Privacy Policy

1. Introduction

MysticSeek ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at www.mysticseek.com (the "Services").

Please read this Privacy Policy carefully. By using the Services, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide, including:

• Account Information: Email address, display name, profile picture (if using social login)
• Birth Data: Date, time, and location of birth (for astrological calculations)
• Payment Information: Processed securely through PayPal (we do not store card details)
• Communication Data: Messages sent to our support team
• User Content: Dreams you submit for interpretation, questions for divination

2.2 Information Collected Automatically

When you access our Services, we automatically collect:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, features used, time spent on the site
• Log Data: IP address, access times, referring URLs
• Cookies and Similar Technologies: Session data, preferences, authentication tokens

2.3 Information from Third Parties

If you sign in using Google or other social login providers, we may receive your public profile information (name, email, profile picture) as authorized by your privacy settings on those platforms.

3. How We Use Your Information

We use the collected information to:

• Provide Services: Generate personalized readings and analyses based on your birth data
• Process Transactions: Complete purchases and manage subscriptions
• Improve Services: Analyze usage patterns to enhance user experience
• Communicate: Send service updates, respond to inquiries, provide customer support
• Personalization: Remember your preferences and chat history
• Security: Detect and prevent fraud, abuse, and unauthorized access
• Legal Compliance: Comply with applicable laws and regulations

4. Data Storage and Security

4.1 Where We Store Data

• User Accounts: Firebase Authentication (Google Cloud)
• Report History: Browser localStorage (stored locally on your device)
• Chat History: Upstash Redis (encrypted cloud storage with 90-day retention)
• Analytics: Anonymized usage data

4.2 Security Measures

We implement industry-standard security measures including:

• HTTPS encryption for all data transmission
• Secure authentication via Firebase
• Regular security audits and updates
• Access controls and authentication for administrative functions
• No storage of payment card details on our servers

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

5.1 Service Providers

• Vercel: Website hosting and serverless functions
• Firebase (Google): Authentication services
• PayPal: Payment processing
• Upstash: Redis database for chat history
• DeepSeek/Google: AI model providers for generating readings

5.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, safety, or property.

6. AI Processing of Your Data

Our readings are generated using large language models (AI). When you request a reading:

• Your birth data and questions are sent to AI providers (DeepSeek/Google Gemini) for processing
• AI providers process this data according to their privacy policies
• Generated readings are returned to you and may be stored in your history
• We do not use your personal readings to train AI models

For more information, please review DeepSeek's Privacy Policy and Google's Privacy Policy.

7. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Authentication, session management, security
• Preference Cookies: Theme settings, language preferences
• Analytics Cookies: Understanding how users interact with our Services

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Services.

8. Your Privacy Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing

To exercise these rights, please contact us at support@mysticseek.com. We will respond within 30 days.

9. Data Retention

• Account Data: Retained while your account is active
• Report History: Stored in your browser's localStorage until you clear it
• Chat History: Automatically deleted after 90 days of inactivity
• Payment Records: Retained as required for legal and accounting purposes

You can delete your account and associated data at any time by contacting us.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Services, you consent to such transfers. We take appropriate safeguards to ensure your data remains protected.

12. Regional Privacy Rights

12.1 European Users (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR including the right to lodge a complaint with your local supervisory authority.

12.2 California Users (CCPA)

California residents have the right to know what personal information we collect, request deletion, and opt-out of the sale of personal information. We do not sell personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: