Legal

Privacy Policy

Last updated: June 10, 2026

This Privacy Policy explains how Soothsayers Online (“we,” “us,” or “the Service”) at soothsayers.online collects, uses, stores, and shares personal data when you use our website and purchase readings. Your use of the Service is also governed by our Terms of Service.

1. Who we are

Soothsayers Online is operated from Serbia. For privacy-related questions or requests, contact us at readings@soothsayers.online.

2. Data we collect

We collect the following categories of personal data:

  • Email address (required at checkout) to deliver your library link, reading history access, and account-related messages.
  • Question / situation text that you submit for your reading. This is sent to our AI provider to generate your fortune.
  • Generated readings including text, rarity tier, optional images, share IDs, and timestamps.
  • Purchase and account data such as tier purchased, credits remaining, access tokens (hashed identifiers), and consent timestamps.
  • Payment data is collected and processed by Creem, our Merchant of Record. We do not store full card numbers on our servers.
  • Technical data such as IP address, browser type, and basic server logs, used for security and operation of the Service.

3. How we use your data

We use personal data to:

  • Generate and deliver AI fortune readings
  • Maintain your private library and reading credits
  • Send transactional emails (library links, top-ups, token refreshes)
  • Process payments through Creem
  • Prevent fraud, abuse, and unauthorized access
  • Comply with legal obligations and respond to disputes
  • Improve and operate the Service

We do not sell your personal data.

4. Legal bases (EEA / UK)

If you are in the European Economic Area or United Kingdom, we process personal data on these bases:

  • Contract: to deliver readings, library access, and credits you purchase.
  • Consent: for immediate digital delivery and withdrawal waiver at checkout, and where required for optional communications.
  • Legitimate interests: security, fraud prevention, and improving the Service, balanced against your rights.
  • Legal obligation: where we must retain or disclose data under applicable law.

5. AI processing

Your submitted question and generated reading text are processed by DeepSeek v4 Pro (deepseek-v4-pro) (DeepSeek) to produce fortune content. Optional epic-tier illustrations are generated by xAI Grok Imagine (grok-imagine-image-quality) (xAI). Do not submit sensitive personal data you do not want processed for this purpose (for example, health diagnoses, financial account numbers, or government IDs).

6. Sharing with third parties

We share data only as needed to operate the Service:

  • Creem (payments, Merchant of Record)
  • Supabase (database hosting)
  • Resend (transactional email delivery)
  • DeepSeekDeepSeek v4 Pro (deepseek-v4-pro) (reading generation)
  • xAIxAI Grok Imagine (grok-imagine-image-quality) (optional epic-tier image generation)

Each provider processes data under their own terms and privacy policies. We require service providers to handle data only for the purposes we specify.

7. Retention

We retain account data, readings, and purchase records for as long as needed to provide your library, enforce our Terms, and meet legal obligations. Library access links expire after 30 days but your readings and credits remain associated with your email until you request deletion or we no longer need the data.

Payment records may be retained by Creem according to their policies and applicable tax and accounting requirements.

8. Security

We use private library links instead of passwords. Anyone with your link may access your readings until the link expires or is rotated. Keep your link confidential. We apply reasonable technical and organizational measures to protect data, but no system is completely secure.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based, without affecting prior lawful processing.

To exercise these rights, email readings@soothsayers.online. EEA/UK residents may lodge a complaint with their local data protection authority.

10. International transfers

Your data may be processed in countries other than your own, including the United States, where our infrastructure and service providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

11. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided data, contact us and we will delete it.

12. Changes

We may update this Privacy Policy from time to time. The “Last updated” date will change. Material changes apply prospectively. Continued use after an update means you accept the revised policy for new activity.

13. Contact

Soothsayers Online: readings@soothsayers.online