Privacy Policy

1. Information We Collect

Information you provide:

• Account information: Name, email address, password (encrypted)
• Profile data: Birth date, gender, zodiac sign (optional)
• Reading data: Questions you ask, readings you receive
• Payment information: Processed securely by Stripe (we don't store card details)

Information collected automatically:

• Usage data: Pages visited, features used, reading history
• Device information: Browser type, operating system, device type
• Analytics: Anonymous usage statistics via Vercel Analytics

2. How We Use Your Information

We use your information to:

• Provide and personalize our tarot reading services
• Process payments and manage your subscription
• Send important account notifications
• Improve our services based on usage patterns
• Respond to your support requests
• Send marketing communications (only with your consent)

3. AI and Your Data

Our readings use AI (OpenAI) to generate interpretations. When you request a reading:

• Your question and selected cards are sent to generate the interpretation
• We do not share your personal identity with AI providers
• Readings are stored in your account history for your reference
• You can delete your reading history at any time

4. Data Sharing

We do not sell your personal information. We only share data with:

• Stripe: For payment processing
• OpenAI: For generating AI readings (anonymized)
• Vercel: For hosting and analytics
• Resend: For sending transactional emails
• Legal requirements: If required by law

5. Data Security

We implement industry-standard security measures:

• All data transmitted via HTTPS encryption
• Passwords are hashed using bcrypt
• Database hosted on secure cloud infrastructure
• Regular security audits and updates

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your reading history
• Opt-out: Unsubscribe from marketing emails

You can do most of this yourself: your profile page has a Download my data button that gives you everything we store about you as a JSON file, a Delete account button that removes it, and every marketing email carries an unsubscribe link. If you are in the EU/EEA or the UK you may also lodge a complaint with your local data protection authority.

For anything else, contact us at privacy@etherarcana.com

7. Cookies

We use essential cookies for:

• Authentication and session management
• Remembering your preferences (language, theme)
• Anonymous analytics to improve our service

You can disable cookies in your browser, but this may affect functionality.

8. Children's Privacy

EtherArcana is not intended for users under 13 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. International Users

Our services are hosted in the United States. Data of EU/EEA and UK users is transferred there under the safeguards those laws provide (including the European Commission's Standard Contractual Clauses with our processors, such as our hosting, database, payment and email providers).

10. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or a notice on our website.

11. Contact Us

For privacy-related questions or concerns:

• Email: privacy@etherarcana.com