Privacy Policy

1. Introduction

Welcome to Daneel ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our spiritual numerology guidance service available at www.ohnoma.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect the following personal information that you voluntarily provide to us:

• Account Information: Name (English and Hebrew), email address, date of birth
• Profile Information: Profile picture (optional), middle names (optional)
• Authentication Data: Login credentials when using Google or email sign-in
• Payment Information: Processed securely through Stripe (we do not store credit card details)

2.2 Automatically Collected Information

When you use our Service, we automatically collect:

• Usage Data: Pages visited, time spent on pages, interaction with features
• Device Information: IP address, browser type, device type, operating system
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Session cookies, analytics cookies (Google Analytics, Google Tag Manager)

2.3 Voice Consultation Data

Our Service includes voice consultations powered by ElevenLabs AI. Voice data is processed in real-time and may be temporarily stored for quality assurance and service improvement. Voice recordings are not permanently stored unless required for technical troubleshooting.

3. How We Use Your Information

We use the information we collect to:

• Provide Services: Generate personalized numerology readings based on your name and birth date
• Account Management: Create and maintain your account, authenticate users
• Process Payments: Handle subscriptions and one-time purchases through Stripe
• Communication: Send service-related emails, subscription updates, and support responses
• Improve Service: Analyze usage patterns to enhance user experience and features
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with legal obligations and resolve disputes

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share your information with trusted third-party service providers:

• Stripe: Payment processing (PCI-DSS compliant)
• ElevenLabs: AI voice consultation platform
• Vercel: Hosting and infrastructure
• Google Analytics: Usage analytics and insights
• Authentication Providers: Google for OAuth sign-in

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes (subpoenas, court orders)
• Government requests or investigations
• Protection of our rights, property, or safety
• Prevention of fraud or security threats

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption in transit (HTTPS/TLS)
• Secure database storage with access controls
• Regular security audits and updates
• Limited employee access on a need-to-know basis
• PCI-DSS compliant payment processing (via Stripe)

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as:

• Your account is active
• Needed to provide you with our Service
• Required by law or for legitimate business purposes
• Necessary to resolve disputes or enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

Right to access your personal data and receive a copy in a portable format.

7.2 Correction

Right to correct inaccurate or incomplete personal information.

7.3 Deletion

Right to request deletion of your personal data (subject to legal obligations).

7.4 Objection and Restriction

Right to object to or restrict certain processing of your data.

7.5 Withdraw Consent

Right to withdraw consent where processing is based on consent.

To exercise these rights, please contact us at the email address provided below. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: Google Analytics for usage statistics (anonymized)
• Performance Cookies: Monitor and improve service performance

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete such information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to deletion
• Right to non-discrimination for exercising CCPA rights

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). We process your data based on:

• Consent: You have given consent for specific purposes
• Contract: Processing is necessary to provide our Service
• Legal Obligation: Required by law
• Legitimate Interests: For business purposes that do not override your rights

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.