Privacy Policy

Last updated: 12 July 2026

This Privacy Policy explains how Supreme Commerce OOD ("we", "us", "our") collects, uses, shares, and protects your personal information when you use bendistars.com (the "Service"). We comply with applicable data protection laws, including the EU and UK GDPR, the California Consumer Privacy Act as amended by the CPRA, and other applicable US state privacy laws.

1. Who we are (Data Controller)

Supreme Commerce OOD (a limited liability company registered in Bulgaria)
Company registration number (ЕИК): 208832983
VAT: BG208832983
Contact: SupremeCommerce

2. Information we collect

• Birth details you provide — date, time, and place of birth (and, for compatibility or family readings, the same details of the additional people you enter), used to generate your astrology readings.
• Account and contact data — your name and email address, and login credentials for your Star Profile.
• Order and subscription data — the products or subscriptions you purchase and their status.
• Payment metadata processed by Stripe (we never receive or store your full card number).
• Usage data — pages viewed, language preference, approximate location (from IP), device and browser type.

3. How we use your information

We use your information to:

• Generate your personalized astrology readings and, for subscribers, deliver your daily reading by email;
• Create and manage your account and subscription;
• Process payments and prevent fraud;
• Communicate with you about your orders, subscription, and support requests;
• Send marketing emails only where you have consented, with an unsubscribe option in every message;
• Improve, secure, and operate the Service;
• Comply with our legal, accounting, and tax obligations.

4. Legal bases for processing (GDPR / UK GDPR)

We rely on: performance of a contract (to deliver the readings and subscription you purchase); consent (for generating readings from the birth details you provide, for non-essential cookies, and for marketing); legitimate interests (to secure and improve the Service and prevent fraud); and legal obligation (tax, accounting, regulatory).

You may withdraw consent at any time; this does not affect processing already carried out.

5. How your readings are generated

Your readings are generated using a third-party AI service, the Anthropic (Claude) API. To create your reading, the birth details and information you provide are transmitted to Anthropic solely to generate the text of your reading or PDF. Under our commercial agreement with Anthropic, your data is not used to train AI models. We do not use your information to identify or profile you beyond providing the Service.

6. Third parties we share data with (sub-processors)

We do not sell your personal information to any third party.

7. International data transfers

Because some providers operate outside the EU/UK (including in the USA), your data may be transferred internationally. Where we do so, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

8. Data retention

• Birth details and account data: retained while your account or subscription is active, so we can generate your readings (including daily subscriber readings), and for a reasonable period afterwards, then deleted or anonymized. You may request deletion at any time.
• Order and payment metadata: retained as required to meet our legal, tax, and accounting obligations under Bulgarian and EU law.
• Data processed by our AI provider: any inputs/outputs held by Anthropic are retained by them only for a limited period for safety and security purposes, and are not used for model training.

9. Payment data

All payments are processed securely by Stripe. We never see or store your full card number. Stripe's handling of your data is governed by its own privacy policy.

10. Your privacy rights

EU / UK (GDPR): access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. You may lodge a complaint with your local Data Protection Authority (in Bulgaria, the CPDP).

California (CCPA/CPRA): know, access, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share your personal information. You will not be discriminated against for exercising these rights.

Other US state residents (Virginia, Colorado, Connecticut, Texas, and others) have similar rights under their applicable state laws.

To exercise any right, contact us at SupremeCommerce

11. Cookies

We use cookies as described in our Cookie Policy. Please see it for details and to manage your preferences.

12. Data security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit and access controls. No method of transmission over the internet is fully secure, but we use industry-standard practices.

13. Children's privacy

The Service is not intended for individuals under 16 (or under 13 where permitted by local law). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date reflects the latest version.

15. Contact

For any privacy questions or to exercise your rights, contact us at SupremeCommerce