ToFlintzani
← Home
Privacy Policy
This Privacy Policy explains how GuestCaddy LLC (“we,” “us,” or “our”) collects, uses, and shares information when you use ToFlintzani (the “Service”). By using the Service, you agree to this Policy.
1. Information we collect
- Email address — when you sign in via magic link, so we can authenticate you and attach your credits to your account.
- Coffee-cup photos — if you choose to upload one for a real-cup reading. See “How photos are handled” below.
- Purchase information — when you buy credits, our payment processor collects and processes your payment details. We do not receive or store your full card number.
- Usage and technical data — limited technical information such as your IP address, used to operate the Service and to prevent abuse (for example, rate-limiting), and basic in-session data stored in your browser to keep you signed in.
2. How we use information
- To provide the Service, authenticate you, and deliver readings;
- To process purchases and maintain your credit balance and transaction history;
- To protect the Service against fraud, abuse, and security threats;
- To respond to your requests and communicate about your account.
3. How photos are handled
When you upload a coffee-cup photo, it is transmitted to our AI provider to generate your reading. We do not store your photo in our systems after the reading is produced — it is processed transiently for that request. Your photo is not used to identify you and is not shared beyond what is necessary to generate the reading.
4. Service providers we share data with
We rely on trusted third parties to run the Service. Each processes only the information needed for its function:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Account, authentication, and database | Email, credit balance, transaction records |
| Resend | Sending sign-in emails | Email address, message delivery logs |
| Stripe | Payment processing | Email, payment details (handled by Stripe) |
| Anthropic | AI that generates readings | Reading inputs and any uploaded cup photo |
| Netlify | Website hosting and delivery | Technical/request data |
These providers act as our processors and are bound by their own terms and privacy commitments. We do not sell your personal information.
5. Data retention
We retain your account information (such as your email and credit balance) for as long as your account exists, and transaction records for as long as needed for our legitimate business and legal purposes. Uploaded photos are not retained after processing. You may request deletion of your account and associated data as described below.
6. Your choices and rights
Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to or restrict certain processing. To make a request, contact us at [CONTACT EMAIL]. We will respond as required by applicable law. You can stop receiving sign-in emails by not requesting them; these are transactional and necessary to use the Service.
7. Security
We use reasonable technical and organizational measures to protect information, including scoped access controls and encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Children
The Service is intended for users 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
9. International users
The Service is operated from the United States, and information may be processed in the United States and other countries where our providers operate. By using the Service, you understand your information may be transferred to and processed in these locations.
10. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
11. Contact
Questions or privacy requests: [CONTACT EMAIL], GuestCaddy LLC, [MAILING ADDRESS].