Privacy Policy

Last updated: October 2026

1. Who We Are

My Personal Oracle ("the Service", "we", "us", "our") is operated by Valeo Realty Group LLC, a New York limited liability company. You can contact us at support@mypersonaloracle.com.

2. What We Collect

We collect the following information when you use the Service: • Account information: your name and email address when you register. • Birth data: date, time, and place of birth that you provide for astrological calculations. • Questions and readings: questions you ask the Oracle and the responses generated for you. • Palm images: photos you voluntarily upload for palm reading. These are sent to our AI for processing and are not retained after your reading session ends. • Payment information: billing details are handled entirely by Stripe. We never see or store your full card number. • Usage data: which features you use, pages you visit, and when — collected via server logs and first-party analytics only.

3. How We Use Your Data

We use your data solely to: • Generate personalized astrology, tarot, and Oracle readings. • Remember your previous questions to improve future readings (Premium feature — stored only for your account). • Process subscription payments through Stripe. • Send transactional emails (receipts, password resets) and, with your consent, product updates and daily readings. • Improve the Service and fix issues. We do not sell, rent, or share your data with third parties for advertising purposes. Ever.

4. Data Storage & Security

Your data is stored in Supabase (a PostgreSQL database hosted in the United States) with row-level security — meaning your data is only accessible by you and our service. We use HTTPS for all data in transit. While we implement industry-standard security practices, no system is 100% secure. In the event of a data breach that affects your personal information, we will notify you within 72 hours where required by law.

5. Third-Party Services

We use the following third-party providers, each governed by their own privacy policy: • Supabase (supabase.com) — database, authentication, and file storage. • Stripe (stripe.com) — payment processing. Stripe is PCI-DSS compliant. • Google Gemini API — AI reading generation. Your questions are sent to Google's API for processing. Google's AI data usage policy applies. • Netlify (netlify.com) — website hosting. • Apple App Store / Google Play — if you use our mobile app, Apple's and Google's respective privacy policies apply to the app store transaction.

6. Your Rights & Data Deletion

You have the right to: • Access all personal data we hold about you. • Correct inaccurate information. • Delete your account and all associated data permanently — including your birth data, questions, readings, and email address. To delete your account, go to Account Settings → Delete Account, or email support@mypersonaloracle.com with the subject "Delete My Account." • Export your reading history in a portable format. • Opt out of marketing emails at any time using the unsubscribe link in any email, or by emailing us. We will respond to all data requests within 30 days. Deleted data is removed from our active systems within 30 days and from backups within 90 days.

7. Children's Privacy

This Service is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, please contact us at support@mypersonaloracle.com and we will promptly delete it.

8. Cookies

We use only essential, first-party cookies required to keep you logged into your account. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies. We do not run advertisements.

9. International Users

My Personal Oracle is operated from the United States. If you access the Service from outside the United States — including from the European Economic Area (EEA) or United Kingdom — your personal data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. For EEA users, we rely on your explicit consent (given at signup) as our legal basis for processing personal data under the GDPR.

10. California Residents (CCPA)

If you are a California resident, you have the right to know what personal data we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal data. To exercise your rights, email support@mypersonaloracle.com. We will not discriminate against you for exercising any of these rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email at least 30 days before they take effect. The "Last updated" date at the top of this page will always reflect the most recent version. Continued use of the Service after the effective date of changes constitutes your acceptance.

12. Contact & Data Controller

Data controller: Valeo Realty Group LLC Email: support@mypersonaloracle.com For privacy-specific requests, use subject line: "Privacy Request" We will respond within 30 days.