Privacy Policy

1. Scope and who controls your data

This Privacy Policy explains how Pho Go Tarot (also displayed as “Phở Gõ Tarot,” “we,” “us,” or “our”) collects, uses, discloses and protects personal information when you visit phogotarot.com, create an account, purchase Credits or Premium access, request a reading, contact us, or otherwise use our services.

For purposes of applicable privacy laws, Pho Go Tarot is the controller or business responsible for the personal information described here. We operate from Binh Thanh District, Ho Chi Minh City, Vietnam. Privacy requests may be sent to contact@phogotarot.com.

2. Information we collect

• Account and identity data: name, email address, profile image, authentication identifiers and account status.
• Profile and reading data: optional birth date, gender, location, occupation, relationship status, recent events, questions, selected cards, reading results, feedback and conversation history that you choose to provide.
• Transaction data: package, amount, currency, payment status, transaction reference and fraud-prevention signals. We do not intend to store complete payment-card numbers or banking credentials.
• Contact and booking data: name, email, phone number, birth year, social handle, message and booking details.
• Technical and usage data: IP address, browser and device information, timestamps, pages viewed, feature activity, cookies, advertising identifiers, approximate location derived from IP and diagnostic logs.
• Information from third parties: authentication providers, payment providers, analytics or advertising partners, and service providers where permitted by their terms and applicable law.

3. How and why we use information

We process personal information only when we have an applicable legal basis, which may include performing our contract with you, your consent, compliance with law, or our legitimate interests where those interests are not overridden by your rights.

• Provide accounts, readings, saved history, Credits, Premium features, bookings and customer support.
• Personalize a reading using information and context you intentionally provide.
• Process transactions, maintain accounting records, prevent abuse, enforce service limits and investigate fraud or security incidents.
• Operate, secure, troubleshoot, analyze and improve the website and AI-assisted features.
• Send service communications and, where permitted, marketing communications that you may unsubscribe from at any time.
• Comply with legal obligations and establish, exercise or defend legal claims.

4. Tarot questions and artificial intelligence

Questions submitted for AI-assisted readings may reveal personal or emotionally sensitive circumstances. Please do not submit government identifiers, payment credentials, medical records, passwords, information about minors, or another person’s confidential information.

We may send the question, relevant profile context, selected cards and limited conversation history to AI infrastructure or model providers acting as service providers. AI output is generated automatically for entertainment and reflection; it is not used by us to make decisions that produce legal or similarly significant effects about you.

5. How we disclose information

We may disclose information to vendors that help us host, authenticate, analyze, communicate, process payments, prevent fraud, provide AI functionality or display advertising. These providers may include Cloudflare, Supabase, Google services, payment partners, email providers and AI infrastructure providers, depending on the feature used. We may also disclose information when required by law, to protect rights and safety, in connection with a business transfer, or at your direction.

6. Cookies, analytics and advertising

We and our partners may use cookies, pixels, local storage and similar technologies for essential operation, security, preferences, analytics and advertising. We do not sell personal information for money. Some advertising or analytics disclosures may nevertheless be treated as a “sale,” “sharing,” or targeted advertising under certain laws.

Where required, we will provide consent or opt-out controls. You may also limit cookies through your browser. Blocking essential storage may prevent login, saved readings or other features from working. If applicable law gives effect to a recognized opt-out preference signal, such as Global Privacy Control, we will treat that signal as required by that law.

7. Retention and account deletion

We retain information for as long as reasonably necessary for the purposes described above, including providing your account and reading history, meeting tax and accounting obligations, resolving disputes, enforcing agreements, preventing fraud and maintaining security. Retention periods depend on the type of record, legal requirements and whether the account remains active.

You may use available account controls to delete supported reading history or contact us to request account deletion. We may retain limited records when required by law, necessary to complete a transaction, protect security, prevent repeated abuse, or establish or defend legal claims. Deletion from backups may occur on a delayed cycle.

8. Security and international transfers

We use reasonable administrative, technical and organizational safeguards appropriate to the nature of the information. No internet service can guarantee absolute security, and you are responsible for protecting your login credentials.

Our service providers and systems may process information in Vietnam, the United States and other countries. Where legally required, we rely on recognized transfer mechanisms or other appropriate safeguards. Laws in those countries may differ from those where you live.

9. Your privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to know or access, correct, delete, restrict or object to processing, withdraw consent, receive portable data, opt out of sale/sharing or targeted advertising, limit certain uses of sensitive information, and lodge a complaint with a privacy regulator. We will not unlawfully discriminate against you for exercising a privacy right.

• Submit a request to contact@phogotarot.com using the email associated with your account.
• We may verify your identity and authority before completing a request. Authorized agents may be required to provide proof of authorization.
• We will respond within the period required by applicable law. Some information may be exempt from a request, and we will explain applicable reasons where required.

10. Additional regional disclosures

EEA, United Kingdom and Switzerland: you may contact your local supervisory authority. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Where processing relies on legitimate interests, you may object as provided by law.

California and similar U.S. states: where the relevant law applies to us, residents may request access, deletion or correction and may opt out of sale, sharing or targeted advertising. We do not knowingly use or disclose sensitive personal information for purposes requiring a separate right to limit, except as disclosed and permitted by law.

11. Minors

The services are intended for adults aged 18 and older and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact us so we can investigate and delete it where appropriate.

12. Changes and contact

We may update this Policy to reflect operational, legal or regulatory changes. We will post the revised version and update the date above. Material changes may be communicated by additional notice where required.

Questions and privacy requests: contact@phogotarot.com. Postal location: Binh Thanh District, Ho Chi Minh City, Vietnam.