Your Privacy Rights (CCPA & GDPR)

This notice explains the privacy rights available to you and how to exercise them, including California's rights (CCPA/CPRA) and the European and UK rights (GDPR/UK GDPR). It supplements our Privacy Policy. Madam Vortex is operated by New Faction Inc d/b/a Madam Vortex.

We built these rights to be self-service and fully automated: you can exercise most of them yourself, instantly, from your account — no human reviews your request and no waiting.

Rights available to everyone

Regardless of where you live, you can: access a copy of your data, correct it, and permanently delete your account and personal data. Sign in and go to My Readings → Privacy & data. "Download my data" gives you a complete machine-readable export; "Delete my account" permanently erases everything (see below).

The right to be forgotten (erasure)

When you delete your account, we immediately and irreversibly erase your profile, saved readings, submitted inputs and uploads, and your order and subscription history; cancel any active subscription and delete your payment profile at our processor, Stripe; remove you from the newsletter; and strip your identifiers from our security logs. We email you a confirmation once erasure is complete. This process is automated end to end.

Because deletion is immediate and permanent, download your data first if you want to keep a copy. We may retain a minimal, non-identifying record that an erasure occurred, and any information we are legally required to keep (for example, limited tax or fraud-prevention records) — held only as long as the law requires and separated from your account.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it; the right to access and to receive a portable copy; the right to correct inaccurate personal information; the right to delete your personal information; and the right to be free from discrimination for exercising these rights. We honor all of these through the self-service tools in your account.

We do NOT sell your personal information, and we do NOT share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" action to take — but you may still contact us to confirm. We do not use or disclose sensitive personal information for purposes that would trigger the right to limit. You may use an authorized agent to submit a request on your behalf; we will verify the agent's authority and your identity. We will respond to verifiable requests within the timeframes required by law (generally 45 days, extendable once).

EEA, UK & Switzerland (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and objection, as well as the right