Privacy Policy

Draft for business/legal review only. Not legal advice. Must be reviewed by qualified counsel before publication.

Privacy Policy - THIRD DRAFT

Date: 2026-06-08 Mode: Draft-only harmonized text Prepared by: Hermes

This Privacy Policy explains how [JASON DECISION REQUIRED: insert exact legal entity name] (the “Company”) collects, uses, stores, discloses, and otherwise handles Personal Information in connection with the TarotAndAstrology Platform, including tarotandastrology.com, live.tarotandastrology.com, related Websites, account tools, booking tools, messaging functions, Session tools, payment flows, and support services.

This is a business and legal review draft only. It is not final and must be reviewed by qualified counsel before publication.

1. Introduction

The Company respects the privacy of Customers, Users, Readers/Practitioners, Studios, Managers, and other individuals who interact with the Platform.

This Privacy Policy applies to Personal Information collected through or in connection with the Platform, including when you:

  • visit or browse the Platform;
  • create an Account;
  • book or attend a Session;
  • communicate with a Reader/Practitioner;
  • contact support;
  • make or receive Payments;
  • submit forms or requests; or
  • otherwise use the Platform.

This Privacy Policy should be read together with the Terms and Conditions, the Refund Policy, the Reader/Practitioner Agreement where applicable, the Studio Agreement where applicable, and any other applicable Platform Policies.

2. Who We Are

The Company is [JASON DECISION REQUIRED: insert exact legal entity name], with a notice or business address at [JASON DECISION REQUIRED: insert address]. [LAWYER REVIEW REQUIRED]

The Company is responsible for Personal Information handled through the Platform, except where another party is clearly identified as independently responsible under applicable law.

[LAWYER REVIEW REQUIRED] Counsel should confirm whether the same entity operates both tarotandastrology.com and live.tarotandastrology.com and whether this policy should identify one operator or more than one.

3. Defined Terms Used in This Policy

In this Privacy Policy:

  • “Platform” means the TarotAndAstrology service environment, including related Websites, account tools, booking flows, Session tools, messaging functions, payment flows, and support features.
  • “Customer” means a User who purchases, books, requests, attends, or pays for Services through the Platform.
  • “Reader/Practitioner” means an individual approved by the Company to provide tarot, astrology, spiritual guidance, personal insight, or similar advisory Services through the Platform.
  • “Session” means any live, scheduled, on-demand, or asynchronous interaction between a Customer and a Reader/Practitioner conducted through or arranged on the Platform.
  • “Personal Information” means information about an identifiable individual, or information that can reasonably be linked to an identifiable individual, as defined by applicable privacy law. [LAWYER REVIEW REQUIRED]
  • “Refunds” means the reversal, return, crediting, or reimbursement of amounts previously paid by a Customer for Services, whether provided to the original payment method, as Credits, or by another approved method.
  • “Chargebacks” means payment reversals, retrievals, disputes, reversals of settlement, or similar transaction disputes initiated through a card issuer, financial institution, payment processor, or payment service provider after a Payment has been processed.
  • “Recordings” means any captured or stored audio, video, screen capture, session capture, or other preserved media generated from or related to use of the Platform or a Session. [LAWYER REVIEW REQUIRED]
  • “Transcripts” means written, machine-generated, AI-generated, human-generated, or hybrid text records or summaries of communications, Sessions, support interactions, or related Platform activity.
  • “AI Tools” means automated or machine-assisted tools, including artificial intelligence, machine learning, speech-to-text, summarization, moderation, classification, safety review, recommendation, fraud detection, or support-assistance tools, used by or on behalf of the Company in connection with the Platform or Services.

4. Personal Information We Collect

Depending on how you use the Platform, the Company may collect the following categories of Personal Information:

  • Account Information;
  • Payment and Billing Information;
  • Reader/Practitioner Session Information;
  • Chat, Video, Audio, Message, Notes, and Support Records;
  • Birth Details and Astrology Information;
  • Device, Log, Security, and Cookie Data;
  • identity, fraud-review, or verification information where applicable;
  • information submitted through forms, complaints, Refund requests, or support communications; and
  • any other information you choose to provide through the Platform.

