Privacy Policy

Version 2026-10-26

This page explains what data we collect, why, on what basis, who receives it, how long we keep it and how you can control it.

Who is responsible for the data

The data operator (the “controller” under GDPR) is ABC PHOTOSHOOT LLC, a Florida (USA) company, behind the Oracle / ABC AI Lab service at abcailab.com.

Data questions: abcphotoshootllc@gmail.com.
Postal address: on request at abcphotoshootllc@gmail.com.

What data we collect

• first and last name, date, time and place of birth: a calculation is impossible without them;
• e-mail address;
• phone number or messenger ID: needed to link Telegram or WhatsApp to your account;
• text diary entries, voice notes and their transcripts;
• other people’s data if you enter it yourself (for example for compatibility), and a child’s data if you order a report for the child;
• payment status (paid or not). We do not receive or store card data: the payment is handled by the payment service;
• free chart calculator: date, time and place of birth are sent to our server only to do the calculation; no account is needed. To open the full chart you give us your e-mail and we send the chart to it. The “Copy link” link contains the date, time and place of birth you entered: do not send it to anyone you do not trust. The date, time and city from the free calculator are not written to server logs;
• free chart by e-mail: the address you enter, the birth details you entered for that chart, whether you ticked “Send me occasional Oracle insights and offers”, and a record of that choice (time, the exact text and its version, a one-way hash of your IP address, language);
• technical data: web server logs (IP address, time, page address) for security and abuse protection, your cabinet token and your theme setting in your browser;
• an anonymous event counter on our pages (for example “payment page opened”): only the time and the event name are recorded, with no IP address, name or other data about you.

Why we use it and on what legal basis

For users in the European Economic Area, the UK and Switzerland, the GDPR bases are:

• Contract (Art. 6(1)(b)): calculations, reports, calendar, diary, subscription, payment and support.
• Your request (Art. 6(1)(b)): sending you the free chart you asked for by e-mail.
• Consent for offers (Art. 6(1)(a)): only if you ticked the box, we send a few e-mails about your chart with offers (over about a week) and, if you leave the payment page without paying, one reminder. Every such e-mail has a one-click unsubscribe link; after it we send no more offers. The box is never ticked in advance.
• Consent (Art. 6(1)(a) and Art. 9(2)(a)): transcribing voice notes and processing diary text in which you may yourself write about health, relationships, beliefs and other sensitive matters. These are separate optional boxes at registration. Without them the calendar and reports work, while the diary and voice are off. You can withdraw consent at any time; processing before withdrawal remains lawful.
• Legitimate interests (Art. 6(1)(f)): service security, abuse protection, anonymous visit statistics. You may object to this processing.
• Legal obligation (Art. 6(1)(c)): payment records and tax reporting.

We also compare forecasts recorded in advance with your diary. This rests on the same bases (contract and the diary consent), serves only you and is not published.

Special categories of data

In the diary and voice notes you may write about health, private life, beliefs and other highly sensitive matters. We do not ask for this and do not look for it, but if you write it, it is processed only after your explicit consent (a separate box at registration). You can edit and delete diary entries yourself. Texts showing signs of crisis are not sent anywhere beyond our own check.

Health data: the cycle calendar

Effective 2026-10-26 · version cycle-2026-10-v1

In your cabinet you can choose to keep a menstrual cycle calendar. It stays off until you turn it on yourself: that needs a separate consent (a checkbox on the screen where you turn it on; without it the section does not work) and your confirmation that you are 18 or older. The section opens only after signing in with a code or password, never from a link.

• What we keep: the dates you log (start and end), if you wish, marks of how you feel from a fixed list (no free text), your usual cycle length if you enter it, the setting for showing it in your cabinet calendar, and the record of your consent (version, date, language).
• Why: only to show you your calendar and an estimate of your next start from your own dates. The estimate is not a medical forecast; it is not suitable for contraception or for planning a pregnancy.
• Where and how: on our server, encrypted (AES-256-GCM, a separate key for each person), separately from the rest of your account. We keep no backup copies of this data and exclude it from our server backups, so a server failure can lose it.
• Who receives it: no one. Our VPS hosting provider stores the server’s disk; these files are encrypted on it. We do not sell this data and do not use it for advertising, analytics, forecasts, advice, reports or prompts to language models. It is not sent to messengers, to the calendar on your phone or to anyone else, and it is not written to server logs.
• Download and delete: the section has “Download my data” (JSON or CSV) and “Delete everything” buttons. After a deletion the data becomes unreadable at once: we destroy the key and the file.
• Withdrawing consent: when you turn the section off, the data is deleted at once. If you choose “Turn off and keep for 30 days”, it is kept switched off for at most 30 days and then deleted automatically. Deleting your account deletes this data too.
• Activity log: we record only the time and the kind of action (turned on, downloaded, deleted) with a pseudonymous code. Once your data is deleted, that code can no longer be linked to you; log entries are kept for at most 12 months.
• How long we keep it: until you delete it, withdraw your consent or delete your account.
• If something goes wrong: if this data leaks or is disclosed without your permission, we will tell you and, where the law requires it, the authorities (in the US, the Federal Trade Commission) within the time limits set by law.
• Your rights: access, a copy, deletion and withdrawal of consent — in your cabinet or by e-mail to abcphotoshootllc@gmail.com. For residents of US states with consumer health data laws (for example Washington, Nevada, Connecticut), this section is our consumer health data privacy policy.

