Privacy Policy

Welcome to FlipTarot ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered tarot reading platform.

By accessing or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

When you use our platform, we may collect the following types of information:

• Name and email address (when you create an account)
• Account credentials (encrypted passwords)
• Payment information (processed securely through Stripe — we never store your full credit card numbers)
• Questions you ask during readings (for entertainment purposes only — do not submit sensitive health, financial, or legal data)
• Cards selected and AI reading results
• Reading history and timestamps
• Device information (IP address, browser type, operating system)
• Usage patterns and interaction with features
• Cookies and similar tracking technologies

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our tarot reading services
• Personalization: To personalize your experience and provide relevant interpretations
• Account Management: To manage your account, process payments, and handle subscriptions
• Communication: To send you updates, notifications, and promotional materials (with your consent)
• Analytics: To analyze usage patterns and improve our platform
• Security: To protect against fraud, abuse, and unauthorized access
• Legal Compliance: To comply with legal obligations and enforce our terms

Our platform uses artificial intelligence to generate personalized tarot interpretations:

• AI Providers: Questions and reading data are processed by trusted, industry-leading AI service providers (such as OpenAI or DashScope)
• Encryption: We use secure, encrypted connections for all AI processing requests
• No Model Training: Our AI providers are contractually prohibited from using your private reading data to train their foundational models
• Temporary Logs: AI service providers may temporarily retain API request logs (typically up to 30 days) strictly for trust, safety, and abuse monitoring purposes

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our platform
• Legal Requirements: When required by law, court order, or legal process
• Business Transfers: In connection with a merger, sale, or acquisition of our business
• With Your Consent: When you explicitly authorize us to share specific information

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Regular security audits and updates
• Secure authentication and access controls
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

You have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your entire account or clear your reading history at any time
• Export: Request a copy of your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restrict Processing: Request limitation on how we use your data

To exercise these rights, please contact us using the information provided in the Contact Us section.

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate your account
• Analyze platform usage and performance
• Provide personalized content and features

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your account and associated data at any time by contacting us.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Your continued use of our services after changes constitutes acceptance of the updated policy.

If you have any questions regarding this Privacy Policy, your data, or your rights, please contact us.

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and object to processing. Our legal basis for processing your data includes consent, contract performance, and legitimate interests.

California residents have specific rights under the California Consumer Privacy Act. We do not sell personal information to third parties. You have the right to know what personal information we collect, request deletion, and opt out of any future sale of your data.