Privacy Policy

Effective date: June 2026

1. Information We Collect

We collect the following information:

• Account data: username, email address, and password hash when you create an account.
• Profile data: birth date, birth time, and birth location you provide for natal chart and horoscope readings.
• Usage data: feature usage records for rate limiting and audit logs of administrative actions.
• Payment data: processed by Stripe. We store transaction IDs and payment status, but never your credit card number.
• Support messages: the content of messages you send through the contact support feature.

2. How We Use Your Information

• To provide and improve the service
• To generate AI-powered readings (your birth data and palm images are sent to our AI provider for processing)
• To enforce rate limits and prevent abuse
• To send account-related emails (verification, password reset, purchase confirmations, subscription reminders, support replies)
• To maintain audit logs for security and compliance
• To process payments and manage subscriptions

3. AI Processing

When you request a reading (horoscope, natal chart, or palm reading), your input data is sent to our AI provider (OpenAI) for processing. OpenAI processes this data according to their own privacy policy and data usage terms. We do not control how OpenAI stores or uses submitted data beyond their API agreements.

4. Payment Processing

Payments are processed by Stripe. We do not collect or store credit card numbers, CVV codes, or other sensitive payment details. Stripe stores this information according to PCI-DSS standards. We store transaction IDs, payment status, and subscription metadata for record-keeping.

5. Cookies

We use essential cookies for authentication, session management, and CSRF protection. We do not use tracking cookies, advertising cookies, or third-party analytics. No data is shared with advertising networks.

6. Data Retention

• Account data: retained until you delete your account.
• Saved readings: retained until you delete them or delete your account.
• Audit logs: retained for security and compliance purposes.
• Rate limit data: automatically pruned after the rate limit window expires.
• Payment records: retained for accounting and refund processing.

7. Data Security

Passwords are stored as salted hashes (never in plaintext). All traffic is encrypted via HTTPS. Access to administrative functions is restricted and audit-logged. We use security headers (HSTS, CSP, X-Frame-Options) and CSRF protection.

8. Your Rights

• Access: you can view your account data from your account settings.
• Deletion: you can delete your account at any time from your account settings, which removes your profile and saved readings.
• Support: you can contact us at admin@fortunamanus.com for data-related requests.

9. Children's Privacy

The service is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided personal information, contact us and we will delete it.

10. Third-Party Services

• OpenAI: processes reading requests (birth data, palm images) to generate AI content.
• Stripe: processes payments and subscriptions.
• Oracle Email Delivery: sends transactional emails on our behalf.

Each third party has its own privacy policy governing how they handle your data.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the service. Continued use after changes constitutes acceptance of the updated policy.

12. Contact

For questions about this privacy policy, contact admin@fortunamanus.com.