Privacy Policy

Who We Are

Your Personal Profile ("we", "us", "our") operates YourPersonalProfile.com (the "Service"). Contact: support@yourpersonalprofile.com. Location: United States of America.

What We Collect

• •Assessment Data: Your answers and generated summaries/reports.
• •AI Chat Data: Messages you send to our AI Personality Assistant and the generated responses.
• •Account/Contact Data: Name (optional), email (for receipts/support), and any messages you send us.
• •Payment Data: Processed by Stripe. We receive confirmation details (e.g., payment intent IDs, last 4 digits for receipts) but not full card numbers.
• •Usage & Device Data: IP/country, timestamps, basic device/browser info, and error logs for security and diagnostics.
• •Error Monitoring: We use Sentry for error tracking and performance monitoring to improve service reliability. This includes error messages, stack traces, and basic context.
• •Cookies/Local Storage: Essential cookies necessary for core functionality (e.g., session/auth). We do not currently deploy non-essential analytics cookies.

How We Use Data

• •Provide and improve the Service; generate and cache reports; secure our systems.
• •Process AI chat conversations to provide personalized personality insights.
• •Process payments and deliver receipts (Stripe).
• •Communicate about your purchase, service updates, and support.
• •Monitor and troubleshoot errors to maintain service quality.
• •Comply with legal obligations (e.g., tax/financial record-keeping).

Legal Bases (EEA/UK only)

• •Contract: To provide the Service you request (assessment, paid reports, AI chat).
• •Legitimate interests: Secure operations, prevent fraud, improve features.
• •Consent: Would apply if we add non-essential analytics/marketing cookies in the future.
• •Legal obligation: Record-keeping and compliance.

Sharing & Processors

We do not sell your personal information. We share data with service providers that help us run the Service:

• •Stripe (payments & receipts)
• •Supabase (Postgres database, Storage with signed URLs)
• •OpenAI (AI model processing to generate structured summaries and power the AI Personality Assistant)
• •Sentry (error tracking and performance monitoring)
• •Email provider: GoDaddy (email hosting) for notifications

We may also share information to comply with the law, to protect rights/safety, or during a merger/acquisition.

International Transfers

Your information may be processed in countries different from your own. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) with our providers.

Data Retention

• •Assessment data, chat messages, and generated files: retained until you delete them or request deletion.
• •Payment/transaction records: retained for up to 7 years (or as required by law).
• •Logs & diagnostics: typically 30–180 days.
• •Cached AI outputs: kept to speed up your experience and reduce costs; cleared if you delete your data.

Security

We use encryption in transit (HTTPS), Supabase RLS for row-level access controls, private Storage buckets with signed URLs, and role-based operational access. No method of transmission or storage is 100% secure.

Your Rights

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to processing. To exercise these, email support@yourpersonalprofile.com. If you're in California, you can also request details about data disclosure and ask us to limit or refrain from sharing where applicable.

Children's Privacy

The Service is not intended for children under 16. If you believe a child has provided us data, contact support@yourpersonalprofile.com to request deletion. Paid use requires legal ability to contract, typically 18+.

Cookies & Analytics

Essential cookies only. We currently do not deploy Google Analytics, Vercel Analytics, or other non-essential cookies. If we add analytics in the future, we will update this policy and provide appropriate in-product controls where required.

Changes to This Policy

We may update this policy. We'll revise the Effective date and, if changes are material, provide additional notice (e.g., banner or email).