Privacy Policy

Angelic Oracle ("we", "us", "our") is operated by Soul Tribe AI, LLC and runs the spiritual guidance platform at angelicoracle.io. We are the data controller for the personal information described in this policy.

For any privacy-related questions or requests, please contact us at: kylesuhan@soultribeai.com

We collect only what is necessary to provide the service. The data we collect depends on how you use the platform.

Platform users

Account data: Email address (if you register via email) or Solana wallet address (if you connect a wallet). One or both may be present depending on how you sign up.

Profile data: Birth date and birth location (optional — only if you choose to generate a natal birth chart). Used solely to calculate your astrological chart and personalise readings.

Reading data: Questions you submit, cards drawn, and AI-generated interpretations, saved to your reading history.

Journal entries: Text you write in the Spiritual Journal. Entries are encrypted at rest using AES-256-GCM and never stored as plain text. They are never shared with any third party.

Booking data: If you book a session with a human reader, we collect your name, email address, the scheduled date and time, session duration, any notes you provide for the reader, and payment information (processed by Stripe).

Review data: Star ratings and written reviews you submit about a reader. Reviews become publicly visible on the reader's profile.

Purchase history: Records of lessons, eBooks, session bundles, and gift sessions you have purchased.

Technical data: IP address (used for rate limiting — not stored long-term), browser session tokens (for authentication), and basic usage logs.

Payment data: All card and bank payment details are handled by Stripe. We never see or store your card number, expiry date, or CVV. We receive only a Stripe customer ID and transaction status.

Human readers (marketplace)

If you apply to become a reader on Angelic Oracle, we additionally collect:

Application data: Display name, biography, photo, specialties and modalities, pricing, application notes, and any supporting information you submit.

Availability data: Your weekly availability schedule and timezone.

Stripe Connect data: Your Stripe Express account information (including bank account or debit card details for payouts) is collected and held directly by Stripe under their own privacy policy. We store only your Stripe account ID and onboarding status.

Content: Blog posts, video lessons, and eBooks you publish on the platform.

Earnings data: Records of bookings completed, amounts earned, and payouts processed.

Affiliate partners

If you participate in the affiliate programme, we collect your name, email, referral slug, and conversion records (clicks and purchases attributed to your link).

We use your data to:

• Provide and personalise oracle card readings and astrological interpretations
• Save your reading history and enable revisiting past sessions
• Calculate your natal birth chart when requested
• Process payments and manage subscriptions via Stripe
• Facilitate bookings between users and human readers, including sharing necessary contact information with the relevant reader
• Process reader payouts via Stripe Connect
• Display reader profiles, reviews, and blog content publicly on the platform
• Review reader-submitted blog posts, lessons, and eBooks before publication
• Track loyalty rewards, streaks, and milestones
• Operate the affiliate programme and calculate commissions
• Send transactional emails (booking confirmations, OTP codes, payout notifications, account notices) — no marketing without consent
• Prevent abuse and enforce rate limits
• Analyse aggregate, anonymised usage patterns to improve the platform
• Measure platform traffic using Google Analytics 4 (see Section 5)

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

When you book a session with a human reader, we share the following information with that reader to enable them to provide the service:

• Your name and email address
• The scheduled date and time of the session
• Your session duration and any notes you have provided for the reader

Readers are independent contractors. They agree to our Reader Terms (Section 9 of the Terms of Service) and are prohibited from using your information for any purpose other than delivering the booked session. We are not responsible for how readers handle information outside of what is governed by our platform terms.

When you submit a written review of a reader, your review text and star rating are displayed publicly on that reader's profile. Reviews are not attributed to your name — they appear anonymously unless you have chosen a public display name.

When you request a reading interpretation, the following data is sent to Anthropic's API to generate your response:

• Your reading question
• The oracle cards drawn and their positions
• Birth date and sun sign (if saved and the natal toggle is on)
• Natal birth chart data (if saved and the natal toggle is on)
• Current moon phase and planetary positions (computed locally)

This data is processed by Anthropic to generate your reading. Anthropic's own privacy policy governs how they handle API data. Anthropic states that API inputs and outputs are not used to train their models by default.

