Privacy Policy | Mirrorcana

1. Who We Are

Mirrorcana is a reflective tarot and journaling web product operated by Beundra AB, a Swedish company with organisation number 559395-1105. Beundra AB is the controller of personal data processed through Mirrorcana, except where a service provider acts as an independent controller for its own account, billing, fraud-prevention, security, or legal-compliance purposes.

For privacy questions or requests, contact us at privacy@mirrorcana.com.

2. What This Policy Covers

This policy explains how we collect, use, store, and share personal data when you use Mirrorcana, including:

The public website at mirrorcana.com.
Your Mirrorcana account.
Tarot readings, follow-up messages, journal entries, and optional memory features.
Billing, subscription, checkout, and customer-portal flows.
Security, debugging, and technical logs.

Mirrorcana is for reflection and self-exploration. It is not a medical, mental health, legal, financial, emergency, or guaranteed prediction service.

3. Personal Data We Collect

Account Data

When you create or use an account, we may process:

Email address.
Display name.
Authentication identifiers from Clerk.
Sign-in method, such as email or Google.
Account settings, including optional memory preferences.

Reading, Follow-Up, And Journal Content

When you use Mirrorcana, we process content you provide and content generated for you, including:

Questions you ask.
Clarifying answers.
Selected spread.
Drawn cards, card positions, and card orientations.
AI-generated interpretations.
Follow-up messages.
Journal entries.
Optional memory summaries, if you enable memory.

Please avoid entering information you do not want processed by Mirrorcana or its service providers. Do not use Mirrorcana for emergencies.

Billing Data

Billing is handled through Lemon Squeezy. To create checkout and customer-portal sessions, Mirrorcana may send Lemon Squeezy your email address, display name if available, your Clerk user identifier as Mirrorcana's external customer identifier, selected offer, market, product/variant, checkout, subscription, entitlement, and limited app metadata.

Lemon Squeezy provides hosted checkout, subscription management, customer-portal, invoice/receipt, tax, refund, dispute, chargeback, payment-security, and fraud-prevention services. Lemon Squeezy and its payment, tax, fraud-prevention, security, and compliance providers process payment and transaction information needed for checkout, subscription management, invoices/receipts, tax, refunds, disputes, chargebacks, and payment security. Lemon Squeezy may collect payment, billing address, tax, device, IP address, and transaction information directly from you in its hosted checkout or customer portal.

Mirrorcana may receive and store Lemon Squeezy customer, subscription, product/variant, invoice/payment event, portal URL/update-payment URL, status, billing period, renewal, cancellation, entitlement, and webhook event metadata. We store billing webhook payloads needed for billing integrity, duplicate-event prevention, audit, refunds/disputes, support, and legal/accounting obligations.

We do not store full payment card numbers. Full card details are handled by Lemon Squeezy and its payment processing partners.

Technical And Security Data

We may process:

IP address.
Browser, device, and approximate location information derived from technical request data.
Request timestamps.
Error, performance, security, and fraud-prevention logs.
Authentication and session security signals.

We do not intentionally log raw reading, journal, follow-up, or memory content in production application logs.

Analytics Data

Mirrorcana may use TikTok Pixel on public marketing pages, where you give consent, to measure campaign traffic and ad attribution. TikTok Pixel is not intentionally loaded on signed-in reading, journal, billing, settings, or account pages.

TikTok Pixel may process technical marketing-event data such as page URL, ad/event information, timestamp, IP address, browser and device information, cookies, and limited page metadata. Mirrorcana does not intentionally send reading questions, clarifying answers, tarot interpretations, follow-up messages, journal entries, email addresses, display names, Clerk IDs, Lemon Squeezy customer/subscription/invoice IDs, payment details, draw seed metadata, or memory summaries to TikTok Pixel.

Mirrorcana does not use product analytics at launch. We may still process technical logs needed to operate, secure, debug, and protect the service.

If we enable product analytics later, we will configure it not to receive reading questions, clarifying answers, tarot interpretations, follow-up messages, journal entries, email addresses, display names, Clerk IDs, Lemon Squeezy customer/subscription/invoice IDs, payment details, draw seed metadata, or memory summaries. We will update this policy before enabling analytics if the change materially affects how personal data is processed.

