Privacy Policy

This policy explains what personal data MJ Generation LLC ("Fatessia", "we", "us") collects when you use the Fatessia website and services (the "Service"), why we use it, who helps us process it, how long we keep it, and the rights you have. Birth details and personal questions matter to people, so we collect as little as we can and treat them with extra care.

1. Who is responsible

• Controller: MJ Generation LLC, [ADDRESS]. Privacy contact: [PRIVACY EMAIL].
• EU representative (GDPR Art. 27): [EU REPRESENTATIVE NAME AND ADDRESS, or "not appointed" if not required].
• UK representative (UK GDPR Art. 27): [UK REPRESENTATIVE NAME AND ADDRESS, or "not appointed"].
• Brazil – contact for data subjects (encarregado / LGPD Art. 41): [NAME OR ROLE], [PRIVACY EMAIL].
• Mexico – person or department in charge of personal data requests: [NAME OR ROLE], [PRIVACY EMAIL].

2. What we collect and why

Usage events never contain your birth date, time or place, name, email address, free-text answers or chat text. Our code removes these fields before any event is sent to our analytics provider; at most an age bracket or a chart element (for example "Fire") is recorded.

We do not ask for payment card numbers; the payment provider collects them directly.

3. Sensitive information and explicit consent

Birth date and time are not, by themselves, "special category" data under the GDPR. However, some optional inputs and the text you write can reveal sensitive information, such as your sexual orientation or sex life, religious or philosophical beliefs, or health. Under EU and UK law (GDPR Art. 9), Brazilian law (LGPD Art. 11), Mexican law and several US state laws, this is sensitive data.

• We only process these inputs with your explicit consent, which you give by ticking a separate box before submitting them. These inputs are always optional and you can choose "Prefer not to say".
• We use them only to write the reading or chat answer you asked for. We do not use them for advertising, we do not sell them, and we never send them to analytics.
• You can withdraw consent at any time by deleting the person, reading or chat, or your whole data, from your profile page. Withdrawal does not affect processing already done.
• Please do not write health details, contact details or other people's private information in free-text fields.

4. How readings and chats are produced (AI)

We calculate your chart ourselves. To write text, we send the following to our AI model provider: the calculated chart values, the first name or nickname you entered (and your partner's, if any), the optional answers relevant to the chapter, your free-text concern or chat message, and the language. We do not send your email address or payment data. The provider processes this data on our behalf to generate the text and, under its commercial terms, does not use it to train its models. [LLM RETENTION: e.g. "The provider may keep inputs and outputs for up to 30 days for abuse monitoring, then deletes them" — confirm with the provider's current terms.]

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. A reading is entertainment content, not a decision about you.

5. Who processes data for us (processors and service providers)

Payment providers act as independent controllers for some purposes (for example fraud prevention and legal obligations) under their own privacy policies.

We may also disclose data when required by law, to protect our rights or users' safety, or to a buyer of our business (who must respect this policy).

We do not sell your personal data and we do not "share" it for cross-context behavioural advertising. If we ever add advertising pixels, we will update this policy, ask for consent where required, and honour opt-outs including Global Privacy Control (GPC) signals.

6. International transfers

We are based in the United States and our providers mostly process data in the United States. When we transfer personal data from the EU, UK, Switzerland, Brazil or other countries with transfer rules, we rely on the EU-US Data Privacy Framework (and its UK extension) where the recipient is certified, or on Standard Contractual Clauses (and the UK Addendum) or other safeguards recognised by the law of your country. For Brazil, we use the standard contractual clauses approved by the ANPD where required. You can ask us for a copy of the safeguards at [PRIVACY EMAIL].

7. Cookies and similar technologies

We use a small number of cookies: strictly necessary ones (sign-in, security, your market and language), a preference cookie (display style), and an attribution cookie that remembers which campaign brought you (30 days). In the EU and UK we only set the attribution cookie after you agree. See the Cookie Notice for the full list.

8. Your rights

You can see, edit and delete the people and readings saved in your account, and delete all your data from your profile page ("Delete my data"). For any other request, email [PRIVACY EMAIL]. We will reply within the time required by your local law (for example one month under the GDPR, 15 days under the LGPD, 20 business days under Mexican law, 45 days under US state laws). We may need to verify your identity. We will not discriminate against you for exercising your rights.

