Privacy Policy
Last updated: 20/07/2026
1. Who we are
GPTrology is the controller of the personal data processed on this platform. For any privacy-related matter, contact us at support@gptrology.com.
2. Data we collect
- Account data: email, name, and, where applicable, Google profile data (OAuth login).
- Content you submit: the personal questions you type to generate your tarot reading, which are sent to Google Gemini (AI model) for processing.
- Purchase data: transaction history, purchased packages, and amounts paid.
- Browsing data: session cookies, IP address, and campaign parameters (UTM) used for marketing attribution.
3. Payments
Credit card and PIX data are processed directly by Stripe and Mercado Pago. GPTrology does not store card numbers or sensitive payment data on its own servers.
4. Cookies and tracking
We use session cookies to keep you authenticated and the Meta Pixel (Facebook/Instagram) to measure advertising campaign effectiveness, including recording purchase events. We also store UTM parameters from your first visit for attribution purposes.
5. Legal basis (LGPD)
We process your data based on consent, performance of our service contract, and our legitimate interest in improving and protecting the platform, under Brazil's Lei nº 13.709/2018 (LGPD).
6. Your rights
Under art. 18 of the LGPD, you may at any time request confirmation of processing, access, correction, anonymization, portability, deletion of data, and revocation of consent. To exercise these rights, write to support@gptrology.com.
7. Third-party sharing (sub-processors)
- Google — authentication (OAuth) and reading processing via Gemini.
- Stripe — credit card payment processing.
- Mercado Pago — PIX payment processing.
- Meta — advertising measurement (Pixel).
- Resend — transactional email delivery (password recovery, notifications).
8. International data transfers
Some of the providers above may process data outside Brazil. In such cases, we require them to adopt adequate data protection safeguards.
9. Retention and security
We retain your data for as long as necessary to provide the service and comply with legal obligations, using reasonable technical measures to protect it against unauthorized access.
10. Changes to this policy
This Policy may be updated from time to time. The last-updated date is shown at the top of this page.