4. How We Use Personal Data

We use personal data to:

Create and manage your account.
Authenticate you and protect your account.
Generate tarot reflections and follow-up responses.
Save reading history and journal entries.
Provide optional memory features.
Track credits, subscriptions, and product access.
Process billing events and subscription status.
Provide support and respond to privacy requests.
Improve reliability, safety, security, and user experience.
Detect abuse, fraud, and security issues.
Comply with legal, tax, accounting, consumer-protection, payment, and regulatory obligations.

Where GDPR applies, we rely on the following legal bases:

Contract: to provide the Mirrorcana service you request, including accounts, readings, journals, credits, billing access, and subscription features.
Consent: for optional memory features and any optional marketing or non-essential analytics where consent is legally required.
Legitimate interests: to keep the service secure, debug technical issues, prevent abuse and fraud, improve reliability and user experience, and understand aggregate product usage if privacy-friendly analytics is enabled later.
Legal obligation: to keep records required for tax, accounting, consumer protection, payment, security, and compliance.

You may withdraw consent for optional memory at any time in settings. Withdrawing consent does not affect processing that happened before withdrawal.

6. AI Processing

Mirrorcana uses OpenRouter and selected model providers to generate clarifying questions, tarot interpretations, and follow-up responses.

To provide these features, we send relevant reading context to the AI provider, such as your question, clarifying answers, selected spread, drawn cards, and prior follow-up messages for that reading. We do not intentionally send your email address, Clerk ID, Lemon Squeezy customer/subscription/invoice IDs, payment information, unrelated journal entries, or memory summaries to AI providers unless a future feature explicitly explains that use.

Mirrorcana's launch requirement is that optional provider settings for prompt/completion logging, training, or model-improvement use must remain disabled where the selected provider makes those controls available. If production AI routing changes in a way that materially changes provider retention, logging, training, or transfer behavior, we will review and update this policy before launch or before enabling that change.

AI outputs are generated for reflection and self-exploration. They should not be treated as factual predictions, professional advice, diagnosis, or instructions for important medical, legal, financial, safety, or emergency decisions.

7. Memory

Memory is optional and off by default. If you enable memory, Mirrorcana may create short summaries of recurring themes across your readings and journal-linked reflections.

For the MVP:

Free users can try memory for the first 5 completed readings.
Plus users receive ongoing memory updates.
You can turn memory off at any time.
You can delete memory summaries from settings.
Turning memory off stops future memory generation but does not automatically delete existing summaries unless you choose to delete them.

If you delete memory summaries, Mirrorcana deletes saved memory summaries and turns memory off for future readings. This does not delete your readings or journal entries unless you separately delete them or request account-level deletion.

We share personal data only as needed to provide, secure, and operate Mirrorcana. Production launch service providers include:

Clerk for authentication and user management.
Neon for database hosting.
Vercel for application hosting, deployment, and related infrastructure.
OpenRouter and selected model providers for AI generation.
Lemon Squeezy for billing, subscriptions, hosted checkout, customer portal, invoices/receipts, tax, refunds, disputes, chargebacks, payment security, and fraud prevention.
Lemon Squeezy payment and payment-security partners, including Stripe or PayPal where applicable, for payment processing and payment security.
TikTok for Business for consented public-page marketing measurement and ad attribution.

Some providers may process certain account, billing, security, fraud-prevention, or compliance data as independent controllers under their own terms and privacy policies.

We may also disclose personal data if required by law, to enforce our terms, to protect users or the service, or in connection with a business transaction such as a merger, acquisition, financing, or sale of assets.

We do not sell your personal data.

9. International Transfers

Mirrorcana is operated from Sweden, and our providers may process personal data in countries outside your country or outside the European Economic Area.

Where GDPR or similar law applies, we use appropriate safeguards for international transfers, such as adequacy decisions, Data Privacy Framework participation where applicable, Standard Contractual Clauses, data processing agreements, and vendor transfer documentation.

