Privacy Policy

Who We Are

WHY ("we," "us," or "our") operates the website thewhypattern.com and provides personalized digital readings. If you have any questions about this policy, contact us at info@thewhypattern.com.

What Information We Collect

Information You Provide

• Email address
• First name and full birth name
• Date of birth
• Time and place of birth (optional)
• Responses to our behavioral questionnaire
• Tarot card selections
• Customer support communications

Payment Information

Payment is processed securely by Stripe. We never see, store, or have access to your full credit card number or payment credentials.

Information Collected Automatically

When you visit our site, we collect through cookies and similar technologies: device type, operating system, browser type, pages visited, IP address, approximate geographic location, referral source, and session data. This data is collected through Google Analytics and Mixpanel.

Information From Third Parties

We may receive limited information from integrated services (such as payment confirmation from Stripe). We do not purchase personal data from data brokers.

How We Use Your Information

We use your information to:

• Generate and deliver your reading
• Process your payment
• Send your reading via email
• Respond to support requests
• Analyze and improve our product
• Prevent fraud
• Resolve payment disputes
• Comply with legal obligations

AI Processing

Our readings are powered by advanced AI technology. Your birth data, questionnaire responses, and tarot card selections are sent to trusted third-party AI processing services solely for the purpose of generating your reading. Your data is not used to train public AI models and is not shared beyond what is strictly necessary to generate your reading.

Third-Party Services

We work with the following services:

• Stripe: Payment processing. We never store your payment details.
• Anthropic: AI technology used to power reading generation.
• Google Analytics: Anonymized site traffic and usage data.
• Mixpanel: Product usage analysis and improvement.

Each operates under their own privacy policies.

Cookies

Our site uses cookies for: essential site functionality, analytics (Google Analytics, Mixpanel), and fraud prevention. We do not use cookies for advertising or retargeting.

You can disable cookies through your browser settings. Disabling essential cookies may prevent you from completing a purchase.

Data Sharing

We do not sell your personal data. We may share your information only:

• With service providers necessary to operate our business
• If required by law or legal process
• To protect our rights or safety
• To enforce our Terms of Service
• In connection with payment disputes or fraud prevention
• In connection with a merger or acquisition (with prior notice)

Data Retention

Questionnaire responses and birth data are retained for up to 12 months after purchase, unless you request earlier deletion. Email addresses and transaction records may be retained longer for legal compliance, dispute resolution, and fraud prevention.

If you request deletion, we will remove or anonymize your data within 30 days, except where retention is required by law or necessary for dispute resolution.

Data Security

We use encrypted data transmission (SSL/TLS), secure third-party providers, and limited internal access to protect your data. Payment data is handled entirely by Stripe. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. By using our service, you consent to this transfer. We ensure appropriate safeguards through standard contractual clauses and working with providers that maintain adequate data protection practices.

Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to certain processing
• Withdraw consent
• Request a portable copy
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email info@thewhypattern.com. We will respond within 30 days.

GDPR (European Users)

If you are in the EEA or UK, our legal basis for processing is:

• Contractual necessity: delivering your reading.
• Legitimate interest: analytics, dispute resolution.
• Consent: voluntary data submission, AI processing.

You may withdraw consent at any time.

CCPA (California Residents)

You have the right to:

• Know what personal information we collect
• Request deletion
• Opt out of sale (we do not sell data)
• Not be discriminated against for exercising rights

Contact info@thewhypattern.com.

Children's Privacy

Our service is not intended for anyone under 18. We do not knowingly collect data from minors. If we discover we have, we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the date at the top of this page. Continued use of our service constitutes acceptance.