5. Account Information

The Company may collect Account Information such as name, display name or username, email address, phone number if provided or required, password or credential-related metadata, profile information, service preferences, communication preferences, and account verification information where required.

[JASON DECISION REQUIRED] Confirm the exact fields collected from Customers and whether different fields are collected from Readers/Practitioners, Studios, or Managers.

6. Payment and Billing Information

When you purchase Services or otherwise make Payments through the Platform, the Company or its payment processors may collect or receive billing-related information such as:

  • transaction identifiers;
  • order or booking references;
  • billing name and contact details;
  • payment status information;
  • fraud or risk signals;
  • payment method type or masked payment details;
  • Refund, reversal, and Chargeback information; and
  • tax or accounting records required for business operations and legal compliance.

The Company may not directly store full payment card details where a third-party processor hosts and processes those details instead.

[JASON DECISION REQUIRED] Confirm whether full payment credentials are processor-hosted only and which payment processors are in active use, including whether CCBill is currently active.

7. Reader/Practitioner Session Information

The Company may collect information relating to the booking, administration, and delivery of Sessions, including the selected Reader/Practitioner, service category or Session type, appointment date and time, Session duration, Session status, booking and rescheduling history, cancellation or no-show information, refund or support review information related to the Session, and Session-related notes or metadata where used operationally.

[JASON DECISION REQUIRED] Confirm exactly what Session metadata is stored and whether different rules apply by Session channel.

8. Chat, Voice, Video, Messages, Notes, and Support Records

The Company may collect communications and related operational records, including customer support requests, messages sent through the Platform, Session-related written communications, complaint and Refund communications, internal support notes, moderation notes, dispute review records, and service or account follow-up records.

Where voice, video, or other live-session tools are used, the Company may also process Session-related technical or communication information necessary to deliver or support the Service.

[JASON DECISION REQUIRED] Confirm whether the Platform stores only communication metadata, actual content, or both.

9. Birth Details and Astrology Information

If you request astrology-related Services, the Company may collect information you provide for those Services, such as date of birth, birth time, birthplace, zodiac or astrology intake information, relationship or personal-context details voluntarily submitted by you, and related interpretive inputs needed to provide the requested Service.

This information is collected to deliver the requested Service and related support, operational, or review functions.

[LAWYER REVIEW REQUIRED] Counsel should confirm whether any part of this category should be treated as sensitive Personal Information or subject to additional consent, handling, or disclosure rules.

10. Device, Log, Security, and Cookie Data

The Company may automatically collect or generate technical and security-related information, including IP address, browser type and version, operating system, device identifiers or characteristics, pages visited, features used, timestamps, access logs, error logs, crash information, security signals, cookie data, and analytics or performance-related usage data.

The Company may use cookies and similar technologies to operate the Platform, remember preferences, improve performance, support security, and analyze service usage.

[JASON DECISION REQUIRED] Confirm the actual analytics, security, and cookie tools used in production.

11. How We Use Personal Information

The Company may use Personal Information for purposes including:

  • providing, operating, and maintaining the Platform;
  • creating and managing Accounts;
  • booking, scheduling, delivering, and supporting Sessions;
  • communicating with Customers and Readers/Practitioners;
  • processing Payments, Refunds, reversals, and Chargebacks;
  • detecting, preventing, investigating, or responding to fraud, abuse, security incidents, and policy violations;
  • monitoring service quality and operational integrity;
  • responding to support requests, complaints, and disputes;
  • improving the Platform, workflows, and customer support;
  • meeting legal, regulatory, tax, accounting, contractual, and recordkeeping obligations; and
  • operating moderation, safety review, transcription, summarization, or AI-assisted workflows where applicable.

[JASON DECISION REQUIRED] Confirm whether AI-assisted or transcript-based operational workflows are actually in use.

12. Consent

By using the Platform, creating an Account, submitting Personal Information, booking Services, or communicating through the Platform, you consent to the collection, use, and disclosure of your Personal Information as described in this Privacy Policy, except where applicable law requires a different or more specific form of consent.

Depending on the circumstances, the Company may rely on express consent, implied consent, or another lawful basis recognized under applicable law. [LAWYER REVIEW REQUIRED]

You may be able to withdraw certain consents, subject to legal, contractual, operational, or technical limits. Withdrawal of consent may affect the Company’s ability to provide some or all Services.

[LAWYER REVIEW REQUIRED] Counsel should confirm the final consent model and any Canadian privacy-law language needed for clarity and enforceability.

13. Disclosure to Service Providers

The Company may disclose Personal Information to service providers and vendors that assist with operating the Platform, including providers supporting hosting or infrastructure, customer support systems, analytics or diagnostics, communications tools, security monitoring, fraud detection, scheduling or operational tools, transcription, summarization, moderation, AI-assisted services where applicable, and legal, accounting, compliance, or business operations.

These service providers may access Personal Information only to the extent reasonably necessary to perform services for the Company, subject to contractual or other safeguards where appropriate.

[JASON DECISION REQUIRED] Confirm which categories of vendors are actually used.

14. Payment Processors

Payments made through the Platform may be processed by third-party payment processors, including CCBill where applicable, and any additional processors designated by the Company from time to time.

Those processors may collect, store, and process payment-related information under their own privacy practices and contractual terms. The Company may receive transaction confirmations, dispute information, limited billing information, fraud signals, and related operational data from those processors.

[JASON DECISION REQUIRED] Confirm whether CCBill is active and whether other processors should be named.

15. Reader/Practitioner and Studio Access to Customer Information

Readers/Practitioners may be given access to Personal Information only to the extent reasonably necessary to provide Services, manage Sessions, respond to Customer communications, or comply with Company rules and operational requirements.

Studios, Managers, and Authorized Personnel may be given access to Personal Information or Customer Data only to the extent reasonably necessary for approved operational support, scheduling, workspace management, equipment support, compliance review, or similar authorized business functions.

Readers/Practitioners, Studios, Managers, and Authorized Personnel must not:

  • use Customer Personal Information for unauthorized off-platform purposes;
  • retain Customer Personal Information longer than permitted by Company rules or applicable law;
  • disclose Customer Personal Information to unauthorized persons; or
  • use Customer information for unrelated solicitation or direct dealing outside the Platform where prohibited.

[JASON DECISION REQUIRED] Confirm whether Readers/Practitioners, Studios, Managers, or Authorized Personnel can export, download, print, or retain any customer data outside approved Platform tools.

16. Recordings, Transcripts, AI Tools, Moderation, and Safety Review

The Company may use operational tools and review processes to support customer service, moderation, fraud review, billing review, quality review, safety review, training, service improvement, or compliance.

Depending on the actual business model and tools in use, this may include Transcripts of communications or Sessions, summaries or notes generated by humans or AI Tools, moderation or review tags, fraud review records, support review records, and limited internal sharing of Session-related data for authorized operational purposes.

[JASON DECISION REQUIRED] [LAWYER REVIEW REQUIRED] Confirm whether the Company creates or stores Recordings of Sessions, support interactions, or other communications.

[JASON DECISION REQUIRED] [LAWYER REVIEW REQUIRED] Confirm whether AI Tools are used for speech-to-text, summarization, moderation, support assistance, fraud detection, quality review, or workflow automation, and how notice and consent are handled.

Where the Company uses such tools, it will do so for legitimate operational, support, safety, security, fraud-prevention, or service-improvement purposes, subject to applicable law.

