Privacy Policy | VerHoro

1. Information We Collect

Depending on the features you use, we collect the following information:

1.1 Account Information

Name supplied by AIVerID OAuth
Email address (from AIVerID OAuth)
Identity verification level

1.2 Birth Information

Date of birth, time of birth, place of birth
Latitude, longitude, time zone
Purpose: Used to compute astrological charts (Thai, Western, Chinese, Vedic systems).

1.3 Palm and Face Photographs

Palm photographs (for palm reading)
Face photographs for face readings
The image features and interpretations returned by the analysis; we do not use these readings to verify your identity.
Retention: You choose what happens to your palm/face photos, in the consent box before uploading or later in your profile: don’t keep them (only the written reading is saved), keep them for 90 days (the default), or keep them until you delete them. With 90 days, the photos and the reading saved with them are scheduled for deletion when the period ends. You can delete a saved photo on its reading page at any time. A new choice also applies to photos already saved, except photos whose deletion has already started. A new reading replaces the previous one and its photos. Deleting your account removes your photos whatever you chose.
Processing: The current image-reading service sends photographs to Anthropic (Claude) for analysis. Images read for a Pro client are processed for that session and are not saved in the account’s image library.

1.4 Usage Information

Reading history, saved readings, conversations, feature usage and, if used, client records or LINE subscription details
API costs (for cost-control purposes)
IP address, User-Agent (for PDPA consent records)

2. Purposes of Processing

Fortune-telling services: Calculate and present readings using the systems available in the service.
AI analysis: Send the information needed for your chosen AI feature, such as questions, conversation context, birth details or images, to Anthropic.
Service improvement: Use service events and technical logs to understand usage and investigate errors. These records are not guaranteed to be anonymous.
Security: Prevent misuse of the service.

3. Disclosure to Third Parties

Data is processed by the following providers according to the features you use and whether those services are enabled. Processing may take place outside your country.

Anthropic (Claude AI): Receives prompts, relevant reading/conversation context and uploaded images for AI analysis.
Anthropic states that commercial API inputs and outputs are not used for model training by default. Its standard API retention is up to 30 days, with exceptions for safety, legal requirements and agreed terms. This is not a promise of zero data retention.
Supabase and Vercel: Host the database, stored images and website, and process the technical data needed to operate them.
Stripe: Processes checkout and billing when payments are enabled. We store billing identifiers and subscription records, not full payment-card details.
AIVerID: Handles sign-in and provides your member identifier, name, email and verification level.
Google Maps and Google Analytics: Maps receives place-search text and selected place IDs. Analytics starts when you visit unless you have turned it off in “Cookie settings”; it receives page paths and the service events listed in section 7 and may use cookies and device identifiers, so this is not fully anonymous processing.
Upstash: When configured, processes rate-limit identifiers such as an account ID or IP address and request counters.
LINE and email delivery: If you use LINE, LINE processes your messages and replies; VerHoro may store your LINE user ID, birth date and subscription preference. When email delivery is configured, the mail provider receives your email address and message content.

Anthropic’s retention policy Anthropic’s model-training policy

We do not sell or rent your data to any third party.

4. Data Retention (PDPA Retention Policy)

Data Type	Retention Period
Saved palm/face reading images and analysis records	Your choice: not kept (only the written reading is saved), 90 days (the default), or until you delete them. With 90 days, a scheduled daily job removes eligible photos and the reading saved with them in batches; backlogs or failures can delay completion and are retried. A reading kept without photos stays until a new reading replaces it or you request deletion.
AI conversations	Until deleted through a data or account deletion request. There is currently no automatic 365-day deletion.
Birth data, astrological charts	Until you delete the relevant record or request data/account deletion; cached copies may expire sooner.
Account data	Until account deletion, with the repeat-use prevention exception described below. LINE records are separate from your web account.

You can delete a saved palm/face photo on its reading page, change your photo choice or request account deletion in your profile, or email us about other data deletion. Processing may fail or require follow-up; a request is not proof that erasure is complete. These periods describe active VerHoro records, not guaranteed deletion times for provider logs or backups. Retry records may retain image paths and an account identifier until image removal succeeds.

When an account that had an introductory trial or grandfathered access, or that used palm or face reading, is deleted, we retain a SHA-256 hash of the normalized email (or AIVerID when no usable email is available), and for palm and face reading also a hash of the AIVerID, together with which of these it used and when, so the trial and the free one-time palm and face readings are not granted again. This record has no automatic expiry. A hash is not a guarantee of anonymity.

5. Your Rights Under the PDPA

These requests are subject to applicable legal conditions. Contact us if a control is unavailable or a request fails.

1. Right of access: You may request to view the personal data we hold about you.
2. Right to rectification: Edit supported profile fields in your account, or contact us to request a correction.
3. Right to erasure:
- Delete a saved palm/face photo yourself on its reading page, or request deletion of saved images and their analysis records. If images remain or deletion fails, contact us for follow-up.
- Request deletion of reading and related account data while keeping your account and billing records. Contact us for any records that remain.
- Request deletion of your VerHoro account after confirmation. This does not delete your AIVerID or LINE account, or records retained by payment providers; the trial ledger described above remains.
4. Right to restrict processing: Contact us to request a restriction on processing, subject to applicable conditions.
5. Right to data portability: Contact us to request a copy or transfer of your data where applicable. We do not currently provide a complete account-data download in JSON or PDF.
6. Right to object: Contact us to object to processing or withdraw a consent. Some features need that consent to work.

6. Security Measures

Encryption: We use HTTPS for the website. Storage encryption and backup protection also depend on our hosting providers and their configuration.
Access controls: Server-side ownership checks and database permissions protect private records. If you create a public reading link, anyone with that link can access the shared result.
Photo deletion: With the 90-day choice, saved palm/face photos become eligible for deletion when the period ends, and a daily batch job removes them and retries failed removals. When you delete a photo yourself or choose not to keep photos, it is detached from your reading at once and its file is removed straight away; a removal that fails stays queued for retry. None of this erases copies in other saved readings or provider backups.
Rate Limiting: API usage is rate-limited to prevent abuse.

7. Use of Cookies

We use cookies and browser storage for the following purposes:

Maintain your login session (necessary)
Measure page views and service events with Google Analytics, starting when you visit unless you have turned it off in “Cookie settings”. It receives the page path (without query text, page title or referrer) and these steps: starting and finishing the rising-sign check on the home page, saving that result, opening the monthly page from it, the system type of your first reading, clicking sign in, saving a reading, changing the lagna method you use (from/to method and which reading page), viewing pricing, starting checkout (plan) and a completed purchase (plan, currency and amount). Analytics may set cookies and use device identifiers, and Google may also record general technical details such as browser, device type, approximate location, scrolling and clicks on links to other sites. You can turn measurement off at any time in “Cookie settings”; while it is off, Analytics does not load.
To measure usage, we also count successful reading categories, entry types, share actions and outcomes, and fixed channel, medium, campaign and content codes from an approved list. Arbitrary URL query values, birth data, photos and reading text are excluded. Campaign codes remain valid in this browser for up to one hour after a campaign visit. Temporary browser data prevents duplicate result counts within a 30-minute activity period and Bangkok calendar date.
Remember preferences such as theme, language and sound settings.
Remember your analytics preference in this browser for future visits.
Count free Tarot Mini readings on this device (necessary): a random ID with no personal information, sent only to the Tarot Mini service and kept in your browser for up to a year. We keep only a scrambled form of it, for a few days.

You can change your analytics choice at any time with “Cookie settings” in the home-page footer or the button below. If you turn measurement off, Analytics stops sending data, the page may reload, and we try to remove its first-party cookies (_ga) from this browser. Blocking necessary cookies may prevent sign-in. Contact us about other privacy choices.

8. Contact Us

If you have questions about this policy, please contact:

Data controller: จิตรพล พฤกษ์ภัทรกุล (Jittapol Prukpatarakul)

Controller contact: verhoro.xyz@gmail.com

Email: verhoro.xyz@gmail.com

Privacy contact: VerHoro team, via the email above

9. Changes to This Policy

Updates will be published on this page with a revised date. Please check this page when you want to review the current policy.