privacy policy

effective april 5, 2026  ·  last updated april 5, 2026

1. introduction

Skald Corporation ("we," "us," or "our") operates Vor Ritual, an AI-powered tarot journaling and interpretation application accessible at vorritual.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. information we collect

2.1 account information

When you create an account, we collect:

2.2 usage data and reading history

As you use the Service, we collect and store:

You may delete your reading history at any time through your account settings.

2.3 payment information

Payments for subscriptions are processed by Paddle.com Market Limited ("Paddle"), our Merchant of Record. We do not directly collect, store, or process your payment card information. Paddle collects your payment card or billing method details, billing address, and transaction records. Paddle's handling of your payment data is governed by Paddle's Privacy Policy. We receive only transaction confirmation data and your subscription status from Paddle.

2.4 device and technical data

We automatically collect IP address (used for fraud prevention and geographic compliance), browser type and version, device type and operating system, referring URL, pages visited and time spent on the Service, and error logs and crash reports.

2.5 communications

If you contact us via email or support channels, we retain your correspondence for customer service and legal compliance purposes.

3. how we use your information

We use the information we collect to provide, operate, and maintain the Service; process your subscription and manage your account; deliver AI-powered tarot interpretation features through the Anthropic API (see Section 5); personalize your experience and preserve your session history; respond to your inquiries and provide customer support; monitor for fraud, abuse, and security threats; comply with applicable laws and regulations; and send transactional communications (receipts, account notices, subscription updates).

We also send optional product update communications, which you may opt out of at any time.

We do not use your data to train AI models without your explicit consent. We do not sell your personal information.

4. cookies and tracking technologies

4.1 types of cookies we use

Essential cookies — Required for the Service to function. These include session authentication tokens and security cookies. These cannot be disabled without breaking core functionality.

Analytics cookies — Used to understand how users interact with the Service. We use this data in aggregate, anonymized form only.

Preference cookies — Store your settings and preferences across sessions.

4.2 managing cookies

You may control cookies through your browser settings. Disabling non-essential cookies will not prevent you from using the Service, though some personalization features may be affected. We do not currently use third-party advertising or tracking pixels.

5. third-party services and data processors

5.1 Supabase

We use Supabase to host and manage our application database, including user account records and reading history. Supabase processes data on servers located in the United States. Data stored in Supabase includes account identifiers, session history, and journaling data. Supabase's privacy practices are governed by their Privacy Policy.

5.2 Anthropic API

We use the Anthropic API to generate AI-powered tarot interpretation content. When you submit a reading request, the relevant session data (card selections and any contextual input you provide) is transmitted to Anthropic for processing. We do not transmit your name, email, payment information, or other directly identifying information to Anthropic as part of API requests. Prompts are associated with anonymized session identifiers. Anthropic's data handling is governed by their Privacy Policy and API usage policies.

5.3 Paddle

As our Merchant of Record, Paddle independently collects and processes payment data. Paddle may collect additional information required for tax compliance, fraud prevention, and payment processing. See Paddle's Privacy Policy for full details.

5.4 other processors

We may use additional service providers for functions such as email delivery, error monitoring, and hosting infrastructure. These providers are contractually prohibited from using your data for purposes other than providing services to us.

6. data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Account data is retained for the duration of your account and for up to 90 days following account deletion. Reading history and journal entries are retained until you delete them or close your account. Payment records are retained for a minimum of 7 years as required by U.S. tax law and Paddle's record-keeping requirements. Technical logs are retained for up to 12 months.

You may request deletion of your account and associated data by contacting us at the address below.

7. your rights

7.1 all users

Regardless of your location, you have the right to access the personal data we hold about you, correct inaccurate or incomplete data, request deletion of your account and data (subject to legal retention obligations), export your reading history and journal data in a portable format, and opt out of non-transactional communications at any time. To exercise any of these rights, contact us at skaldcorp@gmail.com.

7.2 european users (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the GDPR or applicable national law, including the right to restriction, the right to object, the right to withdraw consent, and the right to lodge a complaint with your local supervisory authority.

Our legal bases for processing include performance of a contract (account and subscription services), legitimate interests (security, fraud prevention, product improvement), legal obligation (tax and compliance records), and consent (marketing communications). For EEA users, data is transferred to the United States under Standard Contractual Clauses where applicable through our processors.

7.3 california users (CCPA / CPRA)

If you are a California resident, you have rights under the CCPA as amended by the CPRA, including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at skaldcorp@gmail.com. We will respond within 45 days of a verified request. We do not knowingly collect personal information from California residents under the age of 16.

8. children's privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete such information.

9. data security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or destruction. These measures include encrypted transmission (TLS), hashed credential storage, access controls, and regular security reviews. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "last updated" date at the top of this page and, where appropriate, by sending a notice to the email address associated with your account. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. contact us

Skald Corporation
San Antonio, Texas, USA
skaldcorp@gmail.com