Last updated: 8 July 2026
This Privacy Policy explains how Tarotico collects, uses, stores, shares and protects personal data in connection with the use of the platform and related services.
1. Data controller
The data controller is InnOneWeb OÜ, registration number 16826593, address: Harju maakond, Tallinn, Kesklinna linnaosa, Sakala tn 7-2, 10141, Estonia, email: support@tarotico.com.
2. Personal data we may collect
- identification data such as name, email address and account details;
- login and authentication data, including magic link, social login or other supported method;
- subscription, plan, payment, invoicing, payment status and purchase history data;
- platform usage data, including selected systems, spreads, cards, runes, symbols, entered questions or topics and received interpretations, where history functionality is available;
- technical data such as IP address, device, browser, operating system, session identifiers, logs and security data;
- cookies and similar technology data in accordance with the Cookie Policy;
- communications with us, including emails, support requests, complaints and requests.
We do not recommend entering highly sensitive personal information, medical information, financial data, legal cases, data about other persons, passwords, identification numbers or other confidential information into Tarotico.
3. Purposes and legal bases
Purpose
Legal basis
account creation and management
performance of a contract
provision of interpretations, interpretation history and paid features
performance of a contract
payment processing, invoices and accounting obligations
performance of a contract and legal obligation
security, abuse prevention and technical support
legitimate interest
responding to inquiries, complaints and requests
contract performance, legal obligation or legitimate interest
analytics and service improvement
consent or legitimate interest depending on the technology
marketing communications
consent or legitimate interest where permitted by applicable law
4. AI-assisted interpretations and internal content base
When the user uses an interpretation function, entered questions or topics, selected systems, spreads, positions, cards, runes or symbols may be processed to compose a personalised digital interpretation based on Tarotico’s internal content base.
The technological system is used to assist the selection, combination, structuring and presentation of content. These data are processed to provide the requested service, ensure technical security, prevent abuse and improve the platform, to the extent permitted by applicable law.
5. Payments
Payments are processed through external payment providers such as Stripe. Tarotico does not store full bank card details. The payment provider may process data such as name, email, payment method, country, currency, amount, payment status, billing data and technical fraud prevention data.
6. Cookies and similar technologies
Tarotico uses cookies and similar technologies for website operation, security, storing settings, analytics and, where applicable, marketing. More information is provided in the Cookie Policy.
7. Service providers and third parties
We may use providers for hosting, security, payments, email communication, analytics, technical support and other services needed for platform operation. They process personal data only according to our instructions or in accordance with their own legal obligations where they act as independent controllers.
8. International transfers
Where personal data are transferred outside the European Economic Area, we apply appropriate safeguards under the GDPR, such as standard contractual clauses, adequacy decisions or other permitted mechanisms.
9. Retention periods
We retain personal data only for as long as necessary for the purposes for which they were collected, including service provision, account support, accounting and tax obligations, security, abuse prevention, dispute handling and protection of legal interests.
Account data are retained while the account is active or as long as needed for lawful purposes. Payment and invoice data may be retained for periods required by applicable accounting and tax law. Technical logs are retained for a limited period needed for security and diagnostics.
10. User rights
Under the GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent and complaint to a competent supervisory authority.
To exercise your rights, contact us at support@tarotico.com. We may request additional information to verify your identity where necessary to protect your data.
11. Account deletion
You may request deletion of your account through available platform functions or by contacting support@tarotico.com. Deletion may result in loss of interpretation history, unused credits or other account-related information, unless applicable law provides otherwise.
12. Age restriction
Tarotico is intended for persons aged 18 or over. The platform relies on the user’s self-declaration of age and does not ordinarily perform identity document checks or other intrusive age verification measures, unless required by applicable law or necessary in a specific case.
13. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No system can guarantee absolute security.
14. Changes to this policy
We may update this Privacy Policy from time to time. The updated version is published on the website with the last updated date.
15. Contact
For privacy questions, contact us at support@tarotico.com. Controller: InnOneWeb OÜ, Harju maakond, Tallinn, Kesklinna linnaosa, Sakala tn 7-2, 10141, Estonia.
