Privacy Policy — Psychic Readings Network

1. Who We Are

PsychicReadingsNetwork.com ("we," "our," or "us") operates the website at psychicreadingsnetwork.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Site and services.

2. Information We Collect

2a. Information You Provide

Account information: Display name and account credentials.
Contact information: Email address (stored encrypted; used for account communications only).
Payment information: Processed entirely by Stripe. We receive only a Stripe customer reference ID and the last 4 digits of your card — never your full card number, CVV, or billing address.

2b. Information Collected Automatically

IP address: Stored as a one-way SHA-256 hash only — the raw IP address is never retained.
Session data: Duration, session type (chat/call), and advisor interactions.
Chat transcripts: Stored AES-256 encrypted for up to 90 days for dispute resolution (see Section 5).
Device and browser information: Used for fraud detection and security purposes.

3. How We Use Your Information

To create and manage your account.
To process payments and maintain your wallet balance.
To connect you with advisors and facilitate sessions.
To detect and prevent fraud, abuse, and unauthorized access.
To resolve billing disputes using session records and transcripts.
To comply with legal obligations including tax reporting (1099 for advisors).
To send transactional communications (session confirmations, receipts, security alerts).

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. Data Security

Encryption at Rest

Chat transcripts and advisor notes: AES-256-CBC encrypted before storage.
Email addresses: AES-256 encrypted and additionally stored as a SHA-256 hash for lookup.
Phone numbers and IP addresses: SHA-256 hashed — one-way, never recoverable.

Access Controls

Our database uses two separate access levels: a public user with access only to non-sensitive display data, and an internal user with access to billing and PII tables.
Public API routes cannot access private billing or PII tables by design.
All administrative actions are recorded in an immutable audit log.

Payment Security

All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. Card numbers, CVV codes, and full billing addresses are never transmitted to or stored on our servers.

5. Data Retention

Chat transcripts: Retained for 90 days from session date, then permanently deleted unless retention is required by law or an active dispute.
Billing records: Retained as required by Stripe's terms and applicable tax laws (typically 7 years).
Account data: Retained while your account is active. Upon account deletion request, personal data is deleted within 30 days subject to legal retention requirements.
Audit logs: Retained for a minimum of 2 years for compliance and dispute resolution.

6. Third-Party Services

Stripe — Payment processing. Stripe's privacy policy governs data shared with them: stripe.com/privacy
Advisors — Independent contractors who may see your display name and session content during a live session. Advisors do not have access to your email, payment information, or account balance.

7. Your Rights

You have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate personal data.
Deletion: Request deletion of your account and personal data, subject to legal retention requirements.
Portability: Request your data in a portable format.
Opt-out: Opt out of non-transactional marketing communications at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

Our services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a minor, we will delete it immediately. If you believe a minor has created an account, please contact us at [email protected].

9. Cookies

We use essential session cookies to maintain your login state and wallet session. We do not use third-party tracking cookies or advertising cookies. You may disable cookies in your browser settings, but doing so will prevent you from logging in or using paid services.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will notify you via email or a prominent notice on the Site. Your continued use of the Site after any changes constitutes acceptance of the updated policy.

11. Contact

Privacy questions or data requests: [email protected]
General support: [email protected]