Your information
Privacy Policy
Effective 20 September 2026. This policy explains how Astronova, trading as Written in the Stars, handles personal information under South African law, including POPIA.
Who is responsible for your information?
Astronova is the responsible party for information processed through this service. Contact us at Astronovaza@gmail.com.
Information we collect
We process the purchaser's payment email and transaction details supplied by PayPal, including order and capture identifiers, price, currency and payment status. The payment email is also used to send the private card link and help recover access if the browser is closed. To create a card, we process the recipient's name, optional nickname, birth month and day, zodiac details, personal message, sender name and selected theme. We do not ask for the recipient's birth year. A draft is stored in the purchaser's browser until it is cleared or replaced. After purchase, a customer may optionally submit a rating and written feedback; this feedback remains private and is used only to improve the service.
Information about another person
The purchaser usually provides information about the card recipient. The purchaser must have permission to provide and share it. If the recipient is under 18, the purchaser must be the parent, legal guardian or other competent person authorised to consent to the processing.
Why and on what basis we use it
We use the information to generate and deliver the personalised card, process and verify payment, provide customer support, prevent fraud, keep legally required business records and protect the service. We rely on performance of the purchase agreement, consent or authority supplied by the purchaser, legitimate interests in operating and securing the service, and applicable legal obligations.
Optional product news
If you actively select the optional marketing checkbox at checkout, we record your consent and may use the purchaser email supplied by PayPal to send news about Astronova products and service updates. Marketing consent is not required to purchase a card. You may withdraw consent at any time by using the unsubscribe option in a marketing email or contacting Astronovaza@gmail.com. Transactional card-delivery and service emails are separate from marketing communications.
Who receives information
Information is shared only as needed with our website hosting and database providers, Resend for transactional card-delivery email, and PayPal for checkout, fraud prevention and payment processing. PayPal acts as an independent controller of payment information under its own Privacy Statement. We do not receive or store the customer's complete card details.
International processing
Our service providers may process information outside South Africa. We select providers with contractual and technical safeguards and take reasonable steps to ensure that cross-border processing receives appropriate protection.
Storage, links and retention
Paid card content is stored to keep the private card link working. The link is a confidential access key: anyone who receives it may view the card, so customers should share it only with intended recipients. We retain personal information only while needed to provide the card, handle support or disputes, protect the service and meet legal obligations. Payment and accounting records may be retained for the statutory record-keeping period. You may request deletion of card content sooner, subject to records we must lawfully retain.
First-party service analytics
We record anonymous browser-session events when someone visits the homepage, starts a card, reaches the preview or checkout, and when PayPal verifies a purchase. This helps us understand the sales funnel and improve the service. The analytics record does not contain an IP address, recipient details, personal message or complete payment information, and it is not used for advertising or cross-site tracking.
Browser storage and PayPal technology
The creator uses essential browser storage to keep an unfinished draft on the device and session storage to assign a temporary anonymous analytics session. We do not use advertising or behavioural analytics cookies. PayPal may use cookies or similar technology when its checkout is loaded, under PayPal's own policies.
Security and compromises
We use reasonable organisational and technical safeguards, restricted production access and payment verification. No online system can be guaranteed completely secure. Where required, we will notify affected people and the Information Regulator of a qualifying security compromise.
Your rights
You may ask whether we hold your information and request access, correction, objection, restriction or deletion where applicable. Contact Astronovaza@gmail.com. You may also complain to South Africa's Information Regulator at inforegulator.org.za.
Changes
We may update this policy when the service or legal requirements change. The effective date above identifies the current version.