Privacy Policy

Who is responsible

Klaudiusz Kukieła, Krakowska 21/2, 99-400 Łowicz, Poland (Poland, European Union) is the data controller for this service. Contact: automaty.partner@gmail.com.

What we collect

• What you type into the ritual: your first name, date of birth, chosen topic and your question.
• Your conversation with Madame Vexa, including which method you chose (crystal ball, tarot, palm).
• If you upload a photo of your hand (in a chat or on the palm reading page): that image, sent once to our AI provider to write the reading and never stored by us. We keep only the written reading.
• For tarot spreads: the question topic you pick, the first name if you give one, the cards drawn and the reading she writes.
• For a dream reading: we keep only the reading she writes, not the dream you typed. For numerology and the birth chart: the first name, date (and, for the chart, time and city) of birth you enter, only when you buy the full reading. The yes-or-no question, your life path number and your Big Three are calculated without storing anything.
• If you turn on morning notifications: the technical address your browser gives us for delivering them, and your zodiac sign if you chose one. Turning notifications off in your browser deletes it on our side the next time we try to send.
• Your email address, when you pay — we receive it from Stripe with the payment confirmation so we can answer questions about your purchase, handle refunds, and restore your access to the questions you paid for if you lose your access key.
• Purchase records: amount, package, transaction reference, and whether a promotional code was used.
• If you order a written report: the first names and zodiac signs you enter (yours and, for a compatibility report, the other person's), the chosen focus, and the report she writes.
• If you sign up for the daily line: your email address, your sign, the exact wording you agreed to and when, and whether you confirmed it from the email we sent.
• Your IP address, kept briefly and used only to stop abuse — someone hammering the free reading or guessing promotional codes. It is never used to identify or profile you.
• If you arrived through a tagged link, the campaign tags in that link (for example which video sent you), so we know which content works.
• Two cookies: one holding a random session identifier so your credits and history survive a page refresh, and one so the free daily roast can be limited to once a day.
• Anonymous counters of how many visits reach each step of the ritual (landing page, quiz steps, reading, checkout) — a simple daily tally per step, with no identifier, cookie, or IP attached, so we can see where people drop off without knowing who anyone is.

Your date of birth is personal data. We use it only to determine your star sign and personalise the reading — it is never shown in our own dashboard. We do not build advertising profiles, we do not sell data, and we never share your conversation with anyone.

We deliberately collect nothing beyond this. No phone number, no surname, no location, no tracking across other websites.

Legal basis

Performing the contract you entered into when you bought a reading (Art. 6(1)(b) GDPR) — this covers the ritual answers, the conversation, and the purchase records. Our legitimate interest in keeping the service running and free of abuse (Art. 6(1)(f) GDPR) — this covers the short-lived IP records and the campaign tags. Keeping accounting records is a legal obligation (Art. 6(1)(c) GDPR). The daily email is sent only with your consent (Art. 6(1)(a) GDPR), which you give by ticking a box and confirming from the email, and which you can withdraw at any time with the one-click unsubscribe link in every email.

Readings are generated automatically

Madame Vexa is an AI character. Every reading is produced automatically by a language model from what you typed — no human writes it, and no human reads your conversation as it happens. Readings are entertainment and produce no legal or similarly significant effect, so this is not automated decision-making in the sense of Art. 22 GDPR. If a message suggests you may be in crisis, the AI is bypassed entirely and you receive a fixed message pointing you to real help.

Who can see your conversation

• You, in your own browser session.
• Klaudiusz Kukieła, through a private dashboard used to improve the service. Names are shortened to an initial there and dates of birth are never shown.
• Nobody, if your message triggered the crisis-support response: those conversations are excluded from that dashboard entirely and their content is never displayed.

Who processes it

• OpenAI — generates the readings from the text (and palm photo) you submit.
• Vercel — hosting.
• Neon — database.
• Stripe — payment processing (card details go to Stripe, we never see or store them).
• Resend — sends the daily-line emails and the confirmation email.

These providers may process data outside the EEA under the transfer safeguards described in their own policies.

How long we keep it

• Ritual answers and conversations: 12 months, then deleted.
• Uploaded palm photos: never stored — the image is used for that one reading and discarded.
• Abuse-protection records containing your IP: at most 30 days.
• Purchase records: as long as tax law requires us to keep them.
• Written reports, palm readings and tarot spreads: 12 months, then deleted; readings nobody paid for are deleted after 7 days.
• Daily-line sign-ups: unconfirmed sign-ups are deleted after 7 days; confirmed ones until you unsubscribe — unsubscribing deletes your address immediately.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing. Email automaty.partner@gmail.com and we will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

Cookies

We use one strictly necessary cookie to keep your session and credits, and one to limit the free daily roast to once per day. No advertising or tracking cookies, so no consent banner is required.