PowerTarot (powertarot.com, the "Service") is operated by Practice Everything LLC, a California limited liability company doing business as Power Tarot ("PowerTarot," "we," "us," or "our"). This policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have.
Mailing address: 2768 Sepulveda Blvd #1083, Torrance, CA 90505, United States
Email: hello@powertarot.com
The short version: we collect what we need to give you readings and run your account, we send your questions to an AI provider that does not train on them, we do not sell your information or use it for advertising, and you can delete everything from Settings.
1. Scope
This policy covers the PowerTarot website and app, emails we send, and support conversations. It does not cover third-party sites we link to.
2. What we collect
2.1 Information you give us
- Account information: your email address. Sign-in is by magic link, so we hold no password.
- Readings: the questions you type, the topic or category you choose, the spread, the cards drawn, any notes you add, and the reading generated for you.
- Chat: the follow-up messages you send about a reading and the responses.
- Custom spreads (Pro): the names, descriptions, and position prompts you create.
- Daily reading settings (Pro): the spread and category you choose, the hour you want the email, and your time zone.
- Preferences: whether you have opted into our newsletter.
- Support and correspondence: anything you send to hello@powertarot.com or through the contact form.
- Share links: if you create a share link for a reading, the reading's cards and text, and the question if you choose to include it, are visible to anyone with the link until you make it private again.
2.2 Information collected automatically
- Device token: when you get a reading without an account, we set a cookie containing a random token so we can show you that reading and, if you sign in later, move it into your account.
- Session cookies: cookies that keep you signed in.
- IP address: used to limit anonymous readings per network, to detect abuse, and for security. Server logs containing IP addresses are kept for 30 days.
- Usage data: readings created, credits and deck state, chat message counts, and when you reach a plan limit.
- AI usage metadata: for each reading and chat turn, the model used, token counts, and estimated cost. This metadata does not include the text of your readings or messages.
- Site analytics: we use Google Analytics 4, which sets cookies and collects your device and browser type, approximate location derived from IP address, pages viewed, and actions taken on the site. See Section 6.
- Email delivery data: whether emails we send are delivered, bounce, or are opened or clicked.
2.3 Information from others
- Stripe: when you buy something, Stripe sends us your payment status, the card brand and last four digits, the billing country and postal code, and identifiers for your customer record and subscription. We never receive your full card number.
- Google: analytics reports as described in Section 6.
2.4 A note on sensitive information
Readings are personal. People ask about relationships, health, grief, money, faith, and work. You decide what to type, and nothing on the Service requires you to share sensitive details. Whatever you enter is used only to generate your readings and chat, to show them back to you in your journal, and as described in this policy. We do not use it for advertising, we do not sell it, and we do not analyze it to build profiles about you.
3. How we use information
- To generate readings and chat responses and to show them to you.
- To create and run your account, including the anonymous reading you claim when you sign in.
- To apply plan limits, credits, and the deck, and to prevent abuse of free readings.
- To process payments, manage subscriptions, and send receipts, renewal reminders, and other billing notices.
- To send the daily emailed reading if you are a Pro subscriber and have turned it on.
- To send our newsletter if you opted in.
- To respond to support requests.
- To keep the Service secure, investigate abuse, and enforce our Terms.
- To understand how the site is used and improve it, using analytics.
- To meet legal obligations, including tax and accounting rules.
We do not make decisions about you using automated processing that has legal or similarly significant effects.
4. How AI processing works
To generate a reading, we send the AI provider your question, the topic, the spread, the cards drawn, and our instructions. For chat, we also send the reading and the earlier messages in that conversation. Your email address and account identifiers are not sent.
Our AI provider is Anthropic, PBC, through its commercial API. Under Anthropic's commercial terms, inputs and outputs sent through the API are not used to train Anthropic's models, and Anthropic deletes API inputs and outputs from its systems within 30 days except where longer retention is required by law or to enforce its usage policies. Anthropic's privacy policy is at anthropic.com/privacy.
We do not use your readings, questions, or messages to train AI models.
5. How we share information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows.
Service providers. Companies that process information on our behalf, under contracts that restrict their use of it:
| Provider | What it does | Privacy policy |
|---|---|---|
| Supabase, Inc. | Database, authentication, and file storage | supabase.com/privacy |
| Vercel, Inc. | Web hosting and built-in site analytics | vercel.com/legal/privacy-policy |
| Anthropic, PBC | AI model that generates readings and chat responses | anthropic.com/privacy |
| Stripe, Inc. | Payment processing and subscription billing | stripe.com/privacy |
| Resend, Inc. | Sending transactional and daily reading emails | resend.com/legal/privacy-policy |
| Google LLC | Google Analytics site analytics | policies.google.com/privacy |
Legal reasons. We may disclose information if required by law, subpoena, or court order, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of our users, the public, or us.
Business transfers. If Practice Everything LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you by email before your information becomes subject to a different privacy policy.
With your consent. For anything else, we will ask first.
6. Cookies and analytics
Essential cookies. Sign-in session cookies and the anonymous device token are necessary for the Service to work. You can delete them in your browser, but the Service will not function without them.
Google Analytics. We use Google Analytics 4 to understand how people use the site. It sets cookies (such as _ga and _ga_ followed by an identifier) and reports device and browser type, approximate location from IP address, pages viewed, and site events to Google. We have not enabled Google's advertising features, and we do not use analytics data to target ads. You can prevent Google Analytics from collecting your data by installing Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout, or by blocking analytics cookies in your browser. Google's privacy policy is at policies.google.com/privacy.
Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of analytics tracking and do not load Google Analytics for that visit.
Do Not Track. Because there is no common standard for Do Not Track signals, we do not respond to them. Global Privacy Control, above, is honored.
7. Email
- Transactional emails: magic links, receipts, renewal reminders, billing notices, changes to our Terms or this policy, and security notices. You cannot opt out of these while you have an account.
- Daily reading (Pro): sent only if you turn it on. Pause or stop it from your account page or with the link in every email.
- Newsletter: sent only if you opt in, which is a separate choice from creating an account. Every newsletter has an unsubscribe link, and unsubscribe requests are honored within 10 business days.
Every commercial email we send includes our mailing address and a way to unsubscribe.
8. How long we keep information
| Information | Retention |
|---|---|
| Account, readings, chat, journal, custom spreads, settings | While your account is open. Deleted within 30 days after you delete your account, and removed from backups within 90 days |
| Individual readings you delete | Deleted within 30 days, and removed from backups within 90 days |
| Anonymous readings never claimed by an account | Deleted 30 days after creation |
| Sign-in emails never verified | 30 days |
| Payment and subscription records | 7 years after the transaction, to meet tax and accounting requirements |
| Server logs with IP addresses | 30 days |
| AI usage metadata (token counts and cost, no content) | Up to 24 months, then deleted or aggregated |
| Email delivery data | 12 months |
| Support correspondence | 2 years after the request is closed |
| Newsletter subscription | Until you unsubscribe |
We may keep information longer where the law requires it or where it is needed to resolve a dispute or enforce our Terms.
9. Security
Information is encrypted in transit using TLS and at rest by our database provider. Access to readings is restricted by row-level security so that each account can reach only its own data. Administrative access is limited to the people who need it and is logged. Payment card data is handled entirely by Stripe.
No system is perfectly secure. If a breach affects your personal information, we will notify you and any regulators as required by law, including California Civil Code Section 1798.82.
10. Your choices and rights
10.1 For everyone
- Access and export: email us and we will send you a copy of your account information and readings in a machine-readable format within 30 days.
- Correction: update your email address from Settings, or email us to correct anything else.
- Deletion: delete individual readings from your journal, or delete your whole account from Settings. You can also email us and we will delete it for you.
- Marketing: unsubscribe from the newsletter with the link in any newsletter or from Settings.
- Daily reading: pause or stop it from your account page or the link in any daily email.
- Analytics: see Section 6.
To make a request by email, write to hello@powertarot.com from the address on your account. If you write from a different address, we will ask you to confirm the request from the account address before acting on it. There is no charge for these requests.
10.2 California residents
The California Consumer Privacy Act, as amended, gives California residents rights over their personal information. We extend these rights to every user, whether or not the law applies to us.
What we collect and why. In the past 12 months we have collected the following categories of personal information, for the purposes in Section 3, from the sources in Section 2:
- Identifiers: email address, IP address, device token, customer and subscription identifiers.
- Commercial information: purchases, credits, and subscription history.
- Internet activity: pages viewed, actions on the site, and usage of readings and chat.
- Approximate geolocation: derived from IP address for analytics.
- Sensitive personal information: the contents of readings and messages, to the extent you choose to include sensitive details. We use this only to provide the Service and do not use it to infer characteristics about you.
We disclose these categories to the service providers listed in Section 5 for business purposes. We have not sold personal information or shared it for cross-context behavioral advertising in the past 12 months, and we do not do so now. We do not knowingly sell or share the personal information of anyone under 16.
Your rights.
- To know what personal information we have collected about you and to receive a copy.
- To delete your personal information.
- To correct inaccurate personal information.
- To opt out of the sale or sharing of personal information. We do not sell or share it, and we honor Global Privacy Control signals as an opt-out request.
- To limit the use of sensitive personal information. We already use it only to provide the Service.
- Not to be discriminated against for exercising these rights.
Make a request by emailing hello@powertarot.com. We verify requests by confirming control of the email address on the account. You may use an authorized agent; we will ask for your written permission and may confirm the request with you directly. We respond within 45 days and will tell you if we need more time.
Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes.
10.3 Residents of the European Economic Area, United Kingdom, and Switzerland
We are based in the United States and do not target our Service to your region, but if you use it from there, the following applies.
Legal bases. We process your information to perform our contract with you (providing readings, your account, and billing), for our legitimate interests (security, preventing abuse, understanding site usage, and improving the Service), to comply with legal obligations (tax and accounting), and with your consent (analytics cookies where consent is required, and the newsletter). You can withdraw consent at any time without affecting processing that happened before.
Your rights. You may request access to, correction of, or deletion of your personal information; ask us to restrict processing; object to processing based on legitimate interests; receive your information in a portable format; and withdraw consent. Exercise these rights by emailing hello@powertarot.com. We respond within one month. You also have the right to lodge a complaint with your local data protection authority.
International transfers. Your information is stored and processed in the United States. Where required, we rely on standard contractual clauses or other approved mechanisms with our service providers.
11. Children
The Service is for adults. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has created an account, email hello@powertarot.com and we will delete the account and its data.
12. Changes to this policy
When we change this policy, we post the new version here with a new effective date. For material changes, we email account holders at least 30 days before the change takes effect. Earlier versions are available on request.
13. Contact
Practice Everything LLC, doing business as Power Tarot
2768 Sepulveda Blvd #1083
Torrance, CA 90505
United States
hello@powertarot.com