Privacy Policy

1. Who is responsible

NumeroClaw is operated by Istarian. Istarian is responsible for personal information under its control and acts as the controller or organization responsible for account, billing, website, and direct-customer information.

Our Privacy Lead is responsible for this policy and privacy requests. Contact the Privacy Lead at hello@numeroclaw.com.

2. Scope and customer roles

This policy covers numeroclaw.com, the NumeroClaw account portal and administration surfaces, reading creation and publication, downloads, API and webhook services, purchases, support, and marketing measurement.

Professional customers may submit information about their own clients or other reading subjects. For that information, the customer decides why the reading is created and is responsible for the required notice, authority, and consent. Istarian processes it to provide NumeroClaw and may act as the customer's service provider or processor where applicable.

3. Information we collect

Account and contact information. Email address, display name, authentication identifiers, workspace membership, account settings, brand contact details, API-key records, and support or privacy correspondence.

Reading and branding information. Depending on the product, this can include birth and current-use names, date of birth or calendar day, pronunciation choices, name-use context, optional presentation name, opening note, logo, brand name, colors, website, phone number, footer text, customer metadata, generated interpretations, and document files.

Transaction information. The offer, price, currency, tax status, Stripe customer and transaction identifiers, subscription status, credits, invoices, receipts, refunds, disputes, and billing history. Stripe collects and controls full card details; NumeroClaw does not store them.

Technical and usage information. IP address, browser and device details, request time, routes and features used, authentication and security events, generation status, API usage, webhook configuration and delivery status, error diagnostics, and audit logs.

Information from others. We receive payment and subscription status from Stripe, authentication data from Supabase, consented measurement data from Google and Meta, and information sent by a workspace owner, authorized user, API client, or support requester.

4. Why we use information

We use personal information to create and manage accounts; authenticate users; process orders and subscriptions; allocate and reconcile credits; calculate, generate, quality-check, publish, and deliver readings; apply customer branding; provide downloads, APIs, and webhooks; respond to requests; prevent abuse and fraud; secure and troubleshoot the service; comply with law; keep financial and audit records; and establish, exercise, or defend legal claims.

Where applicable law uses legal bases, we rely on performance of our contract, compliance with legal obligations, our legitimate interests in operating and protecting the service, and consent for optional analytics or advertising measurement. We ask for new consent before using personal information for a materially different purpose when required.

5. Analytics and advertising measurement

We use Google Analytics, Meta Pixel, and Meta Conversions API to understand visits, measure advertising, and learn which product journeys are useful. They may receive the page URL, browser and device information, approximate location derived from the network connection, cookie or device identifiers, and events such as viewing a product, starting checkout, registering, or completing a purchase.

We do not send names, email addresses, dates of birth, reading inputs, generated content, or account content to Google or Meta through this tracking. Where prior consent is required, browser analytics stays off until you allow it. Elsewhere, browser analytics loads after a location check and can be turned off at any time through Privacy choices. Server-side Meta purchase measurement requires your explicit permission. Essential storage used for authentication, security, checkout continuity, and your privacy choice does not require advertising consent.

The location check uses the country and, where needed, the state or province associated with your connection. It returns only whether prior consent is required and does not store that location. If the check fails or cannot resolve your location, analytics stays off until you allow it. Your saved choice still applies.

6. Service providers

We disclose the information needed to providers that help operate NumeroClaw. Current provider categories include Supabase for authentication and data services; Stripe for payments, tax, invoicing, and billing management; Vercel, Railway, and Cloudflare for hosting, delivery, networking, and security; email providers for account and service messages; and Google and Meta for consented measurement.

Some reading workflows use model providers to assist with generation or quality review. We limit provider requests to the material needed for the task and design current workflows to reduce direct identifiers at that boundary where feasible. Providers may process generated or structured content that can still relate to a reading subject.

Providers act under their own terms and data-protection commitments. We may replace a provider or add another provider performing the same function. We remain responsible for personal information under our control as required by law.

7. Other disclosures

We may disclose information to professional advisers, auditors, insurers, regulators, courts, law enforcement, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse or fraud, or establish and defend legal claims.

If Istarian is involved in a financing, reorganization, merger, acquisition, or sale of assets, information may be reviewed or transferred subject to confidentiality, applicable law, and continued protection. We do not sell personal information for money. Where applicable law treats consented advertising measurement as a “sale,” “sharing,” or targeted advertising, you can opt out through Privacy choices.

8. International processing

NumeroClaw and its providers may process information in Canada, the United States, Europe, and other countries where they operate. Those countries may have different privacy laws, and lawful authorities there may be able to access information.

Where required, we assess transfers and use contractual, organizational, or other recognized safeguards. Contact the Privacy Lead for information about safeguards relevant to your data.

9. Published readings and sharing

Workspace readings are not intended to become public unless an authorized user deliberately publishes or shares them. A public or shareable reading link can expose names, dates, calculated values, interpretations, and branding to anyone with the link and may be indexed, cached, downloaded, or redistributed.

Customers must confirm they have authority from the reading subject before publishing. Deleting or unpublishing a hosted reading cannot remove copies already downloaded, cached, indexed, or shared elsewhere.

10. Retention and deletion

We retain account, reading, publication, and operational information while the account or service relationship is active and as needed to provide downloads, reruns, support, security, and auditability. We retain transaction, tax, anti-fraud, dispute, and legal records for the periods required or permitted by law. Backup copies and logs are removed on their normal protection cycles.

When information is no longer reasonably needed, we delete it, de-identify it, or restrict it to an authorized legal or security purpose. A deletion request does not require us to delete records that must be retained for tax, accounting, dispute, fraud-prevention, security, or other legal reasons.

11. Security

We use administrative, technical, and organizational safeguards appropriate to the nature of the information, including access controls, authentication, encrypted network transport, restricted operational access, logging, and separation of public and private surfaces. No online service can guarantee absolute security.

You are responsible for protecting account credentials, API keys, downloaded files, webhook endpoints, and public links, and for notifying us promptly if you suspect unauthorized access.

12. Your privacy rights

Depending on where you live, you may have rights to know whether we hold your personal information; access it; correct inaccurate information; receive a portable copy; withdraw consent; object to or restrict certain processing; opt out of sale, sharing, or targeted advertising; request deletion; or complain to a privacy regulator. Rights may be limited by law, the rights of others, security, privilege, and required record retention.

Submit a request from the account email to hello@numeroclaw.com. Describe the account, workspace, integration, reading, or link involved. We may verify identity and authority before acting and will respond within the period required by applicable law. Authorized agents may be required to provide written authority.

You may also complain to the privacy regulator that applies where you live. We invite you to contact our Privacy Lead first so we can try to resolve the issue directly.

13. Account and data deletion

To request deletion of a NumeroClaw account and associated personal information, email hello@numeroclaw.com from the address linked to the account with the subject “Data deletion request.” If the request concerns an integration, workspace, reading subject, or published link, identify it in the message.

We will verify control or authority, delete or de-identify information that is no longer required, and confirm completion. If a professional customer submitted your information, we may refer the request to that customer because it controls the client relationship and the purpose of the reading.

14. Automated processing and numerology

NumeroClaw uses deterministic calculations and, for some products, model-assisted generation to produce interpretive readings. This processing does not make legal or similarly significant decisions about a person. Customers must not use readings for employment, credit, housing, insurance, medical, legal, educational-admission, or other high-impact decisions.

15. Children

NumeroClaw accounts are not directed to children, and children may not create accounts. A professional customer who submits information about a minor must have the authority required by law, use only information necessary for the requested product, and avoid public sharing unless lawfully authorized.

16. Changes and contact

We may update this policy as the service, providers, or law changes. We will post the revised effective date and give additional notice where required. Materially different uses of information will not be applied retroactively without the notice or consent required by law.

Contact the Privacy Lead at hello@numeroclaw.com for questions, complaints, access requests, or information about service providers and international safeguards.