Privacy Policy

1. Who we are

Purple Star Compass (the “Service”) is operated by VaultRadar LLC (“we”, “us”). For any privacy question or request, write to leo@vaultradar.app.

2. What we collect

We collect only what we need to run the Service:

• Birth details you enter: date, time and place of birth, gender, and an optional name or nickname.
• What you ask and what the AI writes back during your session.
• Technical data: IP address, browser type and basic request logs recorded by our hosting provider for security and reliability.
• Account details: when you sign in we receive your email address and name from the sign-in provider (Google or an email link), and we keep your points balance and points history.
• Payment details: payments are handled by Stripe. We receive confirmation of the purchase, the amount and limited information such as the card brand and last four digits. We never see or store your full card number.
• Preferences kept in your browser’s local storage, such as language and light or dark theme. We do not use advertising cookies.

3. How we use it

We use your information to:

• calculate your chart and generate your reading;
• answer your follow-up questions;
• process payments and prevent fraud and abuse;
• keep the Service secure and working, and fix problems;
• improve the Service using aggregated, de-identified information;
• meet our legal obligations.

4. How the AI works with your data

To write a reading, your chart data and your conversation are sent to an AI model provider that acts as our processor: Google, using its Gemini models through the Gemini API. We send only what is needed to produce the reading.

We use the Gemini API under Google’s paid terms, under which the content you send is not used to train Google’s models. Google may keep it for a limited period for abuse monitoring and safety, as described in its terms.

AI output can be inaccurate. No decision that has legal or similarly significant effects on you is made automatically by the Service.

5. Storage and retention

If you sign in, we save your account details, the birth details of the charts you create, the readings and conversations you generate, and your points history, so that you can reopen them later. You can delete any saved chart from the “My charts” page, and you can delete your whole account from the same page; this removes your account, saved charts, readings, conversations and points history from our database. If you do not sign in, your birth details and readings exist only in your browser session and are passed to the AI provider only to produce the reading.

Server logs are kept for up to 30 days. Records of purchases are kept as long as needed for accounting and tax law, and may also be kept by Stripe under its own policies.

6. Who we share it with

We do not sell your personal data and we do not share it for advertising. We share it only with:

• service providers who process data on our behalf: Google Cloud (hosting and AI processing) and Stripe (payments);
• authorities, when the law requires it;
• a successor, if the business is sold or merged, under the same commitments as this policy.

7. International transfers

We are based in the United States and our providers operate globally, so your data may be processed outside your country. Where the law requires, we rely on safeguards such as Standard Contractual Clauses.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive a copy of it, and to withdraw consent.

EU, EEA and UK: you have the rights under the GDPR and may complain to your local data protection authority. Our legal bases are performance of the service you request, our legitimate interest in keeping the Service secure, your consent where we ask for it, and legal obligation.

California: you have the right to know, delete and correct your personal information, and to opt out of its sale or sharing. We do not sell or share personal information, and we do not discriminate against you for exercising your rights.

Brazil (LGPD) and other regions: you have comparable rights under local law.

To exercise any of these rights, email leo@vaultradar.app and we will respond within the time the law requires.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

10. Security

We use encryption in transit and limit access to systems that handle personal data. No system is perfectly secure, so we cannot guarantee absolute security.

11. Changes

We may update this policy. When we make a material change we will update the date above and, where appropriate, notify you.

12. Contact

VaultRadar LLC · leo@vaultradar.app