Privacy Policy

This Privacy Policy explains how ReadMind, available at readmind.co (the “Service”, “we”, “us”), collects, stores, uses, shares, and protects your personal data, and your rights regarding it. Please read it carefully before using the Service.

1. Definitions

• GDPR refers to the General Data Protection Regulation (EU) 2016/679.
• EEA includes all Member States of the European Union and the European Economic Area.
• CCPA refers to the California Consumer Privacy Act of 2018.
• Process includes collecting, storing, using, transferring, and disclosing personal data.

2. Data Controller

The data controller responsible for processing your personal data is:

Ornitorenk Dijital Hizmetler Anonim Şirketi
Maslak Mah. Taşyoncası Sk. Maslak 1453 No: 1G İç Kapı No: 45 Sarıyer / İstanbul 34485 Türkiye

For data protection–related inquiries, contact us at legal@stoikk.com.

3. Categories of Personal Data Collected

We collect personal data that you voluntarily provide and data that is automatically collected when you use the Service.

3.1 Data You Provide

• Screenshots and images you upload. These may contain the content of your conversations and personal data about you and about other people (for example, names, profile photos, and message text).
• Your email address, which you provide at checkout so we can send your receipt and grant access (collected via our payment processor).
• Communications you send us when you request support or report an issue.

ReadMind does not require an account, password, or date of birth. To generate your reading, the image you upload is sent to a third-party AI provider for analysis (see Section 8). We do not retain your uploaded screenshot on our servers after your reading has been generated; the reading itself is held only within your browser session.

3.2 Data We Collect Automatically

• Referral and attribution data: information about how you arrived at the Service, including advertising click identifiers.
• Cookies and similar technologies: used to distinguish users and analyze usage (you may control cookies through your browser settings).
• Browser and device data: IP address, language, location, time zone, device type and model, operating system, ISP, and similar technical identifiers.
• Transaction data: payment-related information such as transaction date, amount, and payment method.
• Usage data: interaction data such as features used, session duration, and activity frequency.

4. Purposes of Data Processing

We process personal data to:

• Provide and maintain the Service and generate your readings
• Improve and develop our services
• Customize your experience
• Process payments
• Prevent fraud and enforce our legal terms
• Communicate with you
• Conduct marketing and advertising, including measuring and delivering campaigns
• Provide customer support
• Comply with legal obligations

5. Legal Basis for Data Processing (EEA Only)

Under GDPR, we rely on the following legal bases:

• Consent
• Contract performance
• Legitimate interests, unless overridden by your rights
• Legal obligations

6. California Privacy Rights

This section applies only to California residents. Under the CCPA, California residents may request information regarding the disclosure of personal data for direct marketing purposes. Requests must include “California Privacy Rights Request” in the subject line and be sent to legal@stoikk.com.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law. Uploaded screenshots are not retained after your reading is generated. Certain data (such as transaction records) may be retained for legal compliance, dispute resolution, and fraud prevention.

8. Sharing Your Personal Data

We share personal data with third parties only as necessary to operate and improve the Service.

8.1 Service Providers

This includes, for example:

• AI providers that analyze your uploaded screenshot to generate your reading (Google, the provider of the Gemini model we use);
• Payment processing (for example, Stripe);
• Advertising and analytics partners (for example, Meta) to measure and deliver campaigns;
• Hosting and error-monitoring providers.

8.2 Law Enforcement

When required to comply with legal obligations or protect our rights.

8.3 Business Transfers

In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of business assets.

9. International Data Transfers

Personal data may be transferred outside the EEA (including to providers such as those listed in Section 8) with appropriate safeguards, including Standard Contractual Clauses or other lawful transfer mechanisms recognized under GDPR.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service. Continued use after changes constitutes acceptance of the updated Privacy Policy.

11. Age Limitation

Our services are not intended for individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at legal@stoikk.com.

12. Your Privacy Rights

• Access and deletion: by contacting legal@stoikk.com
• Objection and restriction: by submitting a written request
• Complaint: to a competent EU data protection authority
• Data portability: request a machine-readable copy of your data

13. Do Not Track Requests

The Service does not respond to “Do Not Track” signals. Third-party services may operate under different policies.

14. Contact Us

If you have questions or concerns regarding this Privacy Policy or our data practices, contact us at hi@stoikk.com or legal@stoikk.com. See also our Terms of Use and Service.