Privacy policy

1. Controller

Oleh Rostov (Tetra)

Karoline-Veith 31

60486 Frankfurt am Main

Germany

Email: TODO: contact email

2. Hosting and server logs

Tetra is hosted by Vercel Inc. (USA). When you open the site, Vercel processes technically necessary data such as your IP address, time, requested address and browser identifier to deliver the site and protect it from abuse.

The legal basis is our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). Transfers to the USA rely on the EU-US Data Privacy Framework or EU standard contractual clauses.

3. Questions and AI readings

When you request a reading, we send your question, the chosen area of life, the figures and numbers and the language through the Vercel AI Gateway to the AI provider Anthropic (USA), which writes the text. We do not store your question or the reading permanently.

The legal basis is providing the service you asked for (Art. 6(1)(b) GDPR). Please don't include names of other people, health information or other sensitive data in your question.

4. Daily limit for free readings

To limit free readings per day, we store your IP address together with a counter at Upstash (Redis database) for at most 24 hours.

The legal basis is our legitimate interest in preventing abuse and excessive costs (Art. 6(1)(f) GDPR).

5. Cookies

We only use technically necessary cookies: “tetra-locale” remembers your chosen language (1 year); “tetra-wallet” links purchased credits to your browser and is only set when you buy.

These cookies do not require consent (§ 25(2) no. 2 TDDDG). We use no analytics, tracking or advertising cookies.

6. Payments

Credit purchases are processed by Stripe Payments Europe, Limited (Dublin, Ireland). You enter your payment details directly with Stripe; we only receive the payment confirmation, what you bought and your email address.

The legal basis is performing the contract (Art. 6(1)(b) GDPR) and our statutory retention duties (Art. 6(1)(c) GDPR; accounting records are kept for up to 10 years). Stripe’s own privacy policy also applies.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interests. Just write to the email address above.

You can also complain to a data protection supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information.