Privacy and data retention

What we process and why

An account uses your email address, password hash, preferred language and, if you choose to provide it, your name. We use these to authenticate you, verify your email, recover access and provide your account. The basis is providing the service you request.

Saved readings include the question and topic you supply, selected cards, positions and orientations, saved meanings, notes and any requested AI conversation. We process this content to save and display your journal and provide the features you request. Saving is an explicit action; creating an account does not automatically save a guest reading.

Technical information can include IP address, browser information, session identifiers, request timing, security events and limited usage or credit records. We use it to operate the website, prevent misuse, reconcile responses and protect accounts, based on our legitimate interests in a secure and reliable service. Statutory financial records are processed to meet legal obligations.

Do not put passwords, payment card details, confidential information about other people, or sensitive personal information such as health information or religious beliefs into a reading or AI question. Such information is not needed to use Taroselia.

Optional AI and OpenAI

An AI request sends OpenAI the relevant reading question and topic, selected cards, their positions, orientations and saved meanings, and the selected response language. A follow-up also includes your new question, a summary of the first answer and up to six recent completed exchanges. Long or older context may be shortened or omitted.

Private journal notes, your account email, password and unrelated readings are not included in the AI prompt. AI is optional; ordinary reading methods and card explanations do not require an AI request.

We request that Responses API output is not stored as application state. This is not zero retention: OpenAI documents separate abuse-monitoring retention, ordinarily up to 30 days, with exceptions. API data is not used to train models by default. Read the linked OpenAI data controls for the provider rules and available exceptions.

AI answers can be inaccurate. They are reflective suggestions, not decisions about your legal rights, health, finances or access to services. Taroselia does not use these answers to make legally significant automated decisions about you.

Suppliers, disclosures and international processing

Authorized hosting, database, email and support suppliers process the information needed to run their part of the service. OpenAI receives the context of an AI request. If purchases are enabled, Stripe processes the information entered on its hosted checkout and may act as a controller for its own payment, fraud-prevention and regulatory purposes. Taroselia does not collect complete payment card numbers.

Information may also be disclosed where legally required, to respond to a valid authority request or to establish and defend legal claims. We do not sell your journal or use it for advertising.

Suppliers may process data outside the European Economic Area. Applicable transfers require an adequacy decision or another valid safeguard, such as the European Commission standard contractual clauses. Contact contact@taroselia.com for the relevant recipients, countries and safeguard information. Supplier contracts and transfer arrangements must be in place before the corresponding production service is activated.

How long information is kept

Unsaved reading drafts are kept in tab storage, when available, with a two-hour application expiry. Expiry is checked when Taroselia accesses the draft; it is not a promise that the browser physically erases storage at that exact moment. You can reset the draft or clear the tab storage. Completing or validating a reading sends its relevant inputs to the server for processing, but does not create a saved journal entry without your explicit save action.

Account details remain while you maintain an account. Saved readings, notes and stored AI requests and answers remain until you delete the reading or account. Account deletion removes live private journal, AI and wallet records and invalidates database sessions and reset tokens. Deleting a completed reading does not reverse a completed credit charge.

Deletion does not erase records we must keep for accounting, security or legal claims. Minimal order, payment-event and budget-accounting records can remain with the account link removed; this does not necessarily make provider identifiers anonymous. Public editorial audit evidence can remain without the deleted account reference.

Applicable Romanian accounting books and supporting documents generally have a five-year statutory retention period calculated from 1 July of the year following the relevant financial year. A legal hold can require longer preservation of relevant records. This does not justify retaining private journal text for accounting.

Security logs, support correspondence and operational records are retained according to their purpose: incident investigation, handling your request, enforcing usage limits or resolving a dispute. They should be minimized or deleted when no longer needed, subject to legal obligations. Backup copies follow the hosting backup cycle and may remain after live deletion; restored systems must reapply deletion decisions before normal use. Production backup retention is confirmed before launch.

Cookies and browser storage

Taroselia uses essential session and security cookies for sign-in and request protection, and browser storage for your chosen language and temporary reading draft. The normal session idle lifetime is two hours; choosing to remember sign-in can last longer. You can manage cookies and storage in your browser, but blocking essential storage may stop sign-in or draft restoration.

Advertising trackers and optional analytics cookies are not currently used. If optional tracking is introduced, the privacy information and any required consent controls must be updated before it is activated.

Your choices and rights

You can edit notes and supported profile details, export your account and journal information, delete a reading, or delete your account. Contact contact@taroselia.com for access, correction, erasure, restriction, portability where applicable, an objection to legitimate-interest processing, or help correcting an account email address. Rights have legal conditions and exceptions; we may need proportionate identity verification.

We respond without undue delay, normally within one month. If an extension is legally justified because a request is complex or numerous, we explain it within that month. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

You may complain to ANSPDCP in Romania or another competent supervisory authority, including in the EU country where you live or work. Contacting us first does not remove your right to complain. The authority link below explains how to submit a complaint.

Changes to this notice

We identify changes with a new policy version. A significant change to how we use your information requires updated information before the new use and, where necessary, a new choice or consent. This notice does not authorize unrelated future uses of your private content.