Privacy Policy
We collect as little as possible and are transparent about what we keep.
Last updated: June 24, 2026
This policy explains how Hexagram Cast (hexagramcast.com), operated by TinyPrism LLC (United States), handles your data. Contact: hello@hexagramcast.com.
1. Information we collect
- Account: email, display name, and an encrypted password (or, if you use Google sign-in, the identifier and tokens Google provides).
- Castings: castings you save — method, line values, changing lines, resulting hexagram, computation trace, and any question you entered.
- Deep Readings: your question and the generated reading text.
- Uploads: text, audio, or images are used only for computation. We do not store the original file — only the hexagram, filename, byte count, and digest (hash).
- Payments: handled by Stripe. We never see or store your full card details; we keep customer/transaction identifiers and subscription status.
- Technical: IP address for security and rate limiting, plus basic logs.
2. How we use it
To provide and improve the Service: save your casting history, generate Deep Readings, process payments and subscriptions, keep the Service secure and prevent abuse, and send account-related email where you’ve agreed.
3. AI processing
To generate a Deep Reading, we send your question and the relevant context for that casting to a third-party AI provider (e.g. Google Gemini, Anthropic Claude) to produce the interpretation. Please do not include sensitive personal information in your question.
4. Third-party services
We use: Stripe (payments), AI providers (reading generation), an email delivery provider (account email), and — when enabled — privacy-friendly analytics (e.g. Plausible or Google Analytics). Each service’s own privacy policy governs its processing.
5. Cookies
We use essential cookies to keep you signed in and to support “remember me.” If analytics are enabled, analytics cookies may be used. Anonymous casting requires no cookies.
6. Retention and security
Account and casting data are kept until you delete your account or request deletion. The site is served over HTTPS and passwords are stored encrypted. No system can guarantee absolute security.
7. Your rights
You may access, correct, or delete your data, or request an export. To exercise these rights, contact hello@hexagramcast.com. Depending on where you live, you may have rights under laws such as the GDPR or CCPA.
8. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal information.
9. Changes
When this policy changes, we update the “Last updated” date above.