You can disable the natal chart toggle on the reading page to prevent your birth chart data from being sent to Anthropic.

We use the following third-party services. Each governs your data under their own privacy policy.

Supabase

Our database and authentication provider. User, reader, and booking data is stored in a Supabase-managed PostgreSQL database hosted on AWS infrastructure. Supabase is SOC 2 compliant.

Stripe

Payment processing for user subscriptions, single purchases, and reader payouts via Stripe Connect. Stripe handles all card and bank account data and is PCI-DSS Level 1 certified. We receive only transaction status and account identifiers.

Anthropic

AI model provider (Claude). Reading prompts are sent to Anthropic's API. See Section 5 for details.

Resend

Transactional email delivery. We use Resend to send booking confirmations, OTP codes, payout notifications, and other account-related emails. Resend processes your email address and the content of those emails on our behalf.

Google Analytics 4

We use Google Analytics 4 ("GA4") to understand how visitors use the platform. GA4 collects anonymised data including pages visited, session duration, and general location (country/region level). It uses cookies and may process your IP address. You can opt out of GA4 tracking by installing the Google Analytics Opt-out Browser Add-on or adjusting your browser's cookie settings.

Solana blockchain

If you connect a wallet, your public wallet address is stored. On-chain transactions (AOC claims, purchases) are public by nature of the blockchain and cannot be deleted.

GeckoTerminal

An embedded price chart on the Tokenomics page is served from GeckoTerminal via iframe. GeckoTerminal's own privacy policy applies to that embed.

Vercel

Our hosting platform. Vercel may collect standard web server logs (IP address, user agent) as part of serving the application.

We use session cookies to keep you logged in. These are essential to the service and cannot be disabled without breaking authentication.

Google Analytics 4 sets cookies to measure traffic and usage patterns. See Section 6 for details and opt-out options.

We do not use advertising cookies, tracking pixels, or retargeting tools.

Your account data is retained for as long as your account is active. If you delete your account, your personal data (email, birthdate, reading history, profile) is deleted from our database. Encrypted journal entries are also deleted.

Reader profile data, published blog posts, and lesson/eBook content are retained for as long as the reader account is active. Upon account closure, public-facing content is unpublished and reader data is deleted within 30 days, except where retention is required for financial records.

Booking records and payment records are retained for 7 years for tax and accounting compliance, even after account deletion.

Some technical logs (rate limiting records, error logs) may be retained for up to 30 days for security purposes, after which they are purged automatically.

On-chain records (AOC transactions, wallet interactions) are permanent by nature of the Solana blockchain and cannot be deleted.

Depending on your jurisdiction, you may have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Correct inaccurate data in your profile
• Erasure — Delete your account and all associated personal data (subject to retention obligations noted in Section 8)
• Portability — Receive your data in a portable format
• Objection — Object to certain types of processing, including analytics
• Withdraw consent — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at kylesuhan@soultribeai.com. We will respond within 30 days.

You can also delete your account directly from your profile settings at any time.

We take reasonable technical and organisational measures to protect your data:

• All data is transmitted over HTTPS (TLS encryption in transit)
• Journal entries are encrypted at rest with AES-256-GCM before storage
• Database access is restricted with row-level security policies (RLS)
• Authentication uses time-limited OTP codes — no passwords stored
• Stripe and Stripe Connect handle all payment and payout data — we have no access to card or bank account details

No system is perfectly secure. If you believe your account has been compromised, please contact us immediately at kylesuhan@soultribeai.com.

The platform is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know — You may request details about the personal information we collect, use, and disclose
• Right to delete — You may request deletion of your personal information, subject to certain exceptions
• Right to opt-out of sale — We do not sell personal information. There is nothing to opt out of.
• Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights

To exercise these rights, please contact us at kylesuhan@soultribeai.com. We will respond within 45 days as required by CCPA.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For significant changes, we will notify registered users by email where possible.

For any privacy questions, data requests, or concerns:

kylesuhan@soultribeai.com

This policy was last updated on 25 May 2026.