Privacy Policy
Last updated: 2025-08-25
Tarotify.ai (“we”, “our”, “us”) provides the services available at https://my.tarotify.ai and https://www.tarotify.ai (the “Service”). We are the data controller for personal data processed in connection with the Service. Contact: [email protected].
Data Collected via Google OAuth
When you choose “Continue with Google”, we receive only the following information:
- Email address
- OpenID subject identifier (a non-personal, unique ID provided by Google)
We do not request or access any other Google data or sensitive permissions.
Additional Data We Collect
For technical and security purposes, we also store the country from which you appear to access the Service. This information is derived from your IP address or browser settings and is used to understand geographic usage patterns, ensure compliance with applicable laws, and maintain service integrity.
How We Use the Data
- To create and authenticate your account
- To maintain security and prevent abuse
- To provide necessary customer support and transactional emails
- To analyze aggregated geographic trends in order to improve the Service
Legal Basis
We process this data under:
- Contract – to provide the Service you have requested
- Legitimate interest – to ensure security, detect misuse, and better understand geographic use of our Service
Marketing communications, if any, will only be sent with your explicit consent.
Data Retention
We store your email, OpenID identifier, and country information as long as your account remains active. When you delete your account, this data will be deleted or anonymized within 1 days.
Sharing and Processors
We use trusted service providers who act as data processors on our behalf, for example:
- Supabase – authentication and database hosting
- Stripe – payments (if you subscribe)
- Resend – transactional email delivery
These providers only process data according to our instructions.
International Transfers
If personal data is transferred outside the EU/EEA, we apply appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
Your Rights
You have the right to request access, rectification, deletion, restriction, data portability, and to object to processing. You may also withdraw consent at any time. To exercise these rights, contact: [email protected].
Disconnecting Google / Account Deletion
You can disconnect Tarotify.ai from your Google account at any time via your Google Account settings under “Security → Third-party apps with account access.” You may also request deletion of your account with us, after which your email, OpenID identifier, and stored country information will be permanently deleted from our systems.
Cookies
We use essential cookies for login and session management. Analytics or advertising cookies are only set with your consent and can be managed in our cookie banner.
Changes
We may update this Privacy Policy from time to time. Significant changes will be communicated on the website. Continued use of the Service after changes have been published constitutes acceptance of the updated Privacy Policy.