Privacy Policy

CireAI (“we”) runs cireai.com, a set of free AI tools. This policy explains what we collect, why, and your choices.

What we collect

• What you enter into any tool: Impact answers (job, years, story, names), Tarot questions and the cards you pick, dream text and moods, and Aura descriptions.
• AI results generated for you, such as citations, readings, interpretations and cards.
• Account details if you sign up: name, email, and sign-in times.
• Certificate emails: the recipient address, sender name and note you enter.
• Shares and downloads: which share button was used.
• Technical data on each request: IP address, approximate location (country, region and city derived from IP by our host), and device/browser info (user agent).

Why we collect it

• To run the service: create your results, send emails you request, and sign you in.
• To prevent abuse, spam and fraud (for example rate limiting and blocking bad actors).
• For analytics and to improve the tools.
• To share with or sell to third parties, as described below.

Sharing and sale of personal information

Your data is stored with access controls. We may share or sell personal information to third parties such as partners, advertisers or data buyers. This can include what you enter into the tools, AI results, IP address, approximate location, device/browser info, and email address. Under laws such as the CCPA/CPRA, this may count as a “sale” or “sharing” of personal information. You can opt out at any time (see below).

Retention

We keep entries and technical logs for up to 12 months and then delete them. Account details are kept until you delete your account or ask us to.

Third-party processors

These services process data on our behalf: Vercel (hosting and location headers), Vercel Analytics (privacy-friendly, cookieless usage stats), Upstash (database storage), xAI (AI generation; your inputs are sent to create results), and Resend (email delivery).

Your rights

Wherever you live, you can ask us to access, correct, export or delete your data, or object to how we use it. If you are in the EU/UK (GDPR) or California (CCPA/CPRA), you have these rights by law, along with the right to non-discrimination for using them and the right to complain to your local data authority. To make a request, use our Delete my data form or our Do Not Sell or Share form, or email hello@cireai.com. We'll answer within 30 days.

Do Not Sell or Share My Personal Information

You have the right to opt out of the sale or sharing of your personal information. Submit the Do Not Sell or Share My Personal Information form with your email (and certificate ID if you have one), or email hello@cireai.com. We'll honor the request within 15 business days and won't sell or share your data afterward. Opting out doesn't affect your access to the tools. You can also ask us to delete your data entirely.

Children

CireAI is not for children under 13, and we do not knowingly collect, sell or share their data. If you believe a child has used it, contact us and we'll delete their data.

Security

Data is sent over HTTPS and stored with access controls. No system is perfect, so please don't enter sensitive information like health details or passwords.

Changes and contact

If this policy changes, we'll update the date above. Questions: hello@cireai.com. See also our Terms of Use and Cookie Policy.