Privacy Policy

1. Information We Collect

Information you provide for a reading

When you use Soulena, you may provide:

• a question you would like the reading to explore;
• optional background or situational context;
• your preferred reading tone; and
• other information you voluntarily include in your question or context.

Please avoid including information that you do not want processed as part of your reading.

Tarot questions can sometimes contain personal or sensitive information about relationships, work, emotions, family, or other life circumstances. You decide what information to provide.

If you choose to include information about your health, sex life or sexual orientation, religious or philosophical beliefs, or other sensitive matters, we process it only to create and display your reading, and only because you chose to provide it after being told, before you continue, that your question and context are processed by our AI providers. You can withdraw that consent and ask us to delete it at any time by contacting us.

Birth details for an optional birth chart

If you choose to add your birth chart to a reading, you provide your date of birth, the city you were born in, and, if you know it, your local time of birth and how certain you are of it.

We use these details only to calculate your chart, and we do not store your birth date, time, or city. We store the calculated chart (the positions of the Sun, Moon, and planets and, when your birth time allows, your Rising sign and houses) with your reading so it can be shown again. Because the positions in a chart can indicate roughly when you were born, we treat the calculated chart as part of your reading.

Birthplaces are looked up in a city list that is part of Soulena, so your search does not leave our servers. The list is based on GeoNames data (geonames.org), licensed under CC BY 4.0. Birth details and chart positions are not included in analytics or advertising measurement.

Reading information

We process and store information needed to create and display your reading, which may include:

• the tarot cards selected for your reading;
• technical information used to reproduce the card draw;
• the generated reading;
• reading identifiers;
• generation status; and
• information about whether premium access has been purchased.

Soulena selects tarot cards through its own application logic. Artificial intelligence does not choose the cards.

Purchase information

If you purchase a reading, the order is processed by Dodo Payments, our online reseller and Merchant of Record. Dodo Payments is the seller of record for the transaction and handles payment processing, billing, and sales tax or VAT.

Dodo Payments may collect information such as your:

• email address;
• name and billing address details, such as your country and postal code, which are used to calculate tax;
• payment method information; and
• transaction information.

Soulena receives information from Dodo Payments that is necessary to confirm the purchase and provide access to the reading. Soulena does not receive your full card number.

Soulena currently stores the purchaser email address associated with a successful purchase so we can help restore or identify a purchase if you lose access.

Soulena does not store your complete payment card number in its application database.

Usage and analytics information

Soulena uses first-party analytics to understand how people use the service and whether the product is functioning effectively.

This may include events such as:

• beginning the reading experience;
• completing different stages of the reading;
• the general intent category inferred by the system;
• whether optional context was provided;
• whether you added or skipped the optional birth chart;
• using the chapter-sharing options, and whether preparing, sharing, or copying them failed;
• rating a reading with the optional feedback buttons;
• viewing your list of earlier readings;
• how quickly pages load and respond on your device;
• reaching the purchase screen; and
• completing a purchase.

Each event also records the general type of device and browser you are using, such as “iPhone” and “Instagram’s in-app browser,” so we can find problems that affect particular devices. This is derived from your browser’s user agent; we do not store the user agent itself.

Your actual tarot question and optional context are not included in Soulena’s analytics events.

We may also process ordinary technical information associated with use of an online service, such as session identifiers, timestamps, request information, and information needed to prevent abuse or diagnose technical problems.

If you arrive through a link that carries campaign tags (such as “utm” parameters) or a Meta click identifier, we store them with your session so we can tell which campaigns lead to readings and purchases.

Advertising measurement

Soulena advertises on Meta platforms, including Facebook and Instagram, and uses Meta’s measurement tools to understand which advertising leads to purchases.

This works in two ways:

• the Meta Pixel, a script that runs in your browser and reports a small number of events to Meta: viewing a page, reaching the purchase screen, starting checkout, and completing a purchase; and
• Meta’s Conversions API, which reports a completed purchase from our server, so that a purchase is still measured when the Pixel is unavailable or blocked.

Both reports of the same purchase carry a shared identifier, so that one purchase is counted once rather than twice.

Information sent to Meta may include:

• the event and the time it happened;
• the price and currency of the purchase;
• Meta’s own advertising cookie identifiers and the Meta click identifier from the advertisement you arrived through;
• your browser’s user agent;
• the address of the page you were on, which never identifies an individual reading; and
• for a purchase, a cryptographically hashed version of your email address and of your anonymous session identifier.