EU, EEA, UK and Switzerland. Access, rectification, erasure, restriction, data portability, objection (including to processing based on legitimate interests), and the right to withdraw consent at any time. You can complain to your local data protection authority (list: https://edpb.europa.eu/about-edpb/about-edpb/members_en; UK: ico.org.uk).

United States (California, Colorado, Connecticut, Virginia, Texas, Oregon, and other states with privacy laws). Depending on your state, you have the right to know/access, correct, delete, obtain a portable copy, and opt out of sale, sharing for targeted advertising and profiling. We do not sell or share personal data and do not use it for targeted advertising or profiling with significant effects. We only process sensitive personal information (such as sexual orientation) with your consent and only to provide the service you asked for. You may use an authorised agent. If we deny your request, you can appeal by replying to our decision; if the appeal is denied, you may contact your state Attorney General.

Brazil (LGPD). Confirmation of processing, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about sharing, information about the possibility of refusing consent and its consequences, withdrawal of consent, and review of automated decisions. You may complain to the ANPD (gov.br/anpd).

Mexico (LFPDPPP). Access, rectification, cancellation and opposition (ARCO rights), withdrawal of consent and limitation of use or disclosure. Send your request to [PRIVACY EMAIL] with your name, contact email, a description of the request, and proof of identity. We will respond within 20 business days and act within 15 business days after our response. Our full privacy notice for Mexico is this document.

Korea (PIPA). Access, correction, deletion, suspension of processing, and withdrawal of consent, plus the right to be told who has received your data. Our personal information protection officer is [NAME OR ROLE], [PRIVACY EMAIL]. Because we are not established in Korea, we provide this document as the notice required before collection: what is collected, why, how long it is kept and who processes it are in sections 2, 5 and 9. You may report a dispute to the Korea Internet & Security Agency (privacy.go.kr, 118) or apply to the Personal Information Dispute Mediation Committee.

Japan (APPI). Disclosure of the personal data we hold about you, correction, addition or deletion, suspension of use or of provision to third parties, and disclosure of our records of third-party provision. Our contact for these requests is [PRIVACY EMAIL]. The purposes of use are in section 2 and the parties we entrust data to are in section 5.

Taiwan (Personal Data Protection Act). Enquiry and review, a copy of your data, supplementation or correction, and a demand that we stop collecting, processing or using it, or delete it (art. 3). You may refuse to provide the optional answers in the funnel; the consequence is only that the reading is less specific, which is also the point of section 3. Requests go to [PRIVACY EMAIL].

Hong Kong (PDPO). A data access request and a data correction request under the Personal Data (Privacy) Ordinance, addressed to [PRIVACY EMAIL]. We may charge no more than the direct administrative cost of complying. You may complain to the Office of the Privacy Commissioner for Personal Data (pcpd.org.hk).

Canada (PIPEDA and provincial laws, including Quebec). Access and correction, withdrawal of consent, and complaint to the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec. Our person in charge of personal information is [NAME OR ROLE], [PRIVACY EMAIL].

9. Deletion

"Delete my data" in your profile immediately removes your saved people, birth details, readings access, chats, credits and contact details, and signs you out. We keep order records only as required by tax and accounting law, with your name and email removed or pseudonymised. Backups are overwritten within [35] days.

10. Security

We use encryption in transit (HTTPS), access controls, signed links and cookies, and we keep birth details and personal answers out of logs and analytics. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.

11. Children

The Service is only for adults (18+). We do not knowingly collect data from anyone under 18 (or under 13 for the purposes of the US Children's Online Privacy Protection Act). If you believe a minor has given us data, contact [PRIVACY EMAIL] and we will delete it.

12. Changes

We will post any change here with a new date. If a change is significant, we will tell you by email or in the Service before it applies, and ask for consent again where the law requires.

13. Attribution

City search uses data from GeoNames (geonames.org), licensed under Creative Commons Attribution 4.0.

14. Contact

MJ Generation LLC · [ADDRESS] · [PRIVACY EMAIL]