Who receives the data

• Our own computers and server. Data is processed on our server (VPS) and on our computers. Voice notes are transcribed by a local model, and diary text is tagged only by our local language model; neither is passed to third-party AI services.
• VPS hosting provider — hosts the server on which the service runs.
• Language models for the report text. To write the explanations of your chart, the following may be used: Zhipu AI (z.ai), Anthropic, Google (Gemini), NVIDIA (NIM). They receive the chart calculation data (planet positions, aspects, numbers) and a service instruction; your e-mail address and phone number are not sent. The text may also be written on our own computers (including through the owner’s AI-service subscriptions connected to them).
• PayPal — accepting payments and refunds. We receive only the payment status and amount.
• Telegram and WhatsApp (Meta) — delivering messages and receiving your entries, as you choose. Those messages are also subject to the messengers’ own rules.

We do not sell data or pass it on for advertising or profiling. Data may be disclosed to public authorities only where the law requires it.

Transfers outside your country

We are in the USA, so your data is processed in the USA. For data of users from the EEA, the UK and Switzerland we rely on mechanisms allowed by GDPR (standard contractual clauses or the recipient’s participation in the EU–U.S. Data Privacy Framework). Details of the mechanism for a particular recipient are available on request.

How long we keep data

• free chart by e-mail: if you did not tick the offers box, your address and birth details are deleted as soon as the chart e-mail is sent (if it cannot be sent, the request is deleted within a day). If you ticked it, your birth details are kept until the last e-mail of the short series (about a week) and your address until you unsubscribe or ask us to delete it, at most 24 months after our last e-mail to you. When you unsubscribe we delete your address and birth details at once and keep only a one-way hash of the address, so that we never write to you again by mistake; to get offers again you confirm it from a link we send to that address. Records of your consent and of the e-mails we sent (with that hash, never the address) are kept as proof for up to 3 years;
• account data: while the account is active; after a deletion request we delete it within 30 days (backups within 90 days);
• voice files: deleted right after transcription; only the text remains;
• transcripts and diary entries: until you delete them or your account, but no longer than 24 months without activity;
• payment records: as long as accounting and tax law requires;
• server logs and the event counter: for the limited time needed for security and statistics.

Your rights and deletion

You have the right to access and receive a copy of your data, correct it, delete it, restrict or object to its processing, move it, and withdraw consent. Write to us: abcphotoshootllc@gmail.com, giving the address you registered with. We may ask you to confirm the request comes from you. We reply within 30 days.

You can delete diary entries yourself in the cabinet. To delete the whole account and the diary, write to us: we will delete the data except what we must keep by law (for example payment records).

If you believe we violate your rights, you may complain to the data protection authority of your country (in the EU, of your Member State). Residents of California and other US states with privacy laws have the same rights of access, deletion and correction; no opt-out from “sale” or “sharing” for advertising is needed because we do neither.

EU representative under Art. 27 GDPR: none appointed as of this version. If one is appointed, we will state it here.

To stop offers by e-mail, use the unsubscribe link in any of them: it works at once, without signing in. The e-mail with your free chart is sent only because you asked for it.

Cookies and analytics

We do not use advertising or third-party analytics cookies or third-party trackers. Fonts are loaded from our own server. Your browser stores only technical settings (theme choice, cabinet token). Visits are counted by an anonymous counter on our server (see above).

Language choice: if you pick a language (or accept the suggested one), your browser stores it in localStorage and in a cookie, both named oracle_lang (valid for 1 year, SameSite=Lax). The value is only en, ru or es. It is used only to show the site and messages in your language; it is not used for tracking, profiling or advertising. You can delete it in your browser settings at any time.

Security

We take reasonable protective measures: access to data is restricted and calendar links are personal. Nobody can guarantee complete protection, so do not send to the diary anything you would not trust to an online service.

Other people’s and children’s data

You enter another person’s data (for example for compatibility) only if you are entitled to and the person knows; at the request of either party we will delete it. A child’s data is entered only by a parent or legal guardian and only for the report ordered. We do not address children, send them messages or create accounts for them.

Voice notes

Voice notes are processed (turned into text by a neural network on our computers) only if you ticked the separate consent box at registration. Without it you can use the diary in text form. You can withdraw consent at any time by writing to us.

Age

The service is only for people who are 18 or over. We knowingly collect no data of minors; if you know of such a case, write to us and we will delete the data.

Changes

If this policy changes, the new version will appear on this page with a new date; for material changes we will notify you in advance (see the Terms of Use).