If a production provider cannot support appropriate transfer safeguards for the data it receives, Mirrorcana will not use that provider for the affected processing unless this policy is updated and the processing has another lawful basis.

10. Retention

We keep personal data only as long as needed for the purposes described in this policy, unless a longer period is required or permitted by law.

Our launch retention schedule is:

Account data: kept while your account is active, then deleted or anonymized from active systems within 30 days after account deletion unless we need to keep limited records for legal, security, fraud-prevention, dispute, or accounting purposes.
Readings and follow-up messages: kept until you delete the reading or delete your account.
Journal entries: kept until you delete the journal entry or delete your account.
Memory summaries: kept until you delete memory summaries or delete your account.
Credit ledger and entitlement records: kept while your account is active and for up to 7 years where needed for accounting, tax, fraud-prevention, dispute, or subscription-integrity purposes.
Subscription state and billing metadata: kept while needed to provide billing features and for up to 7 years where needed for accounting, tax, payment, refund, chargeback, dispute, or legal obligations.
Lemon Squeezy webhook event records: kept for up to 24 months for billing integrity, duplicate-event prevention, dispute handling, refund/chargeback support, and audit purposes, unless a longer period is required for a specific legal, accounting, tax, fraud-prevention, or legal-claims reason.
Technical and security logs: kept for up to 90 days unless a longer period is needed for security investigation, abuse prevention, debugging, legal, or compliance purposes.
TikTok Pixel marketing analytics: controlled through the TikTok for Business tools and retained according to TikTok's applicable terms, settings, and policies.
Backups: retained for up to 90 days before normal rotation, unless a longer period is needed for security, continuity, legal, or compliance reasons.
Product analytics: not applicable at launch because product analytics is disabled.
Privacy request records: kept for up to 3 years after the request is closed, unless a longer period is needed to establish, exercise, or defend legal claims.

When we delete account-level data, some records may remain where needed for tax, accounting, fraud prevention, security, dispute handling, or legal obligations. Backup copies may persist until normal backup rotation.

11. Your Rights And Privacy Requests

Depending on where you live, especially if GDPR applies, you may have rights to:

Access your personal data.
Correct inaccurate personal data.
Delete personal data.
Restrict processing.
Object to certain processing.
Receive a portable copy of your data.
Withdraw consent where processing is based on consent.
Lodge a complaint with a data protection authority.

You can delete readings, journal entries, and memory summaries in the product where available. For account-level requests, contact privacy@mirrorcana.com.

Before responding to certain requests, we may need to verify your identity. We may also retain limited information where required or permitted for tax, accounting, fraud prevention, security, dispute handling, or legal obligations.

For billing, subscription, invoice, refund, dispute, chargeback, or payment-security records held by Lemon Squeezy, we may need to coordinate with Lemon Squeezy to respond to your privacy request. We will record the vendor escalation, response status, retained-data categories, and any legal/accounting/dispute exception that applies.

Where GDPR applies, we aim to respond to privacy requests within one month unless the law allows an extension.

12. Automated Decision-Making

Mirrorcana does not use automated processing to make legal or similarly significant decisions about you. AI-generated tarot readings are reflective content only and do not determine eligibility for employment, credit, healthcare, insurance, housing, legal rights, or similar matters.

13. Security

We use reasonable technical and organizational measures to protect personal data, including:

Managed authentication through Clerk.
Server-side handling of secrets.
Access controls for production systems.
HTTPS in production.
Database access restrictions.
Webhook signature verification.
Avoiding raw user-content logging in production.

No online service is completely secure, so you should use a strong account password and protect access to your email and Google account.

14. Children

Mirrorcana is not directed to children under 16. If we learn that we have collected personal data from a child under 16 without appropriate consent, we will take steps to delete it.

15. Changes To This Policy

We may update this policy as Mirrorcana evolves. If changes are material, we will provide reasonable notice, such as through the product or by email where appropriate.

16. Contact

For privacy questions or requests, contact:

privacy@mirrorcana.com

Controller:

Beundra AB

Organisation number:

559395-1105

Mirrorcana Privacy Policy