Privacy Policy

1. Information we collect

• Account information: name, email address, and password (hashed - see §5).
• Birth & person data: birth date, time, and place, and names for each person you register, used solely to run the numerology/astrology/ esoteric calculations and readings you request.
• Payment metadata: purchase history, plan/credit balances, and order records. We never receive or store your full card number - see §3.
• Usage data: pages viewed and basic device/browser information, collected via self-hosted analytics and, if you consent, a tracking pixel and Google Analytics (see §6).
• Generated content: the readings, translations, and calculation results produced for you, stored so you can revisit and export them.

2. How we use information

We use the information above to: provide and operate the Service (run calculations, generate readings, process payments); communicate with you (transactional emails, receipts, account notices); maintain security and prevent abuse; and improve the Service.

3. Third parties we share data with (subprocessors)

We use the following subprocessors to operate the Service:

• Stripe - payment processing. Stripe is PCI-DSS compliant; we never see or store your full card number.
• Amazon Web Services (AWS S3) - storage of avatars and generated PDF exports.
• OpenAI, Anthropic, and Google (Gemini) - AI providers used to generate readings and translations. Birth data (dates, times, places) and names you submit for a reading are sent to the selected AI provider as part of generating that reading. We do not sell this data, and we only send what's needed to produce the requested reading.
• Amazon SES - transactional email delivery (receipts, account and security notices).
• Google Analytics - aggregate website usage analytics (pages viewed, general device/browser/location information). Only active if you accept it via the cookie banner; see §6.

We do not sell your personal information to third parties.

4. Data retention & deletion

You can request account deletion at any time from account settings. Deletion is a two-phase process: requesting it immediately disables the account and starts a 30-day grace period during which you can log back in and cancel the deletion; if the 30 days lapse, all associated data - people, calculations, readings, orders, credit history, and the account itself - is permanently and irreversibly erased. You'll receive an email when deletion is scheduled and another confirming the permanent erasure.

5. Security

• Data is encrypted in transit (TLS) and sensitive data at rest is encrypted using AES-256.
• Passwords are never stored in plain text - we use industry-standard hashing (bcrypt/Argon2).
• We do not store credit card numbers; all card handling is delegated to PCI-compliant Stripe.
• Access to production data is restricted to authorized personnel.

6. Cookies & tracking

We use essential cookies required for login sessions and security (these cannot be disabled without breaking the Service). We also run self-hosted, cookieless analytics on our own infrastructure to understand aggregate usage (e.g. page views) - this doesn't use cookies or share data with any outside company. With your consent via the cookie banner, we additionally use a first-party tracking pixel and Google Analytics for deeper usage insight; both are off by default and only activate if you accept. You can change your choice at any time by clearing your browser's local storage for this site.

7. AI-generated content disclosure

Readings and translations are generated by AI, not a human. They are labeled as AI-generated in the product and in exported PDFs. See our Terms of Service §5 for more detail on AI usage and §2 for the "entertainment/education only" disclaimer.

8. Your rights (GDPR / CCPA)

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information (via account settings or by contacting us);
• Request deletion of your account and data (§4);
• Object to or restrict certain processing; and
• Data portability, where applicable.

To exercise any of these rights, email [email protected].

9. Children's privacy

The Service is not directed to individuals under 18. We do not knowingly collect information from anyone under 18; account creation requires confirming you meet this age requirement.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will require you to re-accept the policy the next time you use the Service before continuing.

11. Contact

Privacy questions or data requests: email [email protected]. General support: [email protected].