taraताराText Tara

Privacy policy (DRAFT)

Status: DRAFT, not legal advice. Written by an AI drafting assistant from the product specs. A lawyer must review it before launch. Items in [brackets] are placeholders.

Last updated: [date of approval]

Tara is an AI Vedic astrologer you text on one phone number. This page explains what we collect, why, who helps us run the service, and how to erase it all. The short version: we use your details only to give you readings, we encrypt what you tell us, we never sell it, and texting DELETE erases everything.

Who we are

Tara is run by [legal entity name, address]. Contact: [privacy@tara.sidbid.net]. If you are in the UK or EU, we are the controller of your data.

What we collect

What Example Why
Your phone number +1 415 ... It is your account. There is no login.
Your messages "should I switch jobs?" To reply to you.
Birth details date, time, place To compute your chart.
Things you tell us about your life "my H-1B transfer is pending" So the astrologer remembers you. You can ask what is remembered and ask to forget any of it.
Family members you add name or nickname, relation, birth details To read their charts for you.
Predictions and your answers "a new role, Nov to Dec" → "partly" To keep the prediction ledger and check back with you.
Payment status plan, renewal date To give you what you paid for. Card details go to Stripe; we never see them.
Usage metadata message counts, timings, country, plan To keep the service working and fair. Never the content of your messages.

We do not collect your contacts, your location from your phone, or anything from other apps.

Sensitive information

Your birth details and what you tell an astrologer can reveal religious or philosophical belief, and sometimes health or relationships. In the UK and EU we treat this as special-category data and ask for your explicit consent before your first reading (UK/EU GDPR Article 9(2)(a)). Everywhere else, you give consent by sending your birth details after we tell you how they are used. You can withdraw consent at any time by texting DELETE.

How we use it

  • To compute your chart, write your readings and answer your questions.
  • To send messages you asked for: a morning note (if you chose one), check-ins on predictions, and notes about periods that matter in your chart. Text LESS, PAUSE or STOP to change this.
  • To keep the service safe: if a message suggests someone may be at risk, we stop the astrology, share helplines, and a person on our team may review that conversation (see our crisis protocol at tara.sidbid.net/crisis).
  • To improve quality: we review a small number of conversations, with names and numbers removed where we can, to check that answers are accurate and kind.

We never use your data for advertising, never sell it, and never share it for anyone else's marketing.

The AI that writes replies

Replies are written using third-party AI service providers that process messages to generate replies. Your messages, the facts we computed from your chart, and what you have told us are sent to them to generate each reply, sometimes through a routing service that passes the request on and returns the reply. When we use a routing service, we tell it to use only providers that say they don't store your messages or use them for training. [Verify before launch: confirm each provider's commercial terms on training and retention; only then add "under contracts that bar them from training on your data".] The chart itself is computed by our own code, not by the AI.

Who helps us run the service

Provider What they do Data they handle
AI service providers Write replies (AI models) Messages and chart facts for each reply
AI routing service Passes each AI request to a provider Messages and chart facts in transit
[Text-messaging provider] Delivers texts to and from your phone Your number and messages in transit
Stripe Payments Payment details, billing email if you give one
Fly.io Runs our servers Everything, encrypted at rest
Supabase Hosts our database Everything, encrypted
PostHog Product analytics Metadata only, never message content
Sentry Error reports Technical error details, scrubbed of content

Each is bound by a contract to use your data only to provide their service to us. [Confirm DPAs are signed with each before launch.]

How we protect it

  • What you tell us, your birth details and your predictions are encrypted with a key unique to you. Erasing that key makes the data unreadable.
  • Analytics and logs never contain your messages, birth details or life facts.
  • Only a small number of people can access production systems, and access is logged.

No system is perfectly secure, and we can't guarantee it, but we design so that a leak of our database alone would not reveal what you wrote.

How long we keep it

We keep your data while you use the service. If you go quiet for [24 months], we erase it. Text DELETE to erase it sooner: it is gone from the product immediately and from backups within 30 days. We keep only anonymous counts (for example, how many predictions were answered "yes"), which cannot be linked back to you.

Family members

When you add someone, you confirm you have their permission or are their guardian. We store only a name or nickname, relation and birth details, and we never contact them unless you send them an invite. Anyone you added can ask us to erase their details at [privacy@tara.sidbid.net], without involving you. We never read for or contact anyone under 18 as a user.

Your rights

You can ask to see, correct, export or erase your data, or object to how we use it. Text "what do you remember about me?" to see your saved facts, "forget " to erase one, or DELETE to erase everything. For anything else, email [privacy@tara.sidbid.net]. In the UK you can complain to the ICO; in the EU, to your local data protection authority. California residents have the rights in the CCPA/CPRA; we do not sell or share personal information as those laws define it.

Age

Tara is for people 18 and over. If your birth date shows you are under 18, we don't read your chart and we don't keep what you sent.

International transfers

Our servers and providers are mainly in the United States. Where UK or EU law requires, transfers rely on [the UK IDTA / EU Standard Contractual Clauses / the Data Privacy Framework].

Changes

If we change this policy in a way that matters, we will text you before it applies.