Privacy Policy

1. Information we collect

We collect information in three ways: information you give us, information created when you use the Service, and information from the third parties that help us operate.

Information you provide

• Account details. When you register we collect your email address, a password (which we store only as a salted hash, never in plain text), and your date of birth so we can confirm you are at least 18 years old.
• Phone number. Before your first reading we collect a phone number in E.164 format. It is used to connect your call. Our calling system masks both parties, so neither you nor the advisor sees the other’s real number.
• Payment information. When you add prepaid credit, your card details are collected and processed directly by our payment processor (Stripe). We do not receive or store your full card number; we retain only limited transaction records such as amounts, dates, and a processor reference.
• Communications. If you contact support or correspond with us, we keep those messages and any information you choose to include.

Information created when you use the Service

• Reading and billing records. We record details of each reading, such as the advisor, start time, duration, per-minute rate, amount charged, and your prepaid balance and ledger history.
• Account and security data. We maintain a session record tied to an httpOnly cookie when you sign in, along with email-verification and password-reset tokens (stored hashed) needed to keep your account secure.
• Technical and log data. Like most online services, our servers may log technical information such as request timestamps and error diagnostics for security, troubleshooting, and abuse prevention.

Information from service providers

Our payment processor and telephony provider may share limited information back to us — for example, whether a payment succeeded or whether a call connected, completed, or ended — so we can deliver the Service and keep accurate billing records.

2. How we use your information

We use the information described above to:

• create and maintain your account and verify that you are 18 or older;
• connect you with advisors and place the calls that make up a reading;
• process payments, apply prepaid credit, and maintain accurate billing records;
• send transactional messages such as email verification, password resets, and receipts;
• secure the Service, prevent fraud and abuse, and enforce our terms;
• respond to your questions and provide customer support;
• operate, maintain, and improve the Service; and
• comply with legal obligations and respond to lawful requests.

We do not sell your personal information.

3. How long we keep your information

We keep personal information for as long as your account is active and for as long as needed to provide the Service. After that, we retain information only as long as reasonably necessary to meet legal, accounting, tax, dispute-resolution, and fraud-prevention requirements, after which it is deleted or anonymized. Billing and transaction records are generally kept longer than other data to satisfy financial and legal obligations.

You can delete your account at any time from your profile, which anonymizes your personal information while preserving the de-identified records we are required to keep. Operational logs (such as sign-in tokens and internal error and event records) are kept only for a limited period and then automatically deleted.

4. How we share your information

We share personal information only as described here:

• Advisors. When you start a reading, an advisor is connected to you through our masked calling system. Advisors do not receive your real phone number or payment details.
• Service providers. We rely on trusted vendors who process information on our behalf, including our payment processor (Stripe), our telephony provider (SignalWire), our email delivery provider (SendGrid), and our hosting and infrastructure providers. They may use your information only to perform services for us.
• Advertising partner (Google). We use Google Ads conversion tracking to measure how well our advertising works. When you visit our site, the Google tag may set cookies and share online identifiers and activity data (such as your IP address, browser, and the pages you view) with Google so we can attribute sign-ups and purchases to the ads that referred you. See “Cookies and similar technologies” below for details and how to opt out.
• Legal and safety. We may disclose information when we believe it is reasonably necessary to comply with law, enforce our agreements, or protect the rights, property, or safety of our users, the public, or Blue Readings Now.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

5. Cookies and similar technologies

We use a single strictly-necessary cookie to keep you signed in. It is an httpOnly session cookie, which means it cannot be read by scripts in your browser, and in production it is sent only over HTTPS. This cookie is essential to operate the Service and cannot be turned off while you are logged in; if you block it, you will not be able to sign in.

We also use Google Ads conversion tracking (the Google gtag.js tag). This technology may set cookies and collect device and usage information — such as your IP address, browser, and the pages you visit — and share it with Google so we can measure the effectiveness of our advertising and attribute sign-ups and purchases to the ads that referred you. This is the only advertising or cross-site tracking technology we use.

You can control or opt out of this tracking in several ways: opt out of personalized Google advertising through Google Ads Settings, block or delete cookies through your browser settings, or install the Google opt-out browser add-on. For more on how Google uses this data, see Google’s partner-sites notice and itsPrivacy Policy. If we introduce additional analytics or advertising technologies in the future, we will update this policy and, where required, ask for your consent.

6. How we protect your information

We take reasonable measures designed to protect your information. Passwords are stored as salted hashes, session cookies are httpOnly and HTTPS-only in production, traffic is encrypted in transit, and payment card data is handled by our PCI-compliant payment processor rather than stored on our systems. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

7. Children’s privacy & age requirement

The Service is intended only for adults who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete it. If you believe a minor has provided us information, please contact us at the address below.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of the personal information we hold about you, and to object to or restrict certain processing. You can:

• review and update your account information when you are signed in;
• request access to, correction of, or deletion of your personal information by contacting us; and
• opt out of non-essential marketing messages at any time (you cannot opt out of transactional messages about your account or transactions).

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before acting on a request.

9. Notice for California residents

If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to know what personal information we collect and how we use and share it, the right to request access to and deletion of that information, the right to correct inaccurate information, and the right not to be discriminated against for exercising these rights. We do not sell your personal information for money. However, our use of Google Ads conversion tracking may be considered “sharing” of personal information for cross-context behavioral advertising under California law. You can opt out of this advertising through the controls described in “Cookies and similar technologies” above (includingGoogle Ads Settings and your browser cookie controls). To make any other request, contact us using the details in “How to contact us” below.

10. Notice for EU and UK residents

If you are located in the European Union or United Kingdom, we process your personal data only where we have a lawful basis to do so — for example, to perform our contract with you (providing the Service), to comply with a legal obligation, with your consent, or for our legitimate interests in operating and securing the Service. You have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.

Because we operate from the United States, your personal data may be transferred to and processed in the United States or other countries whose data-protection laws may differ from those where you live. Where required, we use appropriate safeguards for such transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes may be communicated through the Service. Your continued use of the Service after an update takes effect means you accept the revised policy.

12. How to contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at:

• Email: privacy@bluereadingsnow.com
• Support: support@bluereadingsnow.com
• Mailing address: Blue Readings Now, [mailing address]

This Privacy Policy is governed by the laws of the State of [governing-law state], without regard to its conflict-of-laws rules.