Skip to content

Your Data Rights

Last updated: 23 April 2026 · Version 1.0

Who This Applies To

These rights are available to everyone with a MyOracle account, regardless of location. Residents of the European Economic Area (EEA) and the United Kingdom have these rights under the General Data Protection Regulation (GDPR); California residents have them under the California Consumer Privacy Act (CCPA / CPRA); and Australian residents have them under the Australian Privacy Principles (APPs 12 & 13). We extend the same workflow to everyone.

1. Right to Access Your Data (Export)

You can download a complete copy of the personal data we hold about you at any time. The export includes your profile, birth data, subscription status, chat conversations, and daily chat usage records, delivered as a JSON file.

How to request: Sign in, go to Account, scroll to "Account Actions", and click Download my data. The file is generated on demand and streamed to your browser — it is not persisted on our servers. The underlying endpoint is /api/user/export and is authenticated with your session.

Turnaround: immediate (typically under five seconds). Under GDPR Art. 12(3) we are required to respond within one month; we respond within the same browser request.

2. Right to Correct Your Data

You can update your display name, email, birth data, and preferences at any time via Account. For data we hold that cannot be edited in-app (for example, historical audit logs), email contact@myoracle.me with the correction and we will apply it within 30 days.

3. Right to Delete Your Data (Erasure)

You can request complete deletion of your account and all associated personal data. Deletion removes your profile, chat conversations, daily usage records, affiliate attribution, and Supabase auth record.

How to request: Sign in, go to Account, scroll to "Account Actions", and click Request account deletion. You will be asked to confirm by typing your email. The underlying endpoint is /api/user/delete and:

  • Cancels any active Stripe subscription immediately (no further charges)
  • Deletes your chat_conversations, daily_chat_usage, and profiles rows
  • Deletes your auth.users record, which cascades to all foreign-keyed tables

What we cannot delete: Stripe retains payment records under financial-regulation obligations (typically seven years) independently of our deletion. We can delete the stripe_customer_id link on our side but not Stripe's underlying invoice history. If you want your Stripe data purged, contact Stripe directly — but note that most jurisdictions legally require Stripe to retain it.

Turnaround: immediate (typically under two seconds). There is no grace period — deletion is irreversible.

4. Right to Data Portability

The export described in §1 is delivered as JSON, a machine-readable format. You may import this file into any compatible service or re-use it personally. If you need a different format, email us and we will accommodate reasonable requests.

5. Right to Restrict or Object to Processing

You can withdraw consent for any optional data processing at any time. Marketing communications can be disabled from your account preferences. Data processing that is necessary to deliver the service (authentication, billing, astrological calculations) can only be stopped by deleting your account.

6. Right to Opt Out of Sale / Sharing (CCPA)

MyOracle does not sell or share your personal information, as those terms are defined by the CCPA / CPRA. We have no advertising relationships, no data brokers, and no cross-context behavioural advertising. There is therefore nothing to opt out of. The "Do Not Sell or Share My Personal Information" link required by California law is this section; clicking it is a no-op because no sale or sharing occurs.

7. Right to Non-Discrimination

Exercising any data right will not result in denial of service, different pricing, or reduced quality. Requests are handled the same way regardless of who you are.

8. Right to Lodge a Complaint

If you believe we have mishandled your data, email us first at contact@myoracle.me and give us 30 days to respond. If you remain dissatisfied, you may also lodge a complaint with:

  • Australia: Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au
  • EU / UK: your national data protection authority. A complete list is maintained by the European Data Protection Board.
  • California: California Privacy Protection Agency — cppa.ca.gov

9. Verification

All data rights are exercised through your authenticated session in the app. That is the verification mechanism: if you are signed in, you are presumed to be the account owner. For email requests sent to contact@myoracle.me, we may ask you to confirm via the email address on file before actioning sensitive changes.

10. Contact

For any data-rights question:
Email: contact@myoracle.me
Subject line "Data Rights" for fastest routing.