Privacy Policy

Last updated: July 15, 2025

Thank you for trusting Demist AI, Inc. (operating NowTarot, "we", "us", or "our") with your information. This Privacy Policy ("Policy") explains how we collect, use, disclose, and protect your personal information when you access or use our website, applications, and related services (collectively, the "Platform"). It also describes your rights and choices regarding your information.

By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with its terms, please do not use the Platform.

1. Scope

This Policy applies to information we collect from visitors, users, and account holders in connection with the Platform. It does not apply to third‑party websites, products, or services that may be linked to or integrated with our Platform.

2. Information We Collect

2.1 Information You Provide Directly

When you interact with the Platform, we collect the following information:

• Identification & Contact Details: Email address, full name, and phone number.
• Account & Profile Details: Password (hashed), preferences, and any profile information you choose to add.
• User Content: Questions you ask the AI and the AI‑generated answers (collectively "User Content").

2.2 Information We Collect Automatically

When you access the Platform, we automatically collect:

• Technical Data: IP address, device identifiers, browser type, operating system, referring URLs, and country.
• Usage Data: Timestamps, pages viewed, features used, interaction logs, and diagnostic reports.
• Cookies & Similar Technologies: See Section 7 for details.

2.3 Information from Third‑Party Sources

We may receive information from:

• Payment Processors (e.g., Stripe) — limited billing and fraud‑prevention data.
• Analytics Partners (e.g., Google Analytics) — aggregated statistics and engagement metrics.

3. How We Use Your Information

We use your information to:

1. Operate and maintain the Platform.
2. Provide, personalize, and improve our AI models and user experience.
3. Process transactions and manage subscriptions.
4. Communicate with you about updates, security alerts, and support.
5. Conduct research and analytics to enhance features and develop new services.
6. Enforce our Terms of Service and other policies.
7. Prevent fraud, security breaches, and abuse.
8. Comply with legal obligations.

No Public Display of User Content: We do not publish or publicly display your questions or answers without your explicit consent.

4. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), our legal bases include:

• Contractual Necessity — providing the services you request.
• Legitimate Interests — improving and securing the Platform.
• Consent — sending marketing communications or processing optional data (you may withdraw consent at any time).
• Legal Obligation — compliance with applicable laws.

5. How We Share Information

We do not sell personal information. We share it only as described below:

1. Service Providers: Hosting, analytics, payment processing, customer support.
2. Business Transfers: In connection with a merger, acquisition, or sale of assets.
3. Legal Requirements: To comply with subpoenas, court orders, or other legal processes, or to protect rights, property, or safety.
4. With Your Consent: When you expressly authorize us to share.

6. Data Retention

We retain personal information for as long as your account is active or as needed to:

• Provide the Platform.
• Fulfill the purposes outlined in this Policy.
• Comply with legal, accounting, or regulatory requirements (no longer than 3 years after account deletion unless required by law).

User Content may be kept in anonymized or aggregated form for analytical improvement of our AI models.

7. Cookies & Similar Technologies

We use cookies, pixels, and local storage to:

• Authenticate users and maintain sessions.
• Remember preferences.
• Measure engagement and performance.
• Conduct analytics.

You can control cookies via your browser settings; however, disabling cookies may limit Platform functionality.

8. Security

We employ administrative, technical, and physical safeguards such as encryption at rest and in transit, firewall protection, and role‑based access controls. No method of transmission or storage is 100% secure; therefore we cannot guarantee absolute security.

9. International Data Transfers

We are based in the United States. If you access the Platform from outside the U.S., your information will be transferred to, stored, and processed in the U.S. We rely on standard contractual clauses or other approved mechanisms for cross‑border data transfers when applicable.

10. Your Rights & Choices

Depending on your location, you may have rights to:

• Access or obtain a copy of personal information.
• Correct inaccurate data.
• Delete your information.
• Restrict or object to processing.
• Data Portability.
• Opt‑out of marketing emails (via unsubscribe link or account settings).

To exercise these rights, please contact us using the address at the bottom of the page. We will respond within 30 days.

California Rights

California residents have additional rights, including the right to know categories of data collected, sources, purposes, and disclosures. We do not sell or share personal information for cross‑context behavioral advertising.

11. Children's Privacy

The Platform is intended for users 18 years or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information, contact us to delete it.

12. Changes to This Policy

We may update this Policy periodically. We will notify you of material changes by posting the revised Policy on this page and updating the "Last updated" date. Continued use of the Platform after changes take effect constitutes acceptance.

13. Contact Us

If you have questions or concerns about this Policy or our privacy practices, please contact us:

Demist AI, Inc. 1950 W Corporate Way, Anaheim, California, 92801 United States

By using the Platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy.