Privacy Policy
Effective date: August 11, 2026 Products covered: the MyTarotWorld website, Telegram Mini App, VK Mini App, and related services
MyTarotWorld (the “Service”) is operated by SEG AI Interconnect Limited (“we”, “us”, or “our”). This Privacy Policy explains how we process personal information when providing AI tarot draws, readings, accounts, content, store, and related features, and how you may exercise your rights.
Please do not include unnecessary sensitive information in questions, chats, or feedback, such as identity-document numbers, card details, account passwords, precise addresses, medical records, or another person’s private information. Tarot questions may contain relationship, health, religious, or other private information. Submit only content that you are willing to have processed to provide a reading.
1. Information We Collect
We process the following information only to the extent needed to provide the relevant feature:
| Context | Categories of information | Main purpose |
|---|---|---|
| Visiting the website or Mini App | IP address, browser/device and operating-system information, language, access time, request logs, Cookie or local-storage identifiers | Deliver pages, maintain security, troubleshoot, prevent abuse, and understand service operation |
| Registration and sign-in | Email address, username, password hash; verified email and account identifier returned by Google Sign-In; account identifier and public profile information supplied by Telegram or VK sign-in | Create, verify, and protect accounts and prevent duplicate or unauthorized access |
| Tarot readings and chats | Questions you enter, selected spread, cards drawn, reading/chat content, creation time, and association with an account or temporary session | Generate readings, show reading history, improve service reliability, and handle disputes |
| Store or orders, where enabled for your channel | Recipient name, telephone number, country/region, city, address, postal code, ordered items, amount, currency, order and payment status, and payment-provider transaction reference | Fulfil orders, delivery, refunds, customer support, fraud prevention, and legally required record keeping |
| Contacting us | Email address, identity-verification information you voluntarily provide, and correspondence | Answer questions and handle rights requests, refunds, or complaints |
We do not ask for payment-card numbers or security codes. If payment features are enabled, payment information is processed by the payment platform shown at checkout under its own rules. We receive only the status and transaction-reference information needed to complete orders, reconcile payments, or process refunds.
2. How We Use Information and Our Bases for Processing
We use information to:
- provide, maintain, and personalize the Service, including saving reading records that you choose to retain;
- create accounts, verify identity, provide support, and process orders, payments, cancellations, or refunds;
- protect accounts, networks, and the Service; prevent fraud, spam, automated abuse, and Terms violations;
- measure marketing effectiveness and present or optimize marketing content when the required consent has been obtained;
- comply with legal, tax, accounting, dispute-resolution, and law-enforcement obligations; and
- analyze and improve products. We do not publicly display your questions or chat content unless you separately give clear consent.
Where required by applicable law, we rely on lawful bases such as performance of a contract, compliance with legal obligations, and protection of service security. For optional marketing Cookies or processing that requires consent, we seek consent first, and you may withdraw it at any time.
3. Cookies, Similar Technologies, and Marketing
We use necessary Cookies or local storage to maintain sign-in status, language preferences, sessions, and security controls. Refusing necessary technologies may make parts of the Service unavailable.
The website also has a marketing-consent mechanism. Third-party technologies used for advertising attribution and campaign measurement are loaded or enabled only after you consent. When configured, these may include services from Google Tag Manager/Google Ads, Meta, TikTok, Yandex, or VK. You may clear Cookies or local storage in your browser and choose Reject in the marketing-Cookie banner when it appears. The Service may ask for your choice again after you clear browser data.
Third-party platforms process information under their own privacy policies. We do not intentionally send sensitive fields such as questions, email addresses, phone numbers, passwords, tokens, Cookies, or IP addresses through marketing events.
4. How We Share Information
We do not sell your personal information. We share it only when necessary in the following situations:
- Infrastructure and technical providers: hosting, databases, logs, security, email, AI-model, or troubleshooting providers acting on our behalf;
- Sign-in, platform, and payment providers: Google, Telegram, VK, or the payment channel you choose, to complete the relevant sign-in, in-platform feature, or transaction;
- Delivery, support, and professional advisers: only as needed to fulfil an order, handle a complaint, conduct an audit, or obtain professional advice;
- Legal or security requirements: where we reasonably believe disclosure is necessary to comply with law, respond to a valid governmental or judicial request, protect users or the public, investigate fraud, or protect our rights;
- Corporate transactions: in connection with a merger, financing, reorganization, or asset transfer, where permitted by law and subject to appropriate safeguards; or
- Other situations with your clear consent.
We require processors acting on our behalf to process information only on our instructions, for the agreed purposes, and with appropriate security measures.
5. Cross-Border Processing
We, our providers, and the platforms you use may be located in different countries or regions. Your information may therefore be processed or stored outside your location. For cross-border processing, we use reasonable contractual, technical, and organizational safeguards and provide protections required by applicable law. A third-party sign-in, payment, or platform provider’s own cross-border processing is also governed by that provider’s rules.
6. Retention and Deletion
We retain information for as long as necessary for the purposes in this Policy, service security, dispute resolution, and legal, tax, accounting, or audit obligations. Retention periods vary with the information type, service status, and legal requirements. When a period ends, we delete, anonymize, or otherwise handle information as permitted by law.
You may delete an individual reading record where that option is available. To request access to, correction, export of, or deletion of your account or reading data, or to stop marketing processing, contact us under Section 10. To protect your account, we may ask you to write from the registered email address or provide reasonable identity-verification information. A deletion request does not affect information that we must retain for legal obligations, transaction disputes, fraud prevention, or protection of our rights.
7. Security
We use technical and organizational measures proportionate to the risks of processing, such as encryption in transit, access control, permission management, logging, and security monitoring, to reduce the risk of unauthorized access, disclosure, alteration, or loss. No internet transmission or storage method is completely secure. Keep your password confidential, do not share sign-in credentials, and contact us promptly if you suspect account compromise.
8. Children
The Service is intended for adults aged 18 or older. We do not knowingly provide the Service to, or collect personal information from, persons under 18. If you believe that a minor has submitted information to us, please contact us. After verification, we will take appropriate steps under applicable law.
9. Your Rights
Depending on the law that applies where you live, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent, data portability, make a complaint, or object to automated processing. The scope of rights and exceptions differs by jurisdiction. Submit a request using the email in Section 10. We will respond within the period required by applicable law and explain any lawful reason why we cannot fulfil a request.
10. Contact Us and Policy Updates
For privacy questions, data-subject requests, or security concerns, email support@starcoreastro.com from your registered email address and use the subject line “Privacy Request”.
- Service operator: SEG AI Interconnect Limited
- Service/brand: MyTarotWorld
- Correspondence address: B27 SHING LEE COMM BLDG, 8 WING KUT ST, CENTRAL, HONG KONG
- Website: https://mytarotworld.com
We may update this Policy to reflect changes to features, law, or our business. Before a material change takes effect, we will provide notice through a prominent website notice, account notice, or another appropriate method. The effective date shown on this page applies to the updated Policy.