1. Information we collect
We may collect the following information:
- Account information: name, email address, profile image, and sign-in provider account identifier
- Service activity: tarot questions, selected cards, AI-generated readings, follow-up conversations, language, and display settings
- Consultation information: selected practitioner, date and time, duration, booking status, and customer email
- Payment information: order number, product name, amount, payment status, and transaction identifiers supplied by the payment provider
- Practitioner information: application, approval status, public profile, prices, working hours, and Google Calendar connection details
- Technical information: request times, error records, and access information required for security and incident response
We do not directly store complete card numbers or card security codes.
2. How we use information
We use information to authenticate members, provide AI readings, process consultation bookings and payments, create Google Calendar events, answer support requests, prevent abuse, improve reliability, and comply with legal obligations.
3. Google Calendar information
When an approved practitioner provides consent, we read their calendar list and availability and create a paid consultation event in their selected calendar. Calendar information is used only to provide the consultation booking feature and is not used for advertising.
Disconnecting stops new calendar access. Events that were already created may need to be removed separately in Google Calendar.
4. Retention and deletion
We retain personal information until its purpose is fulfilled or an account deletion request is processed. Payment and transaction records may be retained separately when required by ecommerce, tax, dispute, or other applicable laws.
5. Service providers
The following providers may process information to operate the service:
- Google: sign-in and Calendar integration
- Toss Payments: payment processing
- Neon and cloud hosting providers: database and service hosting
- AI model providers: generating requested tarot readings
- Email delivery providers: booking and service notifications
Each provider processes information under its own privacy policy and the agreed service scope.
6. Cookies
We use essential cookies for authentication and security. If analytics or advertising cookies are introduced, we will provide the required notice and consent controls.
7. Your choices and rights
You may request access, correction, deletion, restriction of processing, or deletion of your account. You may also revoke Calendar access from your Google Account permissions page.
8. Security
We apply reasonable technical and organizational safeguards, including access controls, encryption in transit, encrypted storage of sensitive OAuth tokens, and error monitoring.
9. Children
The service is not intended for anyone under 18, and we do not knowingly collect personal information from minors. If we learn that this has occurred, we will investigate and take appropriate action.
10. Changes to this policy
When this policy changes, we will update the date at the top of this page. Material changes affecting user rights will be announced through the service or registered contact information.
11. Contact
Privacy questions: contact@geekhaus.club