Terms of service, refund policy, privacy, and data protection

This Refund Policy explains when and how you can get your money back for purchases made on TriMoon.world. It forms part of the Terms of Service and applies alongside — never instead of — your statutory consumer rights.

In short: your statutory EU and Polish consumer rights (the 14-day right of withdrawal and the remedies for non-conforming digital services) always apply in full. Beyond those rights, because our products are personalized digital services delivered immediately, additional goodwill refunds are exceptional.

Statutory 14-Day Right of Withdrawal (EU / Poland)

As a consumer in the European Union you can normally withdraw from a distance contract within 14 days without giving any reason (Directive 2011/83/EU; Polish Consumer Rights Act). For digital products the rules are:

• Default rule: You may withdraw within 14 days of the purchase or subscription sign-up by informing us of your decision. We refund all payments received within 14 days of your withdrawal notice, to the original payment method, at no cost to you.
• One-time reports (digital content): If at checkout you expressly consent to immediate generation of your report and acknowledge that you thereby lose the right of withdrawal, the right expires once generation has begun. Without that express consent and acknowledgment, the full 14-day right applies.
• Subscriptions (digital services): You may withdraw within 14 days of starting a paid subscription. If you asked us to begin providing the service during the withdrawal period, we may retain a proportionate part of the price for the days of service already provided and refund the remainder.
• Free trials: No payment is taken during a trial, so there is nothing to refund — simply cancel before the trial ends to avoid any charge.
• How to withdraw: Email us at the address below with an unequivocal statement that you withdraw from the contract (you may, but do not have to, use the model withdrawal form annexed to the Polish Consumer Rights Act). Include your account email and the purchase date.

Refunds on Subscription Services

For recurring subscription services (Lunar Calendar, Daily Transit Report):

• During the free trial: No payment is taken, so no refund applies. Cancel at any time before the trial ends to avoid any charge. The small card-verification hold placed at sign-up is not a charge and is released automatically by your bank.
• First subscription charge (trial conversion): You are charged on the day the trial converts into a paid subscription (or immediately, if you convert early). To avoid this charge, cancel before the conversion date. After conversion, any part of your statutory withdrawal window that is still running remains unaffected.
• Mid-period cancellation: Cancelling stops all future charges; access continues until the end of the already-paid period. The current period is not refunded pro-rata.
• Renewal charges: Cancel before the renewal date to avoid the next charge. A renewal charge is normally not refunded once the new period has started. Exception: an evidently accidental renewal reported within 7 days of the charge, with no use of the service in the new period, may be refunded as goodwill.
• Proration: A subscription month is an indivisible unit of service; partially used periods are not prorated.
• Switching between daily subscriptions: As a goodwill exception to the no-proration rule: if you cancel a Lunar Calendar subscription in order to switch to Daily Transit (which includes the full Lunar Calendar), contact support after subscribing to the new plan and we will refund the unused remainder of your current Lunar Calendar period.

Refunds on One-Time Purchases

For one-time digital reports (Natal Chart, Solar Return, Synastry, Progressions, Relocation Report):

• Delivered reports: Once your report has been generated and made available in your dashboard, it is deemed delivered and is not refundable — subject always to the statutory withdrawal rules above and the complaint rights below.
• Technical failure on our side: If a paid report cannot be generated or accessed due to a fault on our side and we cannot resolve it within a reasonable time, you receive a full refund.
• Charged but not delivered: If a report you paid for never appears in your dashboard after a reasonable processing time, contact us — we will either deliver it or refund the charge.
• Gifts: A report bought as a gift can be redeemed by the recipient within 90 days of its delivery. You can withdraw within 14 days of payment and get a full refund, as long as the recipient has not generated the report; the gift is then cancelled, including when it has already been redeemed but not yet generated. From the 15th day after payment, a gift that is not redeemed within its 90 days expires without a refund. The invoice is issued to you, the buyer, and never names the recipient. Until the gift is redeemed you can correct the recipient's e-mail address twice; anyone holding the redeem link can redeem it.