17. Disclosure in Other Circumstances

The Company may also disclose Personal Information where reasonably necessary to:

  • comply with law, court order, subpoena, or lawful request;
  • protect the rights, safety, property, or security of the Company, its Users, Customers, Readers/Practitioners, Studios, Managers, service providers, or the public;
  • investigate fraud, abuse, security incidents, or potential legal violations;
  • enforce the Terms and Conditions, Refund Policy, Reader/Practitioner Agreement, Studio Agreement, or other Policies;
  • support a business transaction such as a merger, sale, financing, reorganization, or asset transfer, subject to appropriate safeguards where feasible; or
  • establish, exercise, or defend legal claims.

18. Retention

The Company retains Personal Information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Services, managing Accounts and support requests, processing Payments, Refunds, and Chargebacks, maintaining business, accounting, and tax records, responding to disputes, complaints, fraud review, and legal obligations, and maintaining security, audit, and operational records.

When Personal Information is no longer reasonably required, the Company may delete, anonymize, aggregate, or otherwise de-identify it, subject to legal and operational requirements.

[JASON DECISION REQUIRED] [LAWYER REVIEW REQUIRED] Confirm actual retention schedules and retention triggers by data category.

19. Security

The Company uses administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, loss, misuse, alteration, or disclosure.

Such safeguards may include access controls, credential controls, logging, limited role-based access, vendor controls, and operational review processes.

No security measure is perfect, and the Company cannot guarantee absolute security.

20. International Processing

The Company, its service providers, or its processors may store, access, or process Personal Information in jurisdictions outside the Customer’s home jurisdiction, including jurisdictions where privacy or data-access laws differ.

Where Personal Information is processed outside your jurisdiction, it may be subject to lawful access by courts, regulators, or law-enforcement authorities in those jurisdictions. [LAWYER REVIEW REQUIRED]

[JASON DECISION REQUIRED] Confirm the actual hosting, processor, and support-processing locations used in production.

21. User Rights and Access Requests

Subject to applicable law, you may have rights relating to your Personal Information, such as the right to request access to Personal Information held about you, request correction of inaccurate Personal Information, request withdrawal of certain consents subject to legal and operational limits, request deletion where applicable and not inconsistent with legal or operational obligations, and make privacy-related complaints or inquiries.

The Company may take reasonable steps to verify identity before responding to a request.

[LAWYER REVIEW REQUIRED] Counsel should confirm the final rights language and any jurisdiction-specific wording needed for Canadian privacy compliance.

22. Children and Minors

The Platform is not intended for children or minors. Customers must be at least 18 years of age, or the age of majority in their jurisdiction, whichever is higher, to use the Services.

If the Company becomes aware that Personal Information has been collected from a person who is not eligible to use the Platform, the Company may take steps to delete that information and restrict or terminate associated access, subject to legal obligations.

23. Contact Information

Privacy questions, concerns, or requests may be directed to:

  • Email: [JASON DECISION REQUIRED: insert privacy contact email]
  • Mail: [JASON DECISION REQUIRED: insert privacy or legal notice address]

[LAWYER REVIEW REQUIRED] Counsel should confirm whether a designated privacy contact, privacy officer, or separate legal notice address should be listed.

24. Changes to This Privacy Policy

The Company may update this Privacy Policy from time to time. If updated, the Company may post the revised version on the Platform, revise the effective date, or provide notice through the Account, Website, email, or other reasonable means.

Your continued use of the Platform after the effective date of an updated Privacy Policy may constitute acceptance of the revised policy where permitted by applicable law.

[LAWYER REVIEW REQUIRED] Counsel should confirm whether any changes require express renewed consent rather than notice alone.

Internal review reminders before any publication

  • Insert exact Company identity and address.
  • Confirm payment processors.
  • Confirm whether Recordings exist.
  • Confirm whether Transcripts exist.
  • Confirm whether AI Tools are used and for what functions.
  • Confirm actual hosting and processing jurisdictions.
  • Confirm retention schedules.
  • Confirm Reader/Practitioner, Studio, and Manager access and export rules.

No production changes applied.