Privacy Policy

1. Who we are

SoulRoot is operated by SoulRoot LLC. You can reach us any time at hello@soulroot.co.

2. Information we collect

Information you give us

• Reading details: the name, birth date, birth time, and birth place (and optional Hebrew name) you enter to generate a reading.
• Account details: your email address, and your name if you choose to provide it, when you sign in.
• Payment details: when you buy a reading or subscription, payment is processed by Stripe. We receive confirmation and limited billing information. We never see or store your full card number.
• Messages: anything you send us, for example when you email us.

Information collected automatically

• Usage and device data: pages visited, approximate location, and browser and device type, collected with your consent (see Cookies and analytics).

Information we generate

• Your readings: the chart and written reading we create from the details you provide.

3. How we use your information

• To generate and deliver your readings and run your account.
• To process payments and manage subscriptions.
• To send you service messages such as sign-in links, receipts, and your reading.
• To send optional updates only if you opt in, which you can stop at any time.
• To maintain security, prevent abuse, and comply with the law.
• To understand and improve the service.

4. How readings are created (AI)

Readings are generated using a third-party AI provider (Anthropic) from the details you enter. Some tiers are reviewed by a person before delivery. Your inputs are processed to produce your reading and are not used to train third-party models.

5. Cookies and analytics

We use a small number of essential cookies to run the site. With your consent, given through the banner shown on your first visit, we also use Google Analytics to understand traffic. If you decline, analytics cookies are not set. You can change your choice by clearing the site data in your browser.

6. Who we share information with

We do not sell your personal information. We share it only with the service providers that help us run SoulRoot, each under their own terms:

• Supabase: database and authentication
• Stripe: payment processing
• Google: sign-in and, with consent, analytics
• Anthropic: AI generation of readings
• Resend: email delivery
• Vercel: website hosting

We may also disclose information if required by law, or to protect our rights, our users, or the public.

7. Data retention

We keep your account information and readings for as long as your account is active or as needed to provide the service, and as required for legal, tax, or security reasons. You can ask us to delete your data (see Your rights and choices).

8. Your rights and choices

Depending on where you live, including the EU and UK under the GDPR and California under the CCPA and CPRA, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To make a request, email hello@soulroot.co. You can opt out of optional email at any time using the unsubscribe link or by emailing us. We do not sell or share personal information for cross-context behavioral advertising.

9. Security

We use reputable providers and reasonable safeguards to protect your information. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

10. Children

SoulRoot is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

11. International users

SoulRoot is operated from the United States. If you access it from elsewhere, your information may be processed in the United States and other countries where our providers operate.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the date above.

13. Contact

SoulRoot LLC. Email hello@soulroot.co.