Defective Service? Statutory Complaint Rights

Independently of withdrawal and goodwill refunds, EU law (Directive (EU) 2019/770) and the Polish Consumer Rights Act make us responsible for the conformity of the digital content and services we supply. If what you received does not match its description or does not work as it should:

• Bring into conformity: You may first demand that we fix the non-conformity, free of charge and within a reasonable time.
• Price reduction or refund: If we cannot or do not fix it, you may demand a proportionate price reduction, or withdraw from the contract and receive a refund.
• Time limits: For one-time content we are liable for non-conformities that become apparent within two years of delivery; for subscriptions, throughout the entire supply period.
• Our response: Submit complaints to the contact address below. We respond within 14 days; under Polish law, if we fail to respond to a consumer complaint within that period, the complaint is deemed accepted.

Consequences of a Refund

Before requesting a refund, please note the following consequences:

• Access ends: When a subscription refund is granted, access to the corresponding service ends when the refund is issued.
• Credit note: A corrective invoice (credit note) reflecting the refund is issued automatically and made available in your dashboard.
• Trial eligibility: If a refund is granted for a service on which you used a free trial, you are no longer eligible for another free trial of that service; future use requires a regular paid subscription from day one.
• Chargebacks: Please contact us before initiating a chargeback — most issues are resolved faster that way. Unfounded chargebacks and abusive refund patterns may lead to account restrictions under the Terms of Service; your statutory rights are unaffected.

How to Request a Refund

To request a refund (statutory or goodwill):

• Step 1 — Email us: Write from the email address associated with your account to the address below, stating the purchase date, the service concerned, and the reason for the request.
• Step 2 — Review: We may ask for additional information needed to verify the case (for example, a screenshot of the issue or the time at which it occurred).
• Step 3 — Decision: We reply in writing within 14 days. Approved refunds are issued to the original payment method through our payment processor (Stripe).
• Step 4 — Settlement: Refunded amounts typically appear on your statement within 5 to 10 business days, depending on your bank and card scheme.

Goodwill refund requests should be made within 14 days of the charge in question. Statutory rights — withdrawal and non-conformity complaints — follow their own statutory time limits, which this Policy does not shorten.

Contact for Refund Requests

All refund requests must be submitted in writing to:

billing@trimoon.world

TriMoon.world is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 — "GDPR", known in Poland as RODO), the Polish Personal Data Protection Act, and other applicable data protection laws. This Privacy Policy describes which personal data we collect, why, for how long, and how it is protected.

The data controller for the personal data processed via the platform is Valeriia Bogach, NIP 8952299594, ul. Hugo Kołłątaja 6/3, Lublin, 20-006, operating as TriMoon.world. You may contact us at any time at the email address shown below for any matter related to your personal data.

Categories of Personal Data We Process

Depending on how you interact with the service, we process some or all of the following categories of personal data:

Account data: Email address, display name, preferred language, identity provider (Auth0/Google, etc.), authentication identifiers, and account activity logs.

Location data: The city, country, geographic coordinates (latitude/longitude), and UTC offset of the location for which astrological calculations are to be performed. This may be detected automatically (based on browser settings or IP address) or set manually by you.

Birth data (for your reports): Date, time, and place of birth — and, for Synastry reports, the birth details of the second person, which you must be entitled to share. We collect this only when you order a birth-data-based report (Natal Chart, Solar Return, Synastry, Progressions, Relocation Report) and only to generate that report. It is held transiently in a short-lived, automatically-expiring store (within roughly 24 hours) and deleted as soon as your report is produced — we do not keep your raw birth inputs afterwards. By its nature, the report we deliver is derived from the birth moment.

Birth data for the free natal chart calculator: When you use the free natal chart calculator, the date, time and place of birth you enter are sent once, inside an encrypted request, and used only to calculate the chart shown to you. We do not store them on our servers, write them to logs or put them in the page address. If you choose to continue to a paid report, your browser keeps only the date, the time and a place identifier, for that tab only (session storage) and for at most 30 minutes, so the report form can be filled in for you. They are removed as soon as the report form has used them, when you clear them, when you sign out or when the tab is closed. The anti-abuse check (Cloudflare Turnstile) and the rate limit process your IP address as described under technical and usage data.

Places you compare (Relocation Report): If you order the Relocation Report, you can name up to five places you are considering and choose the themes, regions and length of stay that matter to you. We keep them with your report, because the report is about them, and we erase them with it when you delete your account. They show where you are thinking of living, so we treat them as personal data: we never write them to logs or send them to analytics, and our internal notifications carry only counts, never a place name. The AI provider that composes the text receives the place names and your choices, but never your name or your email address.

Birth data for the free relocation map: When you use the free relocation map, the date and time of birth you enter, together with the clock offset at that moment, are sent once, inside an encrypted request, and used only to draw the lines shown to you. Your birthplace is used only to look up that clock offset in our own place list; it is not part of the request that draws the map. We do not store the request, write it to logs or put it in the page address. If you choose to continue to a paid report, your browser keeps only the date, the time and a place identifier, for that tab only (session storage) and for at most 30 minutes, so the report form can be filled in for you. They are removed as soon as the report form has used them, when you clear them, when you sign out or when the tab is closed. The anti-abuse check (Cloudflare Turnstile) and the rate limit process your IP address as described under technical and usage data.

Payment data: Identifiers issued by our payment processor (Stripe), order and invoice records, the currency used, and the type of payment instrument. We do not store full card numbers ourselves; full card data is held by Stripe under PCI DSS.

Technical and usage data: IP address, browser type and version, operating system, device identifiers, language, time-zone, pages viewed, and aggregated usage statistics, collected through standard server logs and privacy-friendly analytics.

Gifts: If you buy a gift, we store the recipient's e-mail address, the language you chose for them, your name as you entered it and your optional message, only to deliver the gift and send up to four reminders. The first e-mail tells the recipient where their address came from. We delete these details 30 days after the gift is redeemed, expires or is withdrawn. If you delete your account, your name and message are deleted at once and the gift stays redeemable for the recipient.

Location Data — Specific Notice

Location data deserves a particular focus, because the entire astrological output is computed for a specific point on Earth and is meaningless without it.

You may provide your location in three ways: (1) automatic country detection from your IP address by our network provider Cloudflare (the “CF-IPCountry” signal), which we use to pre-select your site language and display currency and, when you start a purchase, to check that you are buying from the European Union and to record that country with your order as tax evidence, and which sets the corresponding preference cookies; (2) your browser’s geolocation, used only at the moment you actively choose “use my location”; or (3) selecting a place manually. You can change or clear your location at any time in Settings.

Your location is used exclusively for the following purposes: to compute the astrological data you request (such as local moon phases, void-of-course periods, planetary transits, and timing of celestial events); to display times in your local time zone; to determine the applicable currency for pricing purposes; and to check where a purchase is made from and to keep that record as required by tax law. We do not use location data for advertising, profiling, or any commercial purpose unrelated to delivery of the service.

Location information is processed on the legal basis of contractual necessity (Article 6(1)(b) GDPR): without it, the service cannot be performed. The country recorded with a purchase is processed to meet our legal obligations under VAT law (Article 6(1)(c) GDPR). Where required by law, we additionally rely on your consent. You may withdraw this consent at any time by deleting the corresponding location from your settings, in which case the location-dependent features of the service will be disabled.

Location-name searches are matched against our own internal reference database of places and their time-zone offsets. Your search is not sent to any third-party geocoding service.

Purpose, Legal Basis, and Minimization

Purpose of Data Collection: We collect and process your personal data solely to provide accurate astrological services, to process payments and invoices, to communicate with you about the service, to comply with our legal obligations, and to protect the platform against fraud and abuse.

Legal Basis: We process your data based on contractual necessity (to deliver the services you request — Article 6(1)(b) GDPR), legal obligation (for example, tax and accounting law — Article 6(1)(c)), legitimate interests (to improve and secure our services — Article 6(1)(f)), and, where applicable, your explicit consent (Article 6(1)(a)).

