Privacy Policy

The controller of your personal data is KANAJ Kacper Najda, VAT PL7123474673, ul. Reymonta 4, 21-040 Świdnik, Poland. For matters concerning personal data, write to: [email protected].

Depending on how you use the service, we process:

• email address - provided when buying a reading or in the free reading,
• first name - if you provide it in the free reading, we use it to personalize the message,
• phone number - optional, only if you provide it yourself; it is not required to use the service,
• the content of your question - necessary to prepare the interpretation,
• payment data - processed directly by Stripe; we have no access to your card details,
• IP address - recorded with the free reading to prevent abuse (legitimate interest),
• analytics and marketing data (cookie identifiers, on-site events, advertising identifiers) - only after you give consent in the cookie banner.

• delivering the purchased reading and sending a copy by email - Art. 6(1)(b) GDPR (performance of a contract),
• sending the free reading together with a one-time discount code - Art. 6(1)(b) GDPR (performance of the requested service),
• handling complaints, refunds, and the satisfaction guarantee - Art. 6(1)(b) and (f) GDPR,
• tax and accounting settlements - Art. 6(1)(c) GDPR (legal obligation),
• preventing abuse (e.g. claiming the free reading multiple times) - Art. 6(1)(f) GDPR,
• analytics and improving the service - Art. 6(1)(a) GDPR (your consent in the cookie banner),
• marketing and advertising, including advertising pixels (TikTok, Google Ads) and sending marketing messages by email/SMS - Art. 6(1)(a) GDPR (your consent); you can withdraw your consent at any time.

We use the services of trusted processors:

• Stripe Payments Europe, Ltd. (Ireland) - payment processing,
• Supabase (EU region) - the service database,
• Anthropic (USA) - generating interpretations; only the content of your question reaches the AI model, never your email or payment data,
• Resend (USA) - sending emails,
• PostHog (EU region) - product analytics (with consent),
• Google Ireland Ltd. (GA4) and Microsoft (Clarity) - analytics and statistics (with consent),
• TikTok Technology Limited (Ireland) - advertising pixel and ad conversion measurement; with marketing consent, we pass an irreversibly hashed email address and an ad click identifier, for the purpose of matching and optimizing campaigns (with consent).
• Transfers outside the EEA (including to the USA) take place on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission.

• purchase data (email, question, reading) - for the period required by tax law (5 years from the end of the tax year),
• free reading data - up to 12 months or until consent is withdrawn,
• analytics data - in line with the tools' settings, up to 14 months at most.

You have the right to: access your data, rectify it, erase it, restrict its processing, port it, object to processing, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise your rights, write to [email protected]. You also have the right to lodge a complaint with your data protection supervisory authority.

The service uses necessary cookies (maintaining the session, payment security) and - only with your consent - analytics cookies (PostHog, Google Analytics, Microsoft Clarity).

You can give or withdraw consent in the cookie banner. You can also delete cookies in your browser settings.

This policy may be updated, for example when the tools we use change. The current version is always available at revealthecards.com/privacy.