Privacy Policy

1. Controller

Anton Chybisov, trading as ClientFlow24 (sole proprietorship), Mühligweg 56, 40468 Düsseldorf, Germany. Phone: +49 160 5900929. Email: info@clientflow24.de.

2. Account and journal data

If you create an account, we store your email address, a one-way password hash, optional name, account language and your separate marketing preference. Saved readings can contain your question, selected cards, generated interpretation, private note, later outcome, mood, tags and timestamps. This data is used to provide your account and private journal (Art. 6(1)(b) GDPR). Marketing email consent, when selected, is separate and voluntary (Art. 6(1)(a) GDPR).

3. AI readings

For a connected AI interpretation, the question, spread positions, card names and editorial meanings are sent to Anthropic as our model provider to generate the requested answer. Public spread questions and answers are not stored in the TarotCards24 database. Readings generated inside an account are stored so they can appear in the private journal. Do not enter information that you do not want processed for this purpose.

4. Security, logs and rate limits

Our server records standard technical data such as IP address, request time, requested path and browser type for security and stability. AI abuse limits store only a keyed hash of the IP address, not the raw address, in the application database. Security processing is based on our legitimate interest in protecting the service (Art. 6(1)(f) GDPR).

5. Service providers and advertising

We use our internal AstroCRM to store registration details and consent records, a hosting provider to operate the site, and Anthropic to process requested AI interpretations. Google advertising resources may load on public content pages. Advertising is removed from account and private journal pages. Each provider may process technical connection data under its own applicable terms and privacy information.

6. Cookies and consent controls

Necessary storage is used for security, login and remembering your privacy choice. Optional analytics and advertising technologies are disabled by default and activate only after your consent. Google AdSense may set or read advertising identifiers after advertising consent. The consent record is stored for up to 180 days and applies across all language versions of this domain. You can reject optional cookies without losing access to the site and change or withdraw your choice at any time using the “Cookie settings” button at the lower edge of the page.

7. Retention and deletion

Account and journal data remain available until you delete individual entries or delete the account. The account page provides self-service deletion; deleting the account removes its active account, sessions, quotas and journal readings. You may also contact us about a data request.

8. Your rights

Under GDPR you may request access, correction, deletion, restriction, objection and data portability where applicable, and withdraw consent for future processing. Contact info@clientflow24.de. You may also complain to a competent data protection authority.