Data Minimization: We collect only the data that is necessary for the purposes described above. We do not collect excessive, irrelevant, or sensitive special-category data, and we never knowingly collect data from persons under 18.

AI Processing of Your Reports

Your personalized reports (Natal Chart, Progressions, Solar Return, Solar Return Location Comparison, Synastry and Relocation Report) are composed with the help of a large-language-model provider, Anthropic (Claude). We send only the astrological facts computed from the chart together with the necessary birth context — never your email address or your name. For the Relocation Report this also includes the names of the places you chose to compare and your choices of themes, regions and length of stay. Under our commercial agreement this data is not used to train models and is subject to bounded retention by the provider.

We do not make decisions about you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you.

Honest note: a report is derived from the birth moment it describes, so the finished text and chart inherently reflect it — even though we discard the raw birth inputs after generation.

Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of all personal data we hold about you.

Right to Rectification: You can request correction of inaccurate or incomplete data.

Right to Erasure (Right to be Forgotten): You can request deletion of your personal data, and you can delete your account yourself from Settings. Records we are legally required to keep (for example, invoices under tax law) are retained for the statutory period and pseudonymised where possible.

Right to Restriction of Processing: You can request that we limit how we use your data.

Right to Data Portability: You can export a structured, machine-readable copy of your data at any time from Settings, or request one from us.

Right to Object: You can object to processing of your data for certain purposes.

Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of past processing.

You can exercise the access, erasure, and portability rights directly from your account Settings. For any other request, or if you need help, contact us at the address below; we respond within one month, extendable by up to two further months for complex requests (in which case we will inform you).

Data Retention

We retain personal data only as long as necessary. Account and settings data are kept while your account is active; you can delete your account at any time from Settings, which erases your personal data (see Your Data Protection Rights). Your reports remain in your dashboard until you delete your account, which erases them; you can export your data from Settings at any time. Raw birth inputs are discarded within about 24 hours of generating your report. Payment and transaction records (invoices, payment-processor identifiers) are retained for the period required by tax and accounting law, typically five to ten years from the end of the relevant financial year.

Data Security

We implement industry-standard technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These include encryption in transit (HTTPS/TLS), encryption at rest where appropriate, role-based access controls, audit logging, secure cloud hosting, regular security reviews, and prompt patching of known vulnerabilities.

International Data Transfers

Some of our processors are located outside the European Economic Area, in particular in the United States: Stripe (payments), Anthropic (AI report composition), Slack (internal operational notifications), Resend (transactional email), and Cloudflare (global content-delivery and security edge). Where personal data is transferred outside the EEA, we rely on the European Commission’s Standard Contractual Clauses (SCCs) and equivalent safeguards. Our application hosting and databases (Hetzner), our object storage for invoice and report PDFs and encrypted backups (Akamai Cloud), and our log and metric storage (Grafana Cloud) are located in Germany (EU).

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The current version is always the one published on this page; material changes will be highlighted with an updated effective date.

Contact & Data Protection Officer

If you have questions about how we handle your personal data, or if you wish to exercise your rights, please contact us:

privacy@trimoon.world

We will respond to your request within one month, as required by GDPR.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO — uodo.gov.pl); you may also complain to the supervisory authority of your own country of residence or place of work.

Cookies & Tracking

We use essential cookies to ensure the website functions properly and to maintain your language preferences. We do not use third-party advertising or tracking cookies without your explicit consent, and you can change or withdraw your cookie choices at any time via the cookie settings on this site.

Essential Cookies: Strictly necessary for the website to work, so they are used without asking for consent. All are first-party: set by this website, not by third parties. Sign-in: while you are signed in, the cookie auth0.<client ID>.is.authenticated (plus a copy prefixed _legacy_ for older browsers) marks your browser as signed in and expires 1 day after it was last set, and your sign-in session identifier is kept in your browser's local storage; both are removed when you log out. Language and currency: the cookies NEXT_LOCALE and userCurrency are set by our server to remember your language and the currency in which prices are shown, and expire 1 year after they were last set. Your cookie choice: kept in your browser's local storage under cookie-preferences and cookie-consent-given.

Analytics Cookies (Optional): Set only if you consent to analytics. PostHog: the first-party cookie ph_<project token>_posthog, with a copy in your browser's local storage. It holds a random device identifier, so that pages viewed in the same browser can be grouped together, including across visits. The cookie is host-only (not shared with subdomains), Secure and SameSite=Lax, and expires 180 days after it was last set. No profile is built about you and your IP address is not stored. Fathom Analytics is cookieless: it stores nothing on your device.

Data Processing & Third Parties

We process your data internally using secure systems. We do not sell or share your personal data with third parties for marketing purposes.

Third-Party Services: We use trusted third-party service providers for authentication (Auth0), payment processing (Stripe), analytics (Fathom Analytics and PostHog), geocoding, and hosting. These providers act as our data processors under contracts compliant with GDPR and are obligated to protect your data and use it only for the specified purposes.

Third-Party Processors We Use

We share personal data with the following processors strictly to provide the service, each under a data-processing agreement. Where a processor is outside the EEA, transfers are covered by Standard Contractual Clauses.

Auth0 (Okta) Authentication and sign-in. Receives your email and login identifiers. Region: EU. Basis: DPA + SCCs.

Stripe Payment processing, invoicing, and tax. Receives email, billing details, and payment events. Region: EU and US. Basis: Stripe DPA + SCCs.

Anthropic (Claude) AI composition of the text of your personalized reports. Receives chart facts and birth context — and, for the Relocation Report, the names of the places you chose to compare and your choices — but no email or name. Region: US. Basis: commercial agreement (no training) + SCCs.

Cloudflare (incl. Turnstile) Content delivery, security/WAF, the contact-form anti-spam widget (Turnstile), and IP-based country detection. Receives your IP address. Region: global edge. Basis: Cloudflare DPA + SCCs.

Hetzner Application hosting and databases. Region: EU — Germany. Basis: Hetzner DPA (EU only).

Akamai Cloud (Linode) Object storage for your invoice and report PDFs, and encrypted database backups. Region: EU — Germany (Frankfurt). Basis: Akamai DPA + SCCs.

Grafana Cloud Operational logs and metrics (personal data redacted before storage). Region: EU — Germany (prod-eu-west-2). Basis: Grafana Labs DPA + SCCs.

Slack (Salesforce) Internal operational notifications (for example a new order or contact message), which can include your email. Region: US. Basis: Slack/Salesforce DPA + SCCs.

Resend Transactional email (for example order confirmations, trial and payment notices, and report-ready messages). Receives your email address, display name and the content of those emails. Region: sent from the EU (Ireland), stored in the US. Basis: Resend DPA + SCCs.

Fathom Analytics Privacy-focused, cookieless website analytics, loaded only if you opt in via the cookie banner. No personal data is sold or used for cross-site tracking. Region: EU.

PostHog Product analytics — which pages you visit and where you leave the purchase flow — loaded only if you consent via the cookie banner. No profile is built about you and your IP address is not stored. Region: EU — Germany (Frankfurt). Basis: PostHog DPA.

MaxMind Approximate location from your IP address — so the Sky Today band on the home page can name a major city near you. Your IP is one-way hashed the moment it arrives and never stored; MaxMind receives it once per address per week. No profile is built and nothing is stored on your device. The hashed entry is deleted 7 days after your last visit, and 30 days after the first, however often you return. Region: US. Basis: MaxMind DPA + EU standard contractual clauses; legitimate interest.

Session recording (PostHog): if you additionally consent to session recording, we record how you move through the site — clicks, scrolling and navigation. These recordings are used only to detect errors and improve the site, never to handle an individual support request. They are kept for 30 days, are not linked to your account, and are not made in the Dashboard section.

Place names: GeoNames (geonames.org), licensed under CC BY 4.0.