Privacy Policy

Last updated: August 2026

Work Decoded ("we", "us") respects your privacy. This policy explains how we collect, use and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR).

Data We Collect

When you submit a blueprint request, we store your required email address, separate newsletter consent status, birth date, birth time, whether the time is unknown, location name, latitude, longitude, page locale, browser language, creation timestamp, and generated chart link. The generated chart link contains only an opaque random reference, not your birth details. Blueprint submissions are retained for up to 12 months.

We also store the summary results calculated from your birth data: your Career Type, Decision-Making Strategy, Public Role, Integration Type and Life Theme. These are derived from what you have already given us and nothing further is asked of you. We use them to understand who the service reaches and to prepare better material. They are deleted together with your submission, on the same twelve month schedule.

When you become a paying client we also keep a client record: your name, email address and phone number, the birth data and the chart calculated from it, our notes, the record of each session, analysis reports, the messages exchanged about a report, and any share link made for you. We keep this for three years, counted from your last session or purchase rather than from the day the record was created, because people usually come back around a cycle date and those sit years apart. Invoices and payment records are kept for ten years, as Portuguese law requires; they are held by Stripe and by our accountant. Erasing a client removes the name, email address, phone number, notes, session records, analysis reports and chat messages, and every share link made for that client stops working. The birth data and the computed chart are deliberately kept, with nothing left beside them that identifies you.

How We Use Your Data

We use your birth information to calculate and show the requested blueprint on screen. The current flow does not email the blueprint. We retain the required email address with the request for service administration and privacy-rights requests. If you tick the newsletter box we record your consent and add you to our newsletter list in Kit by hand, in batches. You can unsubscribe at any time. Analytics may help us improve ordinary site pages, but chart routes are excluded from Vercel Analytics, Google Analytics, and custom events.

Third-Party Processors

Vercel (hosting and non-chart analytics), Google Analytics 4 (consent-based, non-chart analytics), Turso (database hosting), Kit/ConvertKit (newsletter marketing only after opt-in), and Stripe (payment processing). Each processor has its own privacy policy and data-protection measures.

Your Rights

Under GDPR, you may request access, correction, deletion, or export of your personal data. Authenticated administration tools support access, export, and permanent erasure of individual blueprint submissions. That permanent erasure applies to blueprint submissions only: a client record is erased under the rule set out in Data We Collect, which anonymises the record in place and keeps the birth data and the computed chart. You can unsubscribe from newsletter email at any time. To exercise your rights, contact us at the email below.

Contact

For privacy-related inquiries, reach us at: andrea@workdecoded.io