Privacy Policy

Who is responsible

Klaudiusz Kukieła, Krakowska 21/2, 99-400 Łowicz, Poland (Poland, European Union) is the data controller for this service. Contact: automaty.partner@gmail.com.

What we collect

• What you type into the ritual: your first name, date of birth, chosen topic and your question.
• Your conversation with Madame Vexa.
• If you buy a palm reading and upload a photo of your hand: that image, processed for the reading.
• A session identifier stored in a cookie so your credits and history survive a page refresh.
• Purchase records (amount, package, transaction reference) received from our payment provider.

Your date of birth is personal data. We use it only to determine your star sign and personalise the reading. We do not build advertising profiles and we do not sell data.

Legal basis

Performing the contract you entered into when you bought a reading (Art. 6(1)(b) GDPR), and our legitimate interest in operating and securing the service (Art. 6(1)(f) GDPR).

Who processes it

• OpenAI — generates the readings from the text (and palm photo) you submit.
• Vercel — hosting.
• Neon — database.
• Stripe — payment processing (card details go to Stripe, we never see or store them).

These providers may process data outside the EEA under the transfer safeguards described in their own policies.

How long we keep it

Session and conversation data: 12 months, then deleted. Uploaded palm photos: deleted after the reading is generated and never stored beyond the request. Purchase records: kept as long as required by tax law.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing. Email automaty.partner@gmail.com and we will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

Cookies

We use one strictly necessary cookie to keep your session and credits, and one to limit the free daily roast to once per day. No advertising or tracking cookies, so no consent banner is required.