Legal Notice and Privacy Policy

1. Data controller

Name: Maria Carmen Juan

Trading as Paradigma Propio and Aránzazu Vera.

Tax ID (NIF): 22698066X · Address: Valencia, Spain

Email: avera@paradigmapropio.com · Website: coaching.paradigmapropio.com

Registry: professional activity not subject to mandatory commercial registration.

2. Data we collect

We collect the following depending on the service:

General contact form:

• Name
• Email address
• Message content

Individual analyses (graphology, palmistry, birth chart, enneagram and combined services):

• Email address
• Handwriting or palm images (indirect biometric data), as applicable
• Date, time and place of birth (chart-based services)
• Enneagram test answers, if applicable

Bond analyses (two people):

• The above data for two people. The requester declares they have the other person's consent.

Daily signals (monthly subscription):

• Email and date, time and place of birth
• Chosen topic (love, work, etc.)
• Payment data processed by Stripe (we do not store card details)

Coaching programme (4 cycles):

• Email and text responses each cycle
• Payment data processed by Stripe when the service is paid

2 bis. Minors

Services are for adults aged 18 or over only. We do not collect data from anyone under 18. Do not use these forms if you are a minor.

3. Use of artificial intelligence

Analyses and daily signals are generated using third-party AI: Google Gemini, Anthropic Claude and Mistral. The 4-cycle coaching programme may use the same providers; Mistral acts as a fallback in that flow.

Results are for guidance and interpretation only. They are not medical or psychological diagnosis, not therapy, and not a substitute for professional advice of any kind (legal, financial or otherwise). Analyses are generated in a fully automated manner; there is no mandatory human review of the content produced, which may contain unverifiable interpretations. You have the right not to be subject to decisions based solely on automated processing with significant legal effects (GDPR Art. 22).

Data sent via API is processed under each provider's policies; their enterprise terms state that API data is not used to train models.

4. Purpose and legal basis

Purpose: to handle your request, generate the content you ordered and email it to you. We do not sell your data. Advertising (Meta Pixel, etc.) only runs with your cookie consent.

Legal basis: your explicit consent when ticking the boxes and submitting (GDPR Art. 6(1)(a) and 9(2)(a) for biometric data).

5. Data retention

We do not operate our own database: operational data is stored temporarily in cloud KV for up to 7 calendar days, except as noted for active subscriptions:

• Analysis results — up to 7 days in Upstash Redis (AWS Frankfurt) so you can download them. PDF and EPUB in your inbox are your copy. We may keep a copy in Resend for support and quality.
• Images — processed immediately and kept in Vercel Blob Storage for up to 7 days for technical retries, then deleted.
• Daily signals — email and birth data in KV while the monthly subscription is active; after cancellation, deleted within 7 days at most. Monthly billing is handled by Stripe.
• Cycle coaching — responses and progress in KV during the active programme, deleted within 7 days at most after completion or cancellation.
• General contact — as long as needed to handle your message and legal periods.

6. Processors and recipients

Your data may be processed by:

• Vercel Inc. — hosting and temporary image storage (US, SCCs)
• Upstash (Redis) — temporary KV (AWS Frankfurt, EU)
• Resend — transactional email
• StaticForms — contact form
• Google Gemini, Anthropic Claude, Mistral — content generation
• Stripe — payments (one-off reports, monthly signals subscription and coaching)
• OpenStreetMap Nominatim — birth city autocomplete (place-name queries only, no user identification)
• hCaptcha — bot protection
• Google Analytics, Microsoft Clarity, Meta Pixel, Crisp — with prior consent where required (US/EU, SCCs as applicable)

6 bis. Gifts to third parties

If you order a gift analysis, you declare you are authorised to provide the recipient's email. It will only be used to send the report. They may exercise rights at avera@paradigmapropio.com.

Legal basis: legitimate interest of the recipient (Art. 6(1)(f)) and your declaration of authorisation.

7. Your rights

Access, rectification, erasure, objection, portability, restriction and withdrawal of consent. Contact avera@paradigmapropio.com.

Complaint to the Spanish Data Protection Agency (AEPD): www.aepd.es.

8. Cookies

See our Cookie Policy.

9. Security

HTTPS, security headers, hCaptcha and server-side file validation.

10. Intellectual property

Website content is owned by Maria Carmen Juan or used with permission. Reproduction without consent is prohibited.

11. Limitation of liability

Links to third-party sites are informational; we do not control their content or accept liability for them.

We do not guarantee uninterrupted availability. Generated content is for guidance; we are not liable for decisions you make based on it. We make no guarantees as to results, predictions or accuracy of the generated content.

12. Governing law

These terms shall be governed by and construed in accordance with Spanish law. However, if you are a consumer residing in another country, you will retain the rights granted to you by the mandatory consumer protection legislation of your country of residence.