Privacy policy

DestinyTara — AI-Powered Strategic Timing Platform

Last Updated: April 7, 2026

1. Data Controller

DestinyTara — Monterrey, Nuevo Leon, Mexico
Legal Contact: legal@destinytara.com

This Policy applies to all users worldwide under GDPR, CCPA/CPRA, and Mexico's LFPDPPP.

2. Data We Collect

• Authentication: Email address (for OTP login via Mailgun)
• Birth data: Date, time, city of birth, gender (for Qi Men Dun Jia calculations)
• Usage data: AI conversations, saved charts, interaction logs, ratings
• Payment: Processed by Stripe — we never store card numbers
• Technical: IP address, geolocation (for tax compliance and fraud prevention)

3. How We Use Your Data

All data processing is mapped to specific legal bases under GDPR Article 6. Birth data combined with Qi Men Dun Jia analysis reveals philosophical beliefs, qualifying as special category data under Article 9 — processed only with your explicit consent.

4. AI Transparency

Your queries are processed by Qwen 72B (via Together AI). No human reviews the advice. The AI may produce inaccurate or "hallucinated" responses. Interaction logs are anonymized after 30 days.

5. Third-Party Processors

• Together AI (US) — AI inference; data not retained beyond request lifecycle
• Stripe (US) — Payment processing
• Mailgun (US) — Email delivery for OTP

We do not sell, rent, or trade your personal data. No data brokers, no ad networks.

6. International Transfers

Data transfers from EU/EEA use Standard Contractual Clauses (SCCs) and EU-US Data Privacy Framework compliance, with supplementary measures per Schrems II.

7. Data Retention

• Account data: duration of active account
• AI logs: anonymized after 30 days
• Payment records: 5 years (Mexican fiscal law)
• IP logs: 30 days

8. Your Rights

EU/EEA (GDPR): Access, rectification, erasure, restriction, portability, objection, withdraw consent, lodge complaint with DPA.

California (CCPA/CPRA): Right to know, delete, correct, opt-out of sale (we don't sell data), non-discrimination.

Mexico (LFPDPPP — ARCO): Access, rectification, cancellation, opposition.

9. Account Deletion

You can delete your account at any time. All personal data is purged within 30 days through our cascading deletion protocol — database, caches, and third-party processors.

10. Cookies

We use only a JWT authentication token stored in localStorage — strictly necessary for the service to function. No tracking cookies, no analytics cookies, no advertising cookies. This falls under the ePrivacy Directive Article 5(3) exemption.

11. Children

The Service is strictly for users 18 and older. We do not knowingly collect data from minors. If we discover a minor has created an account, it will be terminated immediately.

12. Contact

Data protection inquiries: legal@destinytara.com