Privacy Policy

This Privacy Policy explains how AI Tarot (aitarot.pro) collects, uses, shares, retains, and protects personal information when you use our website, accounts, AI readings, astrology tools, subscriptions, and related services.

We collect information you provide when creating or using an account, such as your name, email address, account identifiers, login provider, profile details, and profile image. If you sign in with Google, Google may provide your name, email address, account identifier, and avatar under your Google settings. To deliver profile images reliably, we may mirror a Google avatar to Cloudflare R2 or another Cloudflare CDN service and serve it through a CDN URL.

We may collect birth date, birth time, and birth place; questions and prompts; tarot readings, birth-chart or astrology results, and Luna or Seren chat history; saved preferences; support messages; and technical or usage logs such as IP address, device, browser, language, timestamps, pages, feature interactions, and error or security events. Stripe or Creem processes payment details for purchases. We receive transaction metadata such as provider, customer and subscription identifiers, plan, amount, currency, status, and billing dates. We do not receive or store your full card number.

We use information to create and secure accounts; authenticate users; generate and personalize tarot, astrology, and chat experiences; save history and preferences; operate subscriptions; provide support; send service, security, and billing messages; diagnose errors; measure and improve performance; prevent fraud, abuse, and policy violations; and comply with legal obligations.

We may send prompts and the profile, birth, or conversation context reasonably needed to fulfill a request to AI service providers. We use Vercel and Cloudflare for hosting, delivery, storage, and security, including Cloudflare R2/CDN for some media. We may also use database, authentication, analytics, and email providers, and Stripe or Creem for payments. Providers may process only information reasonably necessary for their services and are governed by applicable agreements and their own policies. We do not sell personal information. We may disclose information to these providers, to comply with law or a valid legal request, to protect people or the service from fraud, abuse, or security threats, or in a merger, financing, acquisition, or asset transfer subject to appropriate safeguards.

We retain information for as long as reasonably needed to provide the service, keep the account and requested history, resolve disputes, enforce agreements, meet tax, accounting, security, and legal duties, and maintain backups. Periods vary by data type and purpose; we do not promise one fixed deletion period. When information is no longer needed, we delete or anonymize it subject to backup cycles and legal holds. We use administrative, technical, and organizational safeguards. Sensitive stored fields, including certain birth data and private content, are protected with AES-256-GCM encryption at rest where implemented. We also use access controls and transport encryption. No system is completely secure, and you should protect your credentials.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent where applicable; or complain to a data-protection authority. You may manage certain history, communications, and subscription choices through available controls. Contact us to make a request. We may verify your identity and may retain information where law permits or requires it.

AI Tarot is not directed to children under 13, and we do not knowingly collect their personal information. If local law requires a higher minimum age or parental consent, that rule applies. Contact us if you believe a child submitted information improperly. We and our providers may process information outside your country. Privacy laws may differ there. Where required, we use appropriate safeguards for cross-border transfers and process information as described in this policy.

We may update this policy as the service or applicable law changes and will post the revised date. For privacy questions, requests, or concerns, contact support@aitarot.pro.