Privacy Policy

How Soulmate Timing collects, uses, shares, and protects personal information.
Aug 4, 2026

Effective date: August 4, 2026

This Privacy Policy explains how Soulmate Timing (“we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you visit soulmatetiming.com, place an order, create an account, receive a report, or contact support.

1. Information We Collect

Depending on how you use the Service, we may collect:

  • Identity and contact information: your full name, email address, and account profile information.
  • Personalization information: your birth date, gender, preferred gender of the person portrayed, preferences, and any optional personal question you submit.
  • Order and transaction information: order number, product, amount, currency, priority option, payment status, refund status, and transaction identifiers. Payment-card details are collected directly by Waffo Pancake; we do not receive or store complete card numbers.
  • Generated content and fulfillment information: written readings, portraits, PDF reports, delivery status, generation status, model and prompt version metadata, processing time, and error records.
  • Account and technical information: account identifiers, login and security records, IP address, browser and device information, approximate location derived from IP, timestamps, and essential cookie or session data.
  • Communications: support emails, correction requests, refund requests, feedback, and other messages you send us.
  • Marketing preference: whether you separately opted in to receive occasional promotional emails.

Please do not include unnecessary sensitive information in your optional question or support message.

2. How We Use Information

We use personal information to:

  • validate, process, generate, review, and deliver your order;
  • personalize your portrait and written reading;
  • process payments, prevent duplicate transactions, and manage full refunds;
  • associate an eligible guest order with an account you later create;
  • send transactional emails about payment, generation, delivery, account security, corrections, and support;
  • respond to requests and provide customer service;
  • detect fraud, abuse, security incidents, and prohibited content;
  • diagnose errors, maintain service reliability, and improve our workflow;
  • comply with tax, accounting, legal, and regulatory obligations; and
  • send marketing messages only where you have separately consented.

Where applicable law requires a legal basis, we rely on performance of a contract, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent for optional marketing or other processing that requires consent.

3. AI Processing

Information you submit for personalization is processed through our internal workflow and OpenAI models accessed through the OpenRouter API to create the portrait, possible meeting scene, and written report. The written reading uses OpenAI GPT-5.6 Luna (openai/gpt-5.6-luna), and portrait and meeting-scene generation use OpenAI GPT Image 2 (openai/gpt-image-2). AI-generated results may be inaccurate and are not used to make legal or similarly significant decisions about you.

We limit the information sent to an AI provider to what is reasonably needed for generation. We do not authorize use of your personal input to train AI models without your separate, explicit consent. The production model and safety approach are described in our AI Use & Acceptable Use Policy.

4. Payment Processing

Waffo Pancake processes checkout payments as our payment processor and merchant-of-record partner. It receives the payment and billing information required to authorize the transaction, prevent fraud, handle taxes where applicable, and process refunds. Its handling of that information is also governed by its own privacy policy.

We receive transaction metadata such as the order reference, amount, currency, status, and a payment-provider identifier, but not your complete card number or security code.

5. Service Providers and Disclosure

We do not sell personal information. We may disclose limited information to providers that help us operate the Service, including:

  • Waffo Pancake for payment, tax, fraud, and refund processing;
  • Vercel for website hosting and application delivery;
  • Neon for managed database infrastructure;
  • Cloudflare for DNS, security, private object storage, and email routing;
  • email-delivery providers, including Resend when enabled, for transactional and consented marketing messages; and
  • OpenRouter for API access to our production AI models; and
  • OpenAI as the developer and supplier of the GPT-5.6 Luna written-reading model and GPT Image 2 image-generation model.

Providers may process information only for the services they provide to us and under their own legal obligations. We may also disclose information when required by law, to protect users or the Service, to investigate fraud or abuse, or as part of a business reorganization subject to appropriate safeguards.

6. Cookies and Analytics

We use essential cookies and similar technologies for authentication, security, preferences, checkout continuity, and core site operation. Optional analytics or advertising technologies, if enabled, will be identified in the site’s consent controls or an update to this Policy. You can control cookies through your browser, but disabling essential cookies may prevent account or checkout features from working.

7. Data Retention

We retain information only for the purposes described above. Our standard retention periods are:

  • account information and reports: while the account remains active;
  • personal information and reports after a verified account-deletion request: deleted within 30 days, unless a legal exception applies;
  • guest reports and related personalization data: up to 12 months after delivery;
  • payment and order records: up to 5 years for accounting, fraud, dispute, and legal obligations;
  • system and security logs: up to 90 days; and
  • customer-support records: up to 12 months after the matter is closed.

Backups may retain residual copies for a limited period before scheduled deletion. We may retain a minimal record longer when necessary to establish, exercise, or defend legal claims, comply with law, prevent fraud, or record a valid opt-out request. When retention ends, information is deleted or irreversibly anonymized.

8. Your Privacy Rights

Depending on your location, you may have the right to:

  • request access to and a copy of your personal information;
  • correct inaccurate or incomplete information;
  • request deletion of personal information or closure of your account;
  • request a portable copy of information you provided;
  • withdraw consent where processing is based on consent;
  • unsubscribe from marketing emails at any time;
  • object to or request restriction of certain processing; and
  • lodge a complaint with a competent data-protection authority.

To exercise a right, email support@soulmatetiming.com from the address associated with your order or account. Include enough information for us to locate your data. We may ask for reasonable identity verification before acting on a request. We aim to respond within 30 days, or within the period required by applicable law. These rights may be limited by lawful exceptions, including required payment-record retention.

9. Email Communications

Transactional emails—including receipts, report delivery, security notices, and responses to support requests—are necessary to provide the Service and are not marketing messages. Promotional emails are optional and are sent only when you separately opt in. You may withdraw that consent using the unsubscribe link in a marketing email or by contacting us. Unsubscribing from marketing does not stop necessary transactional messages.

10. Security

We use reasonable technical and organizational safeguards designed to protect personal information, including access controls, encrypted network transport, restricted administrative access, and private storage for reports. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

11. International Processing

Our providers may process information in countries other than your own, including the United States. Where required, we use contractual and other lawful safeguards for international transfers. Local privacy laws in those countries may differ from the laws where you live.

12. Children’s Privacy

The Service is intended only for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a person under 18 has submitted information, contact us so we can investigate and delete it.

13. Changes to This Policy

We may update this Policy when the Service, providers, or legal requirements change. We will post the updated version here and change the effective date. Where required, we will provide additional notice or seek consent.

14. Contact Us

For privacy questions or requests: