Privacy policy

1. Data controller

OPEN YOUR MIND, LLC. You can reach the team through the contact form.

2. Data we use

• Account information includes your first name, email address, hashed password, and sessions.
• Legal records include your declaration that you are an adult and the date and version of the terms you accept. For a purchase, they also include the wording of the sales agreements and any request to start service immediately.
• Your optional profile may include birth information, city, personal situation, and preferred topics.
• Readings include questions, responses, conversation history, tarot, and any memory settings you choose.
• Optional voice features use audio and recognized text through your browser’s dictation service. For read-aloud, the response text is sent to your browser’s voice feature.
• When payment is available, we use Stripe references, the offer and amount, purchases, subscriptions, credit balances, and records of credits added, used, restored, and refunded. We do not use full card details.
• After a sale, we keep a copy of your order terms and a confirmation you can save. For a withdrawal, we use your first and last name, the order, the address selected for the receipt, your notice, its date and time, and the acknowledgment.
• Order email data includes the recipient, confirmation text, contract attachment, and technical status of acceptance by the provider. It does not include conversation content.
• Contact form data includes your reply address, the message, and its technical delivery status.
• Security information includes technical logs and non-reversible fingerprints of your device and IP address.
• Internal measurement uses limited usage events without private conversation content.
• Optional audience measurement uses cookies, pseudonymous identifiers, public pages viewed, and technical browsing information with your consent.

3. Why we process your data

• We create your account and provide readings to deliver the service you requested.
• We keep a record of the accepted terms and the adult-only requirement to provide the service and pursue our legitimate interests.
• When you use the preference memory feature, we store your preferences to provide the service.
• We protect accounts and prevent abuse of the free offer in our legitimate interests.
• We send verification and security messages to provide the service.
• We manage payments and accounting to perform the contract and meet legal obligations.
• We calculate available credits and correct deductions when a request fails to perform the contract.
• We confirm orders, keep accepted terms, and record and acknowledge withdrawals to perform the contract, comply with legal obligations, and retain proportionate evidence for complaints.
• We handle and respond to contact requests and protect the form from abuse in our legitimate interests.
• We measure and improve the service in our legitimate interests, using only the data needed.
• We measure visits to public pages through Google Analytics with your consent, which you can withdraw at any time.

4. Service providers

We may share necessary data with Vercel for hosting, Prisma Postgres for the database, OpenAI for generating responses, Resend for emails, and Stripe for payments once enabled. OpenAI receives only the context needed to answer. Storage of text responses is disabled in API calls. Some US providers may involve transfers outside the European Economic Area, subject to contractual mechanisms and applicable safeguards.

For order confirmations and requested acknowledgments, Resend receives the recipient’s address and the information needed to send the email. This includes the order reference, offer, quantity, amount, currency, dates, and copies of the agreements and contract terms. If you use the withdrawal form, the acknowledgment includes your name and withdrawal notice. Voyancea does not send chat messages or full card details to Resend for these emails. They concern your contract and its follow-up and do not sign you up for a newsletter or marketing.

Contact form messages are sent to the Voyancea team through Resend. We use the reply address and message content to handle your request.

The chat’s voice features use your browser or device services when you turn them on. Depending on how those services work, the provider may process dictated audio or the text that is read out under its own privacy and retention rules. Dictation does not necessarily run only on your device. Voyancea does not receive or keep an audio file in this flow. In simple dictation, only the text you choose to send becomes part of the conversation. When you start a voice conversation, recognized speech is sent automatically after a pause and the microphone reopens after the response. You turn this feature on separately. It stops when you select Stop, an error occurs, or you leave or hide the screen. Text sent this way is saved in your history like other messages. When available, playback prefers a local voice for the selected language.

With your consent, Google Analytics 4 receives the data needed to measure public pages. It uses pseudonymous identifiers rather than fully anonymous data, and Google receives network information when requests are made. This integration does not send reading content, account data, or payments. Google may process data outside the European Union. See Google’s privacy policy and data processing terms.

5. Retention periods

• We keep account, conversation, and memory data until the account is deleted.
• Voyancea does not receive or keep voice chat audio files. The browser’s voice service processes audio according to its provider’s rules.
• We keep billing data, credit activity, and order records for the periods required by applicable obligations and to handle complaints. The saved contract reflects the order even if the site terms later change.
• We retain withdrawal notices and acknowledgments as long as needed to process the request and protect the relevant rights.
• We keep contact messages for the time needed to handle and follow up on your request.
• We keep security logs as long as needed for security and incident handling.
• We keep the device fingerprint to prevent repeated claims of the introductory offer without retaining the raw identifier.
• Google measurement cookies and your choice are kept for up to 180 days, without automatic renewal. Individual events are kept for two months according to the property’s settings, separately from aggregate reports.

Deleting your account erases or anonymizes usage data and conversations. Necessary financial and contractual records may be retained with restricted access for accounting obligations or disputes. Examples include payment references, accepted terms, and a withdrawal notice you already submitted. These records cannot reactivate your account or restore your conversations. Data prepared for an abandoned purchase and email copies that are no longer needed are deleted or reduced.

6. Your rights

From your account, you can access your information, correct your profile, export your data, and delete the account. Depending on the circumstances, you may also have rights to rectification, erasure, restriction, objection, and portability. You can submit a complaint to the CNIL.

7. Cookies and local storage

Necessary cookies support sign-in, security, abuse prevention, and your cookie choice. Google Analytics is loaded only with your consent. You can accept or decline audience measurement and still use the site. You can later withdraw your choice with the cookie management control where it is available. Withdrawing stops tracking and removes Voyancea’s measurement cookies on this device. It does not delete measurement data Google already received.

Measurement is limited to eligible public pages on the homepage, blog, published articles, and pricing. It excludes sign-in, sign-up, readings, account, and payment pages. URL parameters and fragments are not sent. Enhanced measurement, Google signals, and advertising features are disabled. The integration does not set advertising cookies.