Privacy Policy

1. Introduction

AskTarot ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our tarot reading service at asktarot.io (the "Service").

2. Information We Collect

Account Information: When you create an account, we collect your email address and name (or display name). If you sign in via Google, we receive your name, email, and profile picture from Google.

Usage Data: We collect information about your interactions with the Service, including reading history, card spreads, and chat messages with the AI interpreter.

Technical Data: We automatically collect IP addresses (hashed for rate limiting), browser type, device information, and access times.

Payment Data: If you subscribe to a paid plan, payment processing is handled by Stripe. We store your Stripe customer ID and subscription status but never your credit card details.

3. How We Use Your Information

• To provide and personalize tarot readings
• To maintain your reading history across sessions
• To enforce usage limits and prevent abuse
• To process payments and manage subscriptions
• To send transactional emails (account verification, password reset)
• To send marketing communications about new features, updates, and promotions related to the Service
• To improve and develop the Service

4. Data Sharing

We do not sell your personal information. We share data only with:

• AI providers (OpenAI, OpenRouter) — to generate tarot interpretations. Chat messages are sent without personally identifiable information.
• Stripe — for payment processing.
• Google Analytics — for aggregated usage analytics. We share usage events and a pseudonymous client identifier, not your name or reading content.
• Infrastructure providers — for hosting and database services.

5. Data Retention

Your account data and reading history are retained as long as your account is active. You can delete your reading history at any time through the app. If you delete your account, all associated data is permanently removed.

6. Marketing Communications

By creating an account, you agree to receive occasional marketing emails about new features, updates, and promotions. Every marketing email includes an unsubscribe link — you can opt out at any time with a single click. Transactional emails (account verification, password reset, security alerts) are not affected by your marketing preferences.

7. Your Rights

You have the right to access, correct, or delete your personal data. You can also opt out of marketing emails at any time. You can export your reading history or request account deletion by contacting us at support@astara.me.

8. Cookies and Analytics

Essential cookies: We use cookies that are strictly necessary for authentication and session management. The Service cannot function without them.

Analytics: We use Google Analytics 4 to understand how visitors find and use the Service — for example which pages are viewed, which features are used, and how the onboarding flow performs. Google Analytics sets its own cookies (such as _ga) and processes usage data and an approximate, IP-derived location on our behalf as a data processor. We use this only in aggregate and never to identify you personally.

You can opt out of Google Analytics at any time using the Google Analytics Opt-out Browser Add-on, or by blocking cookies in your browser settings.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed IP addresses, and secure authentication tokens to protect your data.

10. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect information from children.

11. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.

12. Contact

For questions about this Privacy Policy, contact us at support@astara.me.