Privacy Policy
How Cassandria handles personal data across the Oracle, Business services and Research Lab. Last updated: 13 July 2026.
1. Data controller (identity)
The public-facing controller contact is Hendeka Orchestra, operating CassandrIA. Contact: cassandria@hendekaorchestra.com. Full statutory controller identification is available to customers, payment providers and competent authorities on lawful request at the contact address.
2. What we collect and why (legal basis)
- Account (email, Google sign-in identifier, name) — to provide the service and your consultation history. Basis: performance of a contract.
- Billing (subscription status, invoices) — payments are processed by Stripe acting as a processor; card data is handled by Stripe, not stored by us. Basis: contract and legal (tax/accounting) obligations.
- Business intake (dossier/pilot/quote requests and the details you provide) — to respond to and deliver the service you ask for. Basis: pre-contract steps and contract.
- Customer questions (the questions you ask the Oracle) — to produce a reading and, in aggregate and de-identified, to improve quality. Basis: contract and legitimate interest.
- Research consent — a question enters the PYTHIA research registry only with your explicit opt-in; consent defaults to off and can be withdrawn. Basis: consent.
3. Retention
- Account and consultation history: kept while your account is active; deleted on request or after prolonged inactivity.
- Billing and invoices: kept for the period required by applicable tax and accounting law.
- Business intake and customer questions: kept for the duration of the engagement and a reasonable follow-up period, then deleted or de-identified.
- Research submissions: retained as sealed records for the trial; the link to your identity is removed on de-identification.
4. Sharing and international transfers
We share data only with processors needed to run the service (e.g. Stripe for billing, hosting and email providers). Transfers outside the EU/EEA use safeguards required by applicable law, including Standard Contractual Clauses where applicable.
5. Your rights
You may request access, rectification, erasure, restriction, portability, and object to processing; and withdraw consent at any time. Email cassandria@hendekaorchestra.com. You may also complain to the Spanish supervisory authority (AEPD).
6. Contact
cassandria@hendekaorchestra.com — privacy requests and questions.