Terms of Service

Welcome to Clairvoya

Clairvoya is a digital platform developed and operated by Celestial Holdings, a Washington state limited liability company ("Company," "we," "us," or "our"). By accessing or using the Clairvoya mobile application (the "App") or any related services (the "Services"), you agree to be bound by these Terms and Conditions ("Terms"). If you do not agree to these Terms, please do not use the App.

1. Acceptance of Terms

By creating an account or using the App, you confirm that you are at least 14 years old (or the legal age of majority in your jurisdiction) and that you have the legal capacity to enter into this agreement. If you are under 14, you must have parental or legal guardian consent to use the App.

2. Changes to Terms

We reserve the right to modify these Terms at any time. We will notify users of any significant changes through the App or via email. Your continued use of the App after such changes constitutes acceptance of the new Terms.

3. Services Provided

Clairvoya provides astrology, tarot, dream interpretation, and spiritual guidance services for entertainment and personal development purposes only. Our services include:

• Daily Horoscopes: Free personalized daily zodiac readings based on your sun sign
• Intuitive Readings: AI-powered personalized spiritual guidance and insights
• Astrology Guides: Educational content covering natal charts, synastry, tarot spreads, and moon rituals
• Monthly Insights: Comprehensive monthly analysis with lunar cycles and planetary movements
• Dream Interpretation: Symbol glossaries and resources for lucid dreaming
• Newsletter: Email updates with astrological insights and spiritual guidance
• Contact Support: Secure customer support through our contact form

All services are provided for entertainment purposes only. The App should not be used as a substitute for professional legal, medical, financial, or psychological advice.

4. User Accounts

• You must provide accurate information when creating an account.
• You are responsible for maintaining the security of your account credentials.
• We may suspend or terminate accounts that violate these Terms or engage in fraudulent or abusive behavior.
• Newsletter subscriptions are managed through secure, encrypted email addresses with automatic data retention policies.

5. Payments and Refunds

Certain features of the App may require payment. All transactions are processed through third-party payment providers.

Payments are non-refundable except as required by applicable law or at our sole discretion.

6. User Conduct

You agree not to:

• Use the App for any unlawful or prohibited purpose.
• Harass, abuse, or harm other users.
• Reverse-engineer, modify, or attempt to gain unauthorized access to the App.

7. Intellectual Property

All content in the App, including text, graphics, logos, and software, is owned by or licensed to Celestial Holdings and is protected under intellectual property laws. You may not copy, distribute, or modify any content without our permission.

8. Security and Data Protection

We implement enterprise-grade security measures designed to meet SOC2 standards with comprehensive controls across all trust categories. Our security framework includes:

• Enterprise Security Standards: Comprehensive controls aligned with SOC2 standards across Security, Availability, Processing Integrity, Confidentiality, and Privacy
• Access Control Matrix: Role-based access control with 4 user roles and 19 granular permissions
• Multi-Factor Authentication: TOTP, SMS, and hardware token support with automated enforcement
• Session Security: Configurable timeouts, concurrent session limits, and secure session management
• End-to-End Encryption: All sensitive data is encrypted using AES-256-GCM encryption
• Bot Detection: Advanced bot detection protects against automated abuse on contact and newsletter endpoints
• Rate Limiting: Contact forms limited to 1 submission per IP address per day; newsletter signups limited to 5 per IP and 3 per email every 15 minutes
• Content Security Policy: Strict CSP prevents cross-site scripting and unauthorized script execution
• Input Validation: All user inputs are validated and sanitized to prevent injection attacks
• Data Classification: 5-tier data classification system with automated handling and retention rules
• Data Anonymization: IP addresses are hashed and anonymized for privacy protection
• Automated Security Scanning: Continuous vulnerability scanning using Snyk with SLA-based remediation timelines
• Real-time Monitoring: Anomaly detection, security event logging, and automated alerting
• Incident Response Plan: Documented procedures with severity classification and response timelines
• Change Management: Controlled change processes with approval workflows and rollback procedures
• Vendor Risk Management: Third-party vendor assessment and ongoing security monitoring

Our comprehensive security framework ensures continuous monitoring with automated control testing, detailed audit trails, and systematic evidence collection designed to meet SOC2 standards. We maintain detailed policies and procedures for all security operations and conduct regular security assessments.

9. Cookies and Consent

Our website uses cookies and similar technologies to enhance your browsing experience. When you visit our site for the first time, you'll see a compact cookie banner that allows you to control your cookie preferences.

• Cookie Banner: A small, unobtrusive banner appears at the bottom of the page on first visit
• Consent Options: Choose "Accept All", "Necessary Only", or customize your preferences
• Functional Cookies: Required for website operation and cannot be disabled
• Analytics Cookies: Optional cookies for website improvement including Google Analytics and Microsoft Clarity session recordings and heatmaps (requires consent)
• Advertising Cookies: Optional cookies for personalized marketing (requires consent)
• Preference Management: Change your cookie settings anytime using the banner's settings option

By using our website, you consent to the use of functional cookies. Analytics and advertising cookies are only used with your explicit consent. You can withdraw consent at any time through the cookie banner settings.

10. Disclaimers and Limitation of Liability

The App and its services are provided "as is" and "as available" for entertainment purposes only. While we strive for accuracy in our astrological content, astrology is not a science and should not be considered predictive or definitive.

We are not liable for any indirect, incidental, or consequential damages arising from your use of the App or reliance on our astrological guidance.

Your interactions with third-party service providers within the App are solely between you and those providers.

11. Termination

We may suspend or terminate your access to the App at our discretion if you violate these Terms. Upon termination, your rights to use the App cease immediately.

12. Governing Law

These Terms are governed by the laws of the State of Washington, without regard to conflict of law principles. Any disputes arising from these Terms shall be resolved in the state or federal courts located in Washington.

13. Contact Information

For questions about these Terms or to request data deletion, contact us or email contact@clairvoya.app.