TAROT WITH SSYL

Policy

Privacy notice

Last updated 8 October 2026.

Who we are

Tarot with Ssyl (“we”, “us”) provides tarot sessions and Feng Shui consultations through this website. For any privacy question or request, use the contact page and we will reply by email.

What we collect

  • Account: your email address (used to sign in with a one-time link), and optionally your name and phone number.
  • Bookings: service, session length, time, chosen format, your timezone, the agreed price, and an optional logistics or accessibility note.
  • Payments: payment status and provider reference numbers. Card or bank details are entered on the payment provider’s page and are never received or stored by us.
  • Contact form: your name, email and message.
  • Technical: a sign-in session cookie and short-lived rate-limiting records to prevent abuse.

We do not ask for birth charts, relationship histories, health information or identity documents, and we ask you not to include them in free-text fields.

What we do not do

  • No advertising or tracking scripts run on this site, including on booking, account and checkout pages.
  • Emails contain booking logistics only, never session content.
  • We do not sell personal data.

Emails

Transactional emails (sign-in links, confirmations, reminders, changes, refunds) are sent because they are needed for your booking. Marketing emails are sent only if you separately opt in, and you can withdraw that at any time from your account.

Service providers

We use a small number of providers to run the service, and share only what each needs:

  • Vercel hosts the website.
  • Supabase stores account, booking and payment records (servers in Mumbai, India).
  • Resend delivers transactional emails.
  • Razorpay processes payments. Card, UPI and bank details are handled by Razorpay, not by us.

Some of these providers may process data outside India. They are bound by their own security and data-protection commitments.

Retention

Booking and payment records are kept for as long as Indian tax and accounting law requires, generally up to 8 years. Contact messages are kept for 12 months. Sign-in links expire after 15 minutes, and rate-limiting records are deleted within a day.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask to access, correct or erase your personal data, withdraw consent you have given, and raise a grievance. Send your request through the contact page using the email on your account; we will respond within 30 days. Records we must keep by law, such as payment records, are retained for the required period even if you close your account.