Privacy Policy

Last updated: March 2026

Vela Journal ("we," "us," or "our") operates the Vela tarot journal service. This policy explains how we collect, use, and protect your personal data when you use our website and app.

Data We Collect

We collect information you provide and data generated by your use of the service:

• Account data: Email address, name (if provided), and password when you sign up.
• Usage data: Your readings, card draws, mood tags, life area tags, reflections, and pattern data you log in Vela.
• Payment data: Billing is handled by Stripe. We do not store full card numbers. We receive subscription status and billing identifiers.
• Technical data: IP address, browser type, device info, and usage patterns (e.g., pages visited, features used) for security and improvement.
• Cookies and similar tech: We use essential cookies for session management and optional analytics to understand how the site is used.

How We Use Your Data

We use your data to:

• Provide and operate the Vela service, including your journal, pattern reports, and Year in Cards.
• Process payments and manage your subscription.
• Send service-related emails (e.g., launch notifications, account updates).
• Improve the product, fix bugs, and develop new features.
• Comply with legal obligations and enforce our terms.

Data Sharing

We do not sell your personal data. We share data only with trusted processors who help us run the service:

• Hosting: Vercel (website and app infrastructure).
• Payments: Stripe (subscription billing).
• Email: Formspree (waitlist signups) and our email provider for transactional messages.

These processors are bound by contracts that limit how they use your data. We may also disclose data when required by law or to protect our rights and safety.

Data Retention

We keep your data for as long as your account is active. If you close your account, we delete or anonymize your personal data within 30 days, except where we must retain it for legal or legitimate business purposes.

Your Rights

Depending on where you live, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correct: Ask us to fix inaccurate or incomplete data.
• Delete: Request that we delete your personal data.
• Portability: Receive your data in a structured, machine-readable format.
• Object or restrict: Object to certain processing or ask us to restrict it.
• Withdraw consent: Where we rely on consent, you may withdraw it at any time.

If you are in California, you also have the right to know what we collect, to opt out of the "sale" of personal information (we do not sell), and to non-discrimination for exercising your rights.

To exercise any of these rights, email us at hello@velajournal.app. We will respond within 30 days.

Cookies

We use essential cookies to keep you logged in and the site functioning. We may use analytics cookies to understand usage. You can control cookies through your browser settings.

Security

We use encryption in transit (HTTPS) and at rest, access controls, and secure authentication. No system is perfectly secure; we take reasonable steps to protect your data but cannot guarantee absolute security.

International Transfers

Your data may be processed in the United States or other countries where our processors operate. We ensure appropriate safeguards (e.g., standard contractual clauses) when required by law.

Children

Vela is not intended for anyone under 16. We do not knowingly collect data from children. If you believe we have collected a child's data, contact us and we will delete it.

Changes

We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date. For material changes, we will notify you by email or a notice in the app. Continued use after changes means you accept the updated policy.

Contact

Questions about this policy or your data? Email us at hello@velajournal.app.