Privacy Policy

This privacy policy explains which personal data is collected while using the platform, why it is processed, how long it is stored, and what rights you have. It covers account workflows, reading requests, payment-related records, and operational security logs.

Data Controller

Data controller: Orakelia Platform Administration • Contact: support@orakelia.com. Processing activities are centrally managed to deliver services and comply with legal obligations.

Categories of Data Processed

During account and reading workflows we may process full name, username, email, phone, optional gender and marital-status selections, question text, selected cards and uploaded images; for Yildizname, the mother's name, birth date, birth time and birthplace; plus reading output, payment status, event timestamps, system logs, IP data, and technical session/device metadata. Additional support data you voluntarily provide may also be processed.

Purposes of Processing

Data is processed to register and verify accounts, receive and handle reading requests, generate AI-assisted interpretations, run admin approval workflows, verify payments, deliver customer notifications, apply fraud/security checks, analyze incidents, and improve platform quality.

Legal Basis

Processing is based on contract performance, legitimate interests (security and service continuity), accounting/legal compliance obligations, and consent where required. Where lawfully requested, records may be disclosed to competent public authorities.

Retention Period

Photos uploaded with a reading request are deleted automatically no later than 3 days after upload. Account data follows the user lifecycle and legal requirements; payment and accounting records may be retained for statutory periods. Other records are deleted, anonymized, or access-restricted when retention ends.

Third-Party Service Providers

We may use contracted providers for payments, email delivery, hosting, operational security, and AI interpretation services. Only data required for each specific purpose is shared, and data-minimization principles are applied where possible. Providers are contractually bound to confidentiality and data protection obligations.

Cookies and Session Data

The platform uses essential technical cookies for secure login state, CSRF/session protection, and language preferences. These cookies are necessary for core functionality. No third-party marketing/profiling tracking cookies are used.

Data Security

We implement access controls, password security measures, HTTPS transport encryption, session safeguards, logging controls, and infrastructure-level technical/organizational protections. Despite these controls, no internet-based transmission method can guarantee absolute security.

International Data Transfers

Depending on provider locations, data may be processed outside your country or region. In such cases, contractual safeguards, access restrictions, and technical controls are applied as appropriate to protect transferred data.

Your Rights

Under applicable law, you may request access, correction, deletion, restriction of processing, objection, and data portability where relevant. You may also withdraw consent for future processing and file a complaint with a competent supervisory authority if needed.

Privacy Requests

For privacy requests: support@orakelia.com (subject: Privacy). Please include your account email, request type, and relevant date range to speed up processing.