Privacy
What is kept, and what is dropped.
Tao Reading is operated by Andy. Questions about this notice can go to hello@taoreading.com. The public site address is the SITE_URL value, currently aimed at taoreading.oppus.cc. taoreading.com is only a possible later name.
Purpose. Readings are entertainment and cultural study. Accounts exist so you can save history, export it, and delete it. Payments exist to unlock a deep reading or a subscription. Analytics count visits and a few named events. They do not receive dream text, questions, intentions, or photographs.
Photographs. Palm and face pictures are resized in your browser. If you upload one, it is sent for that reading and then discarded. It is not written to the database, not written to object storage, and not kept to train a model by this site. The share card is a diagram we generate. A vision provider, if you configure one, receives the image for the request; choose a provider whose terms match that limit. The mock provider never leaves the machine.
Retention. Saved readings, including dream text you chose to store by being signed in, stay until you delete the account or we must remove them to operate the service. Magic links expire after 30 minutes. Sessions last 30 days. Payment event ids are kept so a webhook is not applied twice; account deletion scrubs payloads that contain your user id. Waitlist emails for charms are kept until you ask for removal or delete an account with the same address.
Deletion and export. The account page exports a JSON file of the user, readings, entitlements, and checkouts, and deletes the account. Anonymous free use stores only a cookie and a daily counter, not the content of the reading.
This notice is a product statement for the MVP, not a substitute for counsel in your jurisdiction.