LEGAL

Privacy Policy

We collect only what we need to prepare your report and to remember who bought it: your email, the information you submit in the intake form, your purchase metadata, and minimal analytics.

Child data

The report is about a child, but the adult parent/guardian is the data subject on record. We treat the child's full name at birth as sensitive PII and encrypt it at rest using AES-256-GCM in addition to Supabase's platform encryption. We do not share, sell, or reuse intake data for any purpose beyond preparing this one report.

Your rights

You can request a full export of your data or its deletion at any time by writing to privacy@oraclerealm.com. We respond within 30 days.

Retention

Rendered PDFs are retained for seven years for tax-record purposes. Raw intake data is deleted two years after delivery. Analytics identifiers are scrubbed after 30 days.

Processors

We use Supabase (database + storage, EU/US), Stripe (payments), Resend (email), Anthropic (report generation), astrologyapi.com (astrology placements), and Cloudflare (bot protection). Each is bound by data-processing agreements.