • Your browser settings

Retention periods
  • Life span of the trackers: 13 months maximum

  • Information collected: 25 months maximum

reCAPTCHA

Our site uses Google's reCAPTCHA to detect human browsers and prevent automated abuses.

  1. TREATMENT BY ARTIFICIAL INTELLIGENCE
Nature of AI treatment

Our artificial intelligence algorithms:

  • Analyze your astrological data to generate interpretations

  • Personalize recommendations based on your profile

  • Improve based on anonymized user feedback

  • Adapt to cultural and geographical differences

Automated decision-making
  • Our analyses are automatically generated by AI

  • No decision with significant legal effects is made without possible human intervention

  • Automatic age verification during registration (with the possibility of appeal)

Improvement of algorithms

Anonymized data may be used to:

  • Train and improve our AI models

  • Develop new features

  • Conduct overall statistical analyses

  • Adapt our services to different cultures

Legal basis: Legitimate interest, with the possibility of opposition

  1. DATA SECURITY
Technical measures
  • Encryption of sensitive data (AES-256)

  • Secure protocols (HTTPS/TLS 1.3)

  • Strong and multi-factor authentication

  • Automatic encrypted backups

  • Continuous access monitoring and intrusion detection

Organizational measures
  • Regular training of staff on GDPR and international standards

  • Strict access procedures according to the principle of least privilege

  • Confidentiality agreements for all participants

  • Regular security audits by third parties

  • Documentation and traceability of processing

Data breach

In case of a violation, we commit to:

  • Notify the competent authorities within 72 hours if there is a high risk to your rights

  • Inform you directly if there is a high risk

  • Document the incident and the corrective measures taken

  • Implement additional preventive measures

  1. AGE RESTRICTION AND VERIFICATION
Minimum age required

ABSOLUTE RULE : Our services are strictly prohibited to minors.

Definition of a minor : Any person who has not reached the legal age in their country of residence, with an absolute minimum age of 18 years for all our users.

Universal application : This restriction applies to all our users, regardless of their nationality, place of residence, or applicable local regulations.

Verification procedures

When using our services:

  • Mandatory declaration of your majority

  • Automated verification with the provided birth data

Measures in the event of detecting a minor

By using our services, you certify under oath:

  • To be of legal age according to the laws of your country of residence

  • To be at least 18 years old

  • Not to use the service on behalf of or for the benefit of a minor

  1. DISPUTES AND MEDIATION
Applicable law

This Policy is subject to French law.

For international users: In the event of a conflict between French law and your local law regarding data protection, the provisions most favorable to the user will apply.

Friendly resolution

In the event of a dispute, we strive to reach a good faith amicable resolution within 60 days.

Mediation

European users:

  • European RLL platform: https://ec.europa.eu/consumers/odr/

  • Accredited consumer mediator

International users:

  • Local mediation according to available organizations

  • Remote mediation via our customer service

Competent jurisdiction

In the absence of an amicable resolution:

French residents: Paris courts

European residents: French courts or courts of your country of residence, at your choice

International residents: Paris courts, unless otherwise provided by international agreement