Privacy Policy

1. What we collect

• Eye photo. The photo you upload or take is analysed by an AI model to create your reading, and is stored privately and securely for 30 days so your PDF report can feature your eye — after 30 days it is automatically and permanently deleted. It is never shared and never used for any other purpose, and you can ask us to delete it earlier at any time. A copy may also be kept in your own browser; you can clear it anytime by clearing your browser data.
• Email address. To receive a free reading you give us your email address. We use it to send you the private link to your reading and, if you buy the full report, your receipt and report delivery. If you no longer want emails, the link at the bottom of any email stops them.
• Purchase details. If you buy the full report, our payment processor collects your email, payment and billing details. We receive your email and confirmation of payment; we never see or store your full card number.
• Usage data. Basic technical and analytics information (pages viewed, button clicks, device and browser type) to keep the service working and improve it.

2. How we use it

• To create, display and deliver your reading and full report.
• To send you the private link to your reading and your receipt.
• To process payments, send receipts and provide support.
• To prevent fraud and abuse, and to meet legal obligations.
• To understand and improve the website.

We do not sell your personal information, and we do not use your eye photo for facial recognition, identification or biometric profiling.

3. Who we share it with

Only trusted service providers that help us run the service: cloud hosting and database, AI processing, payment processing (including tax and fraud prevention), and email delivery. They may only use your data to provide services to us. We may also disclose information where required by law.

4. Your private link

Your reading is accessed through an unguessable private link instead of an account. Anyone with that link can view the reading, so please keep it private.

5. Retention

Eye photos are kept privately for 30 days after your reading, then automatically and permanently deleted. Reading and purchase records are kept for as long as needed to provide the service and meet legal, tax and accounting obligations. You can ask us to delete your reading and photo at any time.

6. International users

We serve customers worldwide, so your information may be processed in countries other than your own. We take reasonable steps to protect it wherever it is processed.

7. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, CCPA or the Australian Privacy Act), you may have the right to access, correct, delete or export your data, or object to certain processing. Email readings@windowstosoul.com with your private reading link and we'll respond within a reasonable time.

8. Children

This service is intended for people aged 18 and over. We do not knowingly collect information from children.

9. Security

We use encryption in transit and restricted server-side access to protect your data. No system is perfectly secure, but we work to protect your information.

10. Changes & contact

We may update this policy; the date above shows the latest version. Questions? Contact readings@windowstosoul.com. See also our Terms of Service.