PowerTarot (powertarot.com, the "Service") is operated by Practice Everything LLC, doing business as Power Tarot ("Power Tarot," "we," "us," or "our"). This policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have.

Mailing address: 2768 Sepulveda Blvd #1083, Torrance, CA 90505, United States
Email: hello@powertarot.com

The short version: we collect what we need to give you readings and run your account, we send your questions to an AI provider that does not train on them, we do not sell your information or use it for advertising, and you can delete your account from Settings. Support correspondence and records retained for legal reasons follow the schedules below.

1. Scope

This policy covers the PowerTarot website and app, emails we send, and support conversations. It does not cover third-party sites we link to.

2. What we collect

2.1 Information you give us

• Account information: your email address. Sign-in is by magic link, so we hold no password.
• Readings: the questions you type, the topic or category you choose, the spread, the cards drawn, any notes you add, and the reading generated for you.
• Chat: the follow-up messages you send about a reading and the responses.
• Reading memory: short notes you add yourself and AI summaries of useful details you state in new reading conversations. Each note has a date and an origin. Automatic notes link to their source reading. Memory starts on for accounts and can be turned off in Profile. This feature does not scan conversations from before its launch or from periods when memory was off.
• Custom spreads (Pro): the names, descriptions, and position prompts you create.
• Daily reading settings (Pro): the spread and category you choose, the hour you want the email, and your time zone.
• Optional profile details: on your profile page you may tell us your gender, your relationship status, who you are drawn to, your sun sign, and your Enneagram type. Every one of these is optional. We use them for your readings and chat replies through the AI processing described in Section 4, with no sale or advertising use. You can delete them at any time from the profile page. Your relationship status and who you are drawn to are sensitive personal information under California law: they are optional, we use them only for that purpose, and leaving them blank changes nothing else about your account.
• Preferences: whether you have opted into our newsletter.
• Support and correspondence: anything you send to hello@powertarot.com or through the contact form.
• Partner applications: your name, email, public channels, audience and reach estimates, promotional plans, and application review status. We use these to evaluate and manage potential partnerships. Applying does not create an affiliate account or subscribe you to marketing email. Our owner receives application counts and a private review link in the daily business digest. Application answers stay in the restricted review queue. Contact hello@powertarot.com to request deletion. We keep application records while needed for review or the resulting partnership and delete them when no longer needed, subject to legal obligations.
• Share links: if you create a share link for a reading, the reading's cards and text, and the question if you choose to include it, are visible to anyone with the link until you make it private again.

2.2 Information collected automatically

• Device token: when you get a reading without an account, we set a cookie containing a random token so we can show you that reading and, if you sign in later, move it into your account.
• Session cookies: cookies that keep you signed in.
• IP address: used to limit anonymous readings per network, to detect abuse, and for security. Server logs containing IP addresses are kept for 30 days.
• Usage data: readings created, credits and deck state, chat message counts, and when you reach a plan limit.
• AI usage metadata: for each reading and chat turn, the model used, token counts, and estimated cost. This metadata does not include the text of your readings or messages.
• Site analytics: we use Google Analytics 4, which sets cookies and collects your device and browser type, approximate location derived from IP address, pages viewed, and actions taken on the site. See Section 6.
• Email delivery data: whether emails we send are delivered, bounce, or are opened or clicked.

2.3 Information from others

• Stripe: when you buy something, Stripe sends us your payment status, the card brand and last four digits, the billing country and postal code, and identifiers for your customer record and subscription. We never receive your full card number.
• Google: analytics reports as described in Section 6.

2.4 A note on sensitive information

Readings are personal. People ask about relationships, health, grief, money, faith, and work. You decide what to type, and nothing on the Service requires you to share sensitive details. We use your input to provide your readings, chat, journal, and optional reading memory as described in this policy. Memory can carry relevant details you have shared into later reading conversations. Automatic summaries are instructed to omit crisis details, medical diagnoses, credentials, and inferred sensitive traits. Summaries can be inaccurate, so you can review and correct them. We do not sell this information or use it for advertising.

3. How we use information

• To generate readings and chat responses and to show them to you.
• To maintain optional reading memories and use relevant notes for continuity across your reading conversations.
• To create and run your account, including the anonymous reading you claim when you sign in.
• To apply plan limits, credits, and the deck, and to prevent abuse of free readings.
• To process payments, manage subscriptions, and send receipts, renewal reminders, and other billing notices.
• To send the daily emailed reading if you are a Pro subscriber and have turned it on.
• To send our newsletter if you opted in.
• To respond to support requests.
• To keep the Service secure, investigate abuse, and enforce our Terms.
• To understand how the site is used and improve it, using analytics.
• To meet legal obligations, including tax and accounting rules.

We do not make decisions about you using automated processing that has legal or similarly significant effects.

4. How AI processing works

To generate a reading, we send the AI provider your question, the topic, the spread, the cards drawn, any profile details you chose to add (such as relationship status or sun sign), any clarity cards you pull, and our instructions. For chat, we also send the reading, earlier messages in that conversation, and a limited selection of relevant saved memories when memory is on. To create automatic memories, we send eligible new user messages and a small set of existing notes for duplicate and contradiction detection to Anthropic. We do not use the reader's interpretations as factual evidence for new memories. For the journal's journey summary, we send the cards and topics of your past readings. We do not intentionally add your email address or account identifiers to AI context. Free-form content you supply may itself contain identifying information.

Memory freshness is checked before each chat reply. Ongoing circumstances need confirmation after 90 days, goals after 30 days, and temporary situations after 14 days or an earlier stated end date. Lasting facts and preferences have no automatic expiry. Historical notes are labeled as past events. Notes needing confirmation and replaced notes remain in your manager but are excluded from new chat context. Reading a note does not renew it. New explicit statements may update automatic notes. Conflicts with notes you added or edited are held for your confirmation. You can change a note's category or confirm that it is still current in Profile. These checks help reduce outdated assumptions but do not guarantee accuracy.

Our AI provider is Anthropic, PBC, through its commercial API. Under Anthropic's commercial terms, inputs and outputs sent through the API are not used to train Anthropic's models, and Anthropic deletes API inputs and outputs from its systems within 30 days except where longer retention is required by law or to enforce its usage policies. Anthropic's privacy policy is at anthropic.com/privacy.

We do not use your readings, questions, or messages to train AI models.

5. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows.

Service providers. Companies that process information on our behalf, under contracts that restrict their use of it:

Legal reasons. We may disclose information if required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of our users, the public, or us.

Business transfers. If Practice Everything LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you by email before your information becomes subject to a different privacy policy.

With your consent. For anything else, we will ask first.

6. Cookies and analytics

Essential cookies. Sign-in session cookies and the anonymous device token are necessary for the Service to work. You can delete them in your browser, but the Service will not function without them.

Google Analytics. We use Google Analytics 4 to understand how people use the site. It sets cookies (such as _ga and _ga_ followed by an identifier) and reports device and browser type, approximate location from IP address, pages viewed, and site events to Google. We have not enabled Google's advertising features, and we do not use analytics data to target ads. You can prevent Google Analytics from collecting your data by installing Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout, or by blocking analytics cookies in your browser. Google's privacy policy is at policies.google.com/privacy.

Affiliate referrals. If you arrive through a partner's link, we ask before loading Rewardful or allowing its referral cookies. Our campaign uses a 30-day referral window. Rewardful runs on an isolated referral page and receives that page's address and title, a referral identifier, and technical browser and network information, which may include your IP address. It does not run on reading, chat, journal, or account pages. Our connected Stripe account supplies customer and transaction information to Rewardful to attribute purchases and calculate commissions. Affiliate dashboard visibility depends on campaign settings and may include customer and transaction details. We do not send reading or chat content for affiliate tracking.

You can decline referral cookies and still use the site, buy, or enter an affiliate discount code. A redeemed affiliate code can credit the affiliate through Stripe without browser tracking. We may remember an explicitly supplied discount code in the current browser tab for up to four hours to carry it to checkout. You can edit or remove it there. We remember your referral-cookie choice for 30 days. Use Referral preferences in the footer to change your choice or withdraw consent. Withdrawal stops future link attribution from this browser and removes known referral cookies, but does not undo earlier purchases or commission records.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of analytics and referral tracking. We do not load Google Analytics or Rewardful for that visit or pass a stored link referral to a new checkout. A discount code you choose to use can still attribute your purchase.

Do Not Track. Because there is no common standard for Do Not Track signals, we do not respond to them. Global Privacy Control, above, is honored.

7. Email

• Transactional emails: magic links, receipts, renewal reminders, billing notices, changes to our Terms or this policy, and security notices. You cannot opt out of these while you have an account.
• Daily reading (Pro): sent only if you turn it on. Pause or stop it from your account page or with the link in every email.
• First-week cards (onboarding): seven daily emails after you create an account, one card each. Every one carries a "Stop the series" link that ends the rest with one click and no sign-in, and the series has a switch on your account page.
• Newsletter: sent only if you opt in, which is a separate choice from creating an account. Every newsletter has an unsubscribe link, and unsubscribe requests are honored within 10 business days.

Every commercial email we send includes our mailing address and a way to unsubscribe.

8. How long we keep information

We may keep information longer where the law requires it or where it is needed to resolve a dispute or enforce our Terms.

Support email is stored in Gmail and follows the two-year support-correspondence schedule above. Account deletion does not automatically remove these emails. You can request deletion of support correspondence by writing to hello@powertarot.com. We review requests under the rights and exceptions described in this policy.

9. Security

Information is encrypted in transit using TLS and at rest by our database provider. Access to readings is restricted by row-level security so that each account can reach only its own data. Administrative access is limited to the people who need it and is logged. Payment card data is handled entirely by Stripe.

No system is perfectly secure. If a breach affects your personal information, we will notify you and any regulators as required by law, including California Civil Code Section 1798.82.

10. Your choices and rights

10.1 For everyone

• Access and export: email us and we will send you a copy of your account information and readings in a machine-readable format within 30 days.
• Correction: update your email address from Settings, or email us to correct anything else.
• Deletion: delete individual readings from your journal, or delete your whole account from Settings. You can also email us and we will delete it for you.
• Marketing: unsubscribe from the newsletter with the link in any newsletter or from Settings.
• Daily reading: pause or stop it from your account page or the link in any daily email.
• Reading memory: use Profile → Manage memories to add, edit, delete individual notes, or delete all notes. Turning memory off stops creating and using notes while retaining them for you to manage. Deletion leaves original conversations and previously generated replies unchanged and cannot recall context already sent to the AI provider for a response in progress. Future messages may create new notes when memory is on. Old messages are not reprocessed to replace deleted notes.
• Analytics: see Section 6.

To make a request by email, write to hello@powertarot.com from the address on your account. If you write from a different address, we will ask you to confirm the request from the account address before acting on it. There is no charge for these requests.

10.2 California residents

The California Consumer Privacy Act, as amended, gives California residents rights over their personal information. We extend these rights to every user, whether or not the law applies to us.

What we collect and why. In the past 12 months we have collected the following categories of personal information, for the purposes in Section 3, from the sources in Section 2:

• Identifiers: email address, IP address, device token, customer and subscription identifiers.
• Commercial information: purchases, credits, and subscription history.
• Internet activity: pages viewed, actions on the site, and usage of readings and chat.
• Approximate geolocation: derived from IP address for analytics.
• Sensitive personal information: the contents of readings, messages, and memories, to the extent you choose to include sensitive details. We use this to provide the requested features, including optional personalized continuity. Memory can be disabled without affecting access to readings or other account features.

We disclose these categories to the service providers listed in Section 5 for business purposes. We have not sold personal information or shared it for cross-context behavioral advertising in the past 12 months, and we do not do so now. We do not knowingly sell or share the personal information of anyone under 16.

Your rights.

• To know what personal information we have collected about you and to receive a copy.
• To delete your personal information.
• To correct inaccurate personal information.
• To opt out of the sale or sharing of personal information. We do not sell or share it, and we honor Global Privacy Control signals as an opt-out request.
• To limit the use of sensitive personal information. We already use it only to provide the Service.
• Not to be discriminated against for exercising these rights.

Make a request by emailing hello@powertarot.com. We verify requests by confirming control of the email address on the account. You may use an authorized agent; we will ask for your written permission and may confirm the request with you directly. We respond within 45 days and will tell you if we need more time.

Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes.

10.3 Residents of the European Economic Area, United Kingdom, and Switzerland

We are based in the United States and do not target our Service to your region, but if you use it from there, the following applies.

Legal bases. We process your information to perform our contract with you (providing readings, your account, and billing), for our legitimate interests (security, preventing abuse, understanding site usage, and improving the Service), to comply with legal obligations (tax and accounting), and with your consent (analytics cookies where consent is required, and the newsletter). You can withdraw consent at any time without affecting processing that happened before.

Your rights. You may request access to, correction of, or deletion of your personal information; ask us to restrict processing; object to processing based on legitimate interests; receive your information in a portable format; and withdraw consent. Exercise these rights by emailing hello@powertarot.com. We respond within one month. You also have the right to lodge a complaint with your local data protection authority.

International transfers. Your information is stored and processed in the United States. Where required, we rely on standard contractual clauses or other approved mechanisms with our service providers.

11. Children

The Service is for adults. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has created an account, email hello@powertarot.com and we will delete the account and its data.

12. Changes to this policy

When we change this policy, we post the new version here with a new effective date. For material changes, we provide a prominent notice in the Service or by email, with advance notice and consent where required by law or an existing commitment. We will not retroactively expand the use of information collected under an earlier policy without honoring the promises applicable to that information and obtaining any required consent. Earlier versions are available on request.

13. Contact

Practice Everything LLC, doing business as Power Tarot
2768 Sepulveda Blvd #1083
Torrance, CA 90505
United States
hello@powertarot.com