1. Data controller
- Controller: Fernando Díaz García-Muñoz
- Tax ID: 05398746W
- Registered address: Avenida de Filipinas 44, 2ºA, 28003 Madrid, Spain
- Email: fernando-diazgm@outlook.es
2. What data do we process?
Depending on how you use the Site, we may process:
- Reading data: the question you write and the cards drawn, in order to generate your reading. These may be sent to an artificial intelligence provider (see Section 5) to generate the response.
- Contact and billing data: name, email and payment details needed to process your purchase (card details are handled directly by Stripe; we never store them).
- Technical data: IP address, browser type and cookies required for the Site to function (see Cookie Policy).
3. What do we use your data for?
- Generating and showing you the tarot reading you request.
- Processing payment for individual readings or monthly subscriptions.
- Responding to your customer support requests.
- Complying with legal and tax obligations (invoicing, accounting).
- With your express consent, sending you marketing communications (e.g. the Oracle Plan's weekly summary).
4. Legal basis for processing
We process your data based on: (a) performance of the service contract you accept when buying a reading or subscribing to a plan; (b) compliance with legal obligations (invoicing); (c) your consent, for marketing communications and non-essential cookies; and (d) our legitimate interest in ensuring the security and proper functioning of the Site.
5. Who do we share your data with?
We do not sell your personal data. We share it only with the processors necessary to provide the service:
- Stripe, Inc. — payment processing.
- Anthropic (Claude API provider) or an equivalent AI provider — generating Arkan's readings. The question you write may be sent to this provider to generate the response.
- Netlify — website hosting.
- Public authorities, when there is a legal obligation to do so.
Some of these providers may be located outside the European Economic Area. In that case, the transfer is covered by GDPR safeguards (standard contractual clauses or equivalent mechanisms).
6. How long do we keep your data?
We keep your data for as long as our contractual relationship lasts and, afterwards, for the periods required by law (commercial and tax regulations typically require certain data to be kept for several years). The content of your individual readings is kept only for as long as needed to provide the service, unless you voluntarily activate your plan's reading history.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by writing to fernando-diazgm@outlook.es and attaching a copy of your ID. You may also withdraw your consent at any time and lodge a complaint with the relevant data protection authority (in Spain, the AEPD: www.aepd.es) if you believe your data is not being processed in accordance with the law.
8. Security
We adopt reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration, appropriate to the level of risk of the processing.
9. Minors
The paid services on this Site are not directed at minors. If we discover that a minor has provided data without their legal guardian's consent, we will delete it.