Privacy Policy

The controller of AGAT's database is Shachar Shapira Ltd., Company No. 516144656, 54 Ben Gefen St., Gedera 7044704, Israel ("AGAT", "we"). For any privacy matter: privacy@agat.cloud. The person in charge of privacy requests is Shachar Shapira.

You are under no legal obligation to give us information; giving it depends on your will and consent. If you choose not to give certain information, we may not be able to provide the service or part of it. For example, an account cannot be opened without an email address and a date of birth, and a reading cannot be produced without a question. The information will be used for the purposes in section 7 and may be passed to the parties in section 9, including the AI provider that produces the readings. You have the right to access the information about you, and to ask for it to be corrected or deleted, as set out in section 13.

Information you give us:

• Account details: email address, first and last name, and a password (stored hashed, never as readable text). If you sign in with Google, Google gives us your name, email address and profile picture.
• Phone number: to verify the account and to recover a password by SMS.
• Date of birth: required at registration. Used to confirm you are 18 or older, and to personalise numerology and astrology readings. If your date of birth shows you are under 18, no account is opened and the information is not kept.
• Your preferred form of address (masculine/feminine), and your marital status if you choose to give it, to personalise readings.
• Other details for a reading, if you choose to give them, such as a name for numerology or the name and details of a person the reading is about.
• Reading content: the question you wrote, the spread, the cards drawn and the interpretation produced, as well as notes, reflections and ratings you add.
• Messages to us: what you write to us about the service, privacy or accessibility.

Information collected automatically: IP address, the country derived from it, device and browser type, operating system, pages viewed, times of use, how you reached the site, and error and security logs. Some of it is collected through cookies and local storage (section 8).

Payments:when you buy a reading pack, your card details go directly to the payment processor PayPlus and are processed there; AGAT neither receives nor keeps them. We keep the order's details: the pack, the amount, the time, the payment's status and its PayPlus transaction ID, and whether an invoice was issued for it. Buying without signing up opens an account under the email address and name given at purchase, and a link to choose a password is sent to that address.

You can get a reading without opening an account and without giving a name or email address. Such a reading is not linked to your identity. To improve the service, the following are kept in our systems for 10 days and then deleted: the question, the form of address you chose, the spread, the cards and the interpretation, the topic the question was classified under and how our system understood it, and the way to the reading: the clarifying questions and suggestions you were shown and what you answered or chose, the spread suggested to you, and what you gave when asked for more context. If you rated the reading, the rating and comment are kept with it too. Copies in backups are deleted in the regular cycle within 30 days. During that time they are not used for any purpose other than improving the service, and are not passed to advertising or measurement providers. Some readings are also selected for quality review, and a copy of them is then kept for the periods in section 6.

So that a reading can continue after the page is refreshed, and a question just asked again can be recognised, a one-way encrypted identifier derived from the IP address is kept with the reading for a short time (up to two hours) and then deleted. So that we can recognise readings that were likely made by the same person, the IP address, the random identifier the site keeps in your browser (a cookie) and the browser and device type (User-Agent) are kept with the reading for up to 72 hours, and are then removed from it. Readings that were linked to each other stay linked by a random internal code, which is not derived from those details and does not identify who you are, until the reading is deleted. If you rated the reading, the question, spread and cards are kept with the rating for up to 10 days from the rating, so that a low rating can be looked into, and are then deleted. Your rating and comment are kept after that.

A question the system refused as not a real question (for example, random text) is kept for up to 30 days to prevent abuse, together with the reason it was refused, and is then deleted. It is not linked to your name or email address.

As with any use of the site, technical data such as the IP address and browser type are also recorded in system logs. They are kept for the period in section 11 and are not linked to the reading's content, apart from what is described above. Because the question is free text, we recommend not including identifying details about yourself or others.

Questions to the cards are sometimes about relationships, family, health, beliefs or emotional state. Such information may be "information of special sensitivity" under the law, and we give it a higher level of protection.

• We use the content of your questions only to produce your reading, show you your history, improve the service and support you when you contact us.
• We do not use the content of your questions for personalised advertising, build a marketing profile from them or sell them.
• Access to reading content is limited to those who need it for operations, support, security or legal compliance.
• You don't need to include full names, ID numbers, identifying medical details or identifying details of other people in a question. The reading works without them.

Interpretations on AGAT are written automatically by an artificial-intelligence model, not by a human reader. The model is run by an external provider: OpenAI.

• What is sent to the provider:the question you wrote, the spread, the cards drawn, and details you gave for the reading (for example a name or date of birth). For registered users, context from earlier readings is also sent, to personalise the reading: date of birth, marital status and form of address, recurring themes and names of people you asked about before. You can stop this at any time by turning on "privacy mode" in your account. Conversations with the site assistant, and the recipient's name in a "message from the cards", are also sent to the provider. We do not send the provider your email address, password or payment details.
• No model training:we do not use your questions or readings to train or fine-tune models. Under the provider's API terms and data policy, the provider does not use them for training either.
• Retention by the provider: the provider may keep the information for a limited time, up to 30 days, for security and abuse prevention, under its terms. We ask it not to store requests and responses beyond that.
• Quality review:to improve the interpretations, a share of readings, both registered users' and readings without an account, is copied for review. A full copy (the instructions sent to the model, including the personal context in them, the question and the interpretation) is kept for 30 days, and a copy with identifying details removed is kept long-term. Identifying details are removed automatically by Amazon Comprehend (for readings in English) and by a Claude model run on Amazon Bedrock, both operating in the European Union. A Claude model on the same service assesses the interpretation's quality and sees only the copy with identifying details removed. Team members may read a reading and write a note on it. From these reviews we write general guidance for future interpretations, checked so that it holds no personal details. One person's copies are linked to each other by a one-way encrypted code derived from the account or, for a reading without an account, from the IP address.
• Nature of the output: an AI interpretation is probabilistic. The same question may be phrased differently, and the interpretation may contain inaccuracies. It is meant for inspiration and self-reflection and is not a substitute for medical, mental-health, legal, financial or other professional advice.
• No automated decisions: we make no decisions about you with legal or similarly significant effect based on automated processing.

• To run the service: open and manage accounts, produce readings and keep your history.
• To send service messages, and the "daily message" or marketing email only if you agreed to it (section 16).
• To enforce the age limit and the terms of use.
• To secure the service, find faults and prevent fraud and misuse.
• To improve the site based on aggregate usage data, and to measure the effectiveness of our advertising (section 8).
• To check and improve the quality of interpretations, including review of a share of readings by the team and automatically (section 6).
• To handle requests, legal requests and disputes.
• To comply with legal obligations.

We will not use the information for another purpose unrelated to these without telling you and, where the law requires, without your consent.

Measurement and advertising cookies are turned on only after you allow them in the cookie banner. You can change your choice at any time through the "Manage cookies" link at the bottom of the site, or block cookies in your browser settings. Full details are in the Cookie Policy. Advertising providers also process the information they collect under their own privacy policies. The content of your questions and readings is never passed to them.

Some of our providers operate outside Israel, so information may be stored or processed outside Israel, including in the European Union and the United States. We transfer information abroad only in accordance with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, and only to providers contractually bound to protect it. In some countries the level of legal protection may differ from Israel's.

A reading without an account is not linked to an account, and we do not know who made it. Since we have no way to verify that whoever contacts us is the person who made the reading, we cannot locate a specific reading at someone's request and act on it, for example delete it. It is deleted automatically at the end of the periods above. Its quality-review copies are kept for these periods even after the reading itself is deleted, and a team member's note on it is kept long-term. Such a note does not include the question or the interpretation.

An account that was never verified and never used is deleted after 30 days. An account nobody has signed in to for 24 months is deleted 30 days after advance notice to its email address.

We take reasonable and accepted measures to protect the information, in accordance with the Privacy Protection (Data Security) Regulations, including: encryption in transit (HTTPS/TLS) and at rest; hashed passwords; least-privilege access and two-factor authentication for administrative access; logging of access and administrative actions and monitoring of security events; regular backups and separation of development and production environments. No online system is completely immune. If a serious security incident occurs, we will report it to the Privacy Protection Authority as the law requires, and notify affected users where the law requires it or the Authority instructs us to. To protect your account, choose a unique password and never share it. AGAT will never ask for your password by email or phone.

• Access: to receive the information AGAT holds about you (section 13 of the Law), including a download of your data from your account.
• Correction: to ask for information that is incorrect, incomplete, unclear or out of date to be corrected (section 14 of the Law).
• Deletion:to delete a single reading, your whole history or the entire account. Deleting a reading or the account also deletes its quality-review copies and the team's notes on it. Information the law requires us to keep is kept only for the required period.
• Withdrawing consent: to withdraw at any time your consent to measurement and advertising cookies, or to email.

You can exercise these rights in your account settings, or by writing to privacy@agat.cloudfrom the email address registered to your account. To make sure a request comes from the account holder, we may ask for reasonable verification. We do not charge for handling requests, and we reply within 30 days, or within any shorter period the law sets. If we do not grant a request for access or correction, you may appeal to the Magistrate's Court as set out in the Regulations, or contact the Privacy Protection Authority.

The service is for people aged 18 and over only. The date of birth is checked at registration, and visitors outside Israel are asked to confirm their age when they enter the site. We do not knowingly collect information about minors. If we find that an account belongs to a minor, we delete it and the information in it. A parent or guardian concerned that their child has registered can write to privacy@agat.cloud.

Some spreads are about a relationship with another person. If you write about someone else, give only what the question needs, and avoid their full name and identifying or sensitive details. You are responsible for making sure that giving the information does not infringe that person's privacy.

Service messages: we send messages about your account, such as verification, password resets and material policy updates.

The daily message and marketing email:sent only if you explicitly agreed to them, in accordance with section 30A of the Israeli Communications (Telecommunications and Broadcasting) Law. Marketing messages are marked with the word "פרסומת" (advertisement) in the subject.

Unsubscribing and stopping: every message we send, including service messages, has a link to unsubscribe or manage your email preferences, and a link to delete your account and stop the service. Unsubscribing takes one click, costs nothing and needs no sign-in.

To measure delivery and opens, messages may include tracking links.

AGAT is not a therapeutic or emergency service and is not meant for use in a crisis. When a question shows distress or danger, the service does not produce a reading and shows sources of help instead. If you are in distress in Israel, contact ERAN on 1201 (24/7) or SAHAR at sahar.org.il. In immediate danger to life, call Magen David Adom on 101 or the police on 100. We do not routinely read your questions. If information showing a real and immediate danger to life comes to our attention, we may act as the law requires or permits.

The service, including readings and interpretations, is provided as is, and its output should not be relied on as a sole source or as a substitute for professional advice. The limitations of liability that apply to the service are set out in the Terms of Use.

We will update this policy from time to time, and the date of the update appears at the top. For a material change, such as a new use of information, a new provider receiving reading content or a change in retention periods, we will give advance notice by email or on the site, and where the law requires consent, we will ask for it. This policy is governed by Israeli law, and the competent courts of the Central District of Israel have exclusive jurisdiction. Nothing in this document limits a right the law gives you that cannot be waived.

We reply to requests within 30 days at most.