Privacy Policy
<!-- DRAFT — prepared 2026-11-12, based on Link2Threads Privacy Policy (2026-09-28, reviewed), adapted for Pearl Arcana + Dodo Payments (merchant of record). Requires legal review before launch. -->
Last updated: November 12, 2026
Pearl Arcana (the "Service") is operated by Style Factory 9, Uijeongbu, South Korea. Contact: info@aikorea24.kr.
1. Data Subject
Pearl Arcana (the "Service") collects, uses, processes, and protects your personal information as described below.
2. Information We Collect and Use
| Item | Purpose | Retention | |---|---|---| | Google account info (name, email, profile photo) | Sign-in and account management | Until account deletion | | Questions you ask | Reading generation | Until account deletion | | Cards drawn and interpretations | Reading history | Until account deletion | | Email | Verification, notifications | Until account deletion | | Plan and credit info | Subscription and credit management | Until account deletion | | Usage logs (IP address, route, timestamp) | Security and service improvement | Until account deletion |
3. Information We Do Not Collect
- Passwords: handled via Google OAuth, never stored.
- Financial data: payments are processed by Dodo Payments, our merchant of record; the Service never collects or stores card details directly. Dodo Payments handles payment method data, tax calculation and invoicing.
4. Storage and Processing
Storage: Cloudflare D1 (SQLite) — encrypted storage in a distributed global environment.
5. Third-Party Sharing
| Third party | Purpose | Data scope | |---|---|---| | Dodo Payments | Payments, subscriptions, invoicing and tax (merchant of record) | Email, name, billing address, payment method, plan and credit information | | Google | Sign-in | Name, email, profile photo | | Cloudflare | Hosting and infrastructure | IP address, logs | | AI inference providers (contracted processors) | AI reading generation, including a fallback provider used when the primary is unavailable | Questions, card selections, spread/language instructions | | Cloudflare (Workers AI) | Fallback AI inference, used only when the primary provider is unavailable | Questions, card selections, spread/language instructions | | Brevo (EU-based) | Transactional email delivery | Email address, send-event logs |
6. Use Limitation
Data is used only to provide the Service to you. It is never sold to third parties or used for advertising/marketing purposes.
7. Data Security
- Data is encrypted in transit (HTTPS).
- Secrets are stored in Cloudflare's secret store, never in code.
- Passwords are never stored; sign-in is handled by Google OAuth.
- Cloudflare Workers security infrastructure.
No system is completely secure; if you suspect unauthorized access to your account, contact us immediately.
8. AI Processing
Transmitted: questions, card selections, spread and language instructions. Not transmitted: name, email address, payment information.
Input content may be used by AI providers for their service improvement purposes per their respective privacy policies. Confidential input is prohibited.
9. Email Processing (Brevo)
Transactional emails are sent through Brevo (EU-based). Transmitted items: email address and send-event logs (trigger type, send status, timestamp). Service-required notices (verification, payment receipts, system outage alerts) cannot be opted out; marketing emails can be opted out via the unsubscribe link in each email or by replying to info@aikorea24.kr.
10. Your Rights
- Access: request access to your personal information.
- Correction: request correction of inaccurate information.
- Deletion: request deletion of your account and information by email. We delete your readings and account data within 30 days of the request, except for records we must keep by law (for example, payment records).
- Objection: object to collection/processing (may restrict Service use).
To exercise these rights, contact info@aikorea24.kr. We respond within 30 days.
11. California Privacy Rights (CCPA)
If you are a California resident, you have the right to: (1) know what personal information is collected about you; (2) request deletion of your personal information; (3) opt out of the sale of your personal information — Pearl Arcana does not sell personal information to third parties; (4) non-discrimination for exercising your privacy rights. To exercise these rights, contact info@aikorea24.kr.
12. Cookies and Technology
The Service uses localStorage for login session persistence and technical cookies for analytics.
13. Changes
We may update this policy. Material changes will be announced on the Service and by email. The "Last updated" date above reflects the current version.
14. Contact
Privacy officer: Cho Jin-yeon · info@aikorea24.kr
Style Factory 9 · Representative Cho Jin-yeon · Business registration no. 672-43-00632 · Mail-order sales registration 2026-Uijeongbu-Heungseon-0694
107-1804, 256 Hoam-ro, Uijeongbu-si, Gyeonggi-do 11638, Republic of Korea · Hosting provider Cloudflare, Inc.