Last updated: 1 July 2026
This Privacy Policy explains how SAFEX-EU S.R.L. ("we", "us") processes personal data collected through the Mystic Command Center service ("the Service"), in compliance with Regulation (EU) 2016/679 (GDPR) and Italian data-protection law.
1. Data Controller
SAFEX-EU S.R.L. (SafeXDigital), Largo Francesco Torraca 71, 80133 Napoli (NA), Italia. VAT / P.IVA 10011171211. Contact: amministrazione@safexeusrl.com.
2. What we collect
- Account data — email address and authentication identifiers when you sign in.
- Reading data — the questions you submit and the readings generated, saved to your private journal when signed in.
- Purchase data — Stripe session identifier, amount, currency and payment status. Card details are handled directly by Stripe and never reach our servers.
- Technical data — anonymised quota identifier, IP address, browser and device metadata, and standard server logs.
- Analytics — aggregated usage via Google Analytics 4 and Microsoft Clarity.
3. Purposes and legal basis
- Providing the Service — performance of contract (Art. 6(1)(b) GDPR).
- Payments and accounting — legal obligation (Art. 6(1)(c)).
- Security, abuse prevention and quota enforcement — legitimate interest (Art. 6(1)(f)).
- Analytics and product improvement — legitimate interest; you can opt out via browser settings or extensions.
4. Sharing and processors
We use the following data processors:
- Supabase (database, authentication) — EU region.
- Stripe (payments) — Ireland / United States.
- Cloudflare (hosting, CDN) — global.
- Google (Analytics) — Ireland / United States.
- Microsoft (Clarity behavioural analytics) — European Union / United States.
Standard Contractual Clauses apply where personal data is transferred outside the EEA.
5. Retention
Account and reading data are kept while your account is active. Purchase records are retained for 10 years for accounting purposes as required by Italian law. Anonymous quota records are pruned after 90 days. Analytics data follows the provider's default retention (14 months for GA4, 90 days for Clarity).
6. Your rights
You may request access, rectification, erasure, portability, restriction, or object to processing. Write to amministrazione@safexeusrl.com. You may also lodge a complaint with the Italian Garante per la Protezione dei Dati Personali (garanteprivacy.it).
7. Cookies
See our Cookie Policy for details.
8. Changes
We may update this policy. The "Last updated" date reflects the latest revision.