Your tarot question, your optional context, the cards drawn, and your reading are never sent to Meta. The Meta Pixel does not run on the page where a reading is shown, and neither the Pixel nor the Conversions API is given the web address of an individual reading. Your email address is never sent to Meta in readable form.

About your IP address. Our server does not send Meta your IP address. The Meta Pixel is a script that runs in your browser and connects to Meta directly, and any connection your browser makes to another company necessarily reveals your device’s IP address to that company. We cannot prevent that, and we would rather say so than imply otherwise.

If your browser sends a Global Privacy Control or Do Not Track signal, we do not load the Meta Pixel at all for you: no script, no advertising cookies, and no events. We also do not load the Meta Pixel, or report your purchase to Meta, if you visit from the European Union, the rest of the European Economic Area, the United Kingdom, or Switzerland, or from a location we cannot determine.

Meta processes the information it receives for its own advertising purposes and under its own policies.

2. How We Use Information

We use information to:

• create your tarot reading;
• personalize the interpretation to your question and optional context;
• display and restore your reading;
• determine whether you have purchased access to premium content;
• process and verify purchases;
• respond to customer-support requests;
• investigate duplicate charges, lost purchases, fraud, or payment disputes;
• maintain the security and reliability of Soulena;
• diagnose errors;
• understand product usage and conversion;
• measure the effectiveness of our advertising;
• control AI usage and operating costs;
• improve Soulena; and
• comply with applicable legal obligations.

We do not use your tarot question or situational context as advertising analytics data.

Legal bases

Where the law requires a legal basis for processing personal information, including Thailand’s Personal Data Protection Act and the EU and UK GDPR, we rely on:

• providing the service you ask for (contract): creating, displaying, and restoring your reading, and processing and supporting your purchase;
• your consent: for sensitive information you choose to include in your question or context, and for advertising cookies where the law requires consent;
• our legitimate interests: keeping Soulena secure, preventing fraud and abuse, diagnosing errors, understanding product usage, and measuring advertising where consent is not required; and
• legal obligations: keeping purchase records for accounting, tax, and other legal requirements.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that happened before it.

3. Artificial Intelligence

Soulena uses artificial-intelligence services to generate portions of personalized readings.

Information needed to generate a reading, including your question, optional context, selected cards, and relevant reading instructions, may be transmitted to third-party AI infrastructure.

Soulena currently uses OpenRouter as an AI routing service. OpenRouter may route requests to underlying AI model providers.

If you add a birth chart, the AI receives the calculated chart positions relevant to your reading, never your birth date, time, or city.

The specific provider used to process a request may vary depending on Soulena’s technical configuration and service availability.

Different AI providers may have different data-processing and retention practices. Soulena seeks to minimize the personal information included in AI requests and will evaluate provider privacy practices when configuring AI services.

You should not submit highly confidential information, passwords, financial account numbers, government identification numbers, medical records, or other information that is unnecessary for a tarot reading.

4. Payments

Purchases are processed by Dodo Payments, our online reseller and Merchant of Record.

Dodo Payments and its payment partners process payment information under their own privacy and security practices. Soulena receives transaction information necessary to confirm your purchase, provide access, provide customer support, and respond to payment disputes.

We do not sell your payment information.

5. Cookies and Session Information

Soulena may use cookies or similar technologies that are necessary to:

• maintain your session;
• associate your browser with your reading;
• recognize your browser when you return, so the readings you started and bought here stay available to you;
• determine whether premium content is available to you;
• maintain security; and
• provide basic first-party analytics.

Soulena’s product analytics remain first-party: they do not rely on a third-party client-side analytics SDK.

Soulena also uses advertising cookies set by the Meta Pixel. These identify your browser and the advertisement you arrived through, and they support the advertising measurement described in Section 1. They are not necessary in order to use Soulena.

Where applicable law requires consent before advertising or similar tracking technologies are used, we will obtain that consent before enabling them for visitors in the jurisdictions concerned.

If we later introduce further advertising technologies or third-party analytics, this Privacy Policy and any required consent mechanisms will be updated before those technologies are enabled.

6. How We Share Information

We may share information with service providers when reasonably necessary to operate Soulena.

These may include:

• Dodo Payments, our online reseller and Merchant of Record, and its payment partners, for checkout, payment processing, and tax;
• OpenRouter, for AI routing and processing;
• underlying AI model providers used through OpenRouter;
• Meta, for advertising measurement and attribution, as described in Section 1;
• Cloudflare, for protecting reading requests from automated abuse, as described in Section 11;
• Render, which hosts Soulena’s application and database in the United States;
• email providers that carry and store the messages you send to our support address;
• other hosting, infrastructure, security, and error-monitoring providers; and
• professional advisers or authorities where reasonably required by law.

We do not sell your tarot question or reading context.

We may disclose information if we reasonably believe disclosure is necessary to:

• comply with applicable law or a valid legal process;
• protect Soulena, our users, or others;
• detect or prevent fraud, abuse, or security incidents; or
• establish, exercise, or defend legal claims.

7. International Processing

Soulena is operated from Thailand and uses service providers that may process information in other countries, including the United States.

As a result, information may be transferred to and processed in countries whose privacy laws differ from those where you live.

Where required by applicable law, we will take appropriate measures relating to international transfers of personal information.

8. Data Retention

We aim to keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Our intended retention approach is:

• Tarot questions, optional context, calculated birth charts, and generated readings: ordinarily up to 12 months after creation, unless deleted earlier or reasonably required for an ongoing support, security, payment, or legal matter.
• Session and temporary technical information: retained only as long as reasonably necessary for operation, security, abuse prevention, and troubleshooting.
• Purchase records and purchaser email addresses: retained for customer support, payment disputes, fraud prevention, accounting, tax, and other applicable legal requirements.
• Analytics information: may be retained in aggregated or non-content form for product and business analysis.
• Advertising measurement information shared with Meta: retained by Meta under Meta’s own policies, which we do not control.

When information is no longer reasonably required, we may delete, anonymize, or aggregate it, subject to applicable legal obligations.

9. Your Choices and Privacy Rights

Depending on where you live, you may have rights concerning your personal information, which can include rights to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion;
• object to or restrict certain processing;
• withdraw consent you have given;
• receive a copy of information you provided, in a portable format;
• request information about how your data is used or disclosed; or
• exercise other rights provided by applicable law.

To make a request, contact [email protected]. We aim to respond to requests within 30 days.

Because Soulena currently does not require an account, we may need information such as your purchaser email address, reading link, transaction information, or other reasonable information to identify the relevant data and verify the request.

You can also limit advertising measurement independently of us, through your browser’s cookie settings, your device’s advertising settings, and the ad preferences Meta provides for its own platforms.

We may retain certain information even after a deletion request when reasonably necessary or legally required for purposes such as accounting, fraud prevention, payment disputes, security, or compliance with law.

If you believe we have handled your personal information unlawfully, you may also complain to a data protection authority: in Thailand, the Personal Data Protection Committee, or the authority where you live. We would appreciate the chance to address your concern first.

10. Children

Soulena is intended only for people who are 18 years of age or older.

If you are under 18, you may not use or purchase Soulena’s services.

If we become aware that we have collected personal information from a person who is not permitted to use the service, we may delete that information as appropriate.

11. Security

We use reasonable technical and organizational measures intended to protect information processed through Soulena.

To stop automated traffic from using up readings, we use Cloudflare Turnstile when you request a reading. Turnstile runs a short check in your browser, usually without asking you to do anything, and occasionally asks you to confirm that you are a person. To do this, Cloudflare receives technical information about your browser and device, including your IP address, and processes it under its own privacy policy. Turnstile is not given your tarot question, your optional context, or your reading.

However, no online service, storage system, or transmission method can be guaranteed to be completely secure.

12. Third-Party Services

Soulena may contain links to or integrate with third-party services.

Those services operate under their own terms and privacy policies. We are not responsible for the privacy practices of third parties that are outside Soulena’s control.

13. Changes to This Privacy Policy

We may update this Privacy Policy as Soulena changes.

When we make material changes, we will update the “Last Updated” date and provide additional notice where required by applicable law.

14. Contact

For privacy questions, deletion requests, or other concerns:

Soulena, operated by Pongpich Singhagumpon, an individual based in Thailand.

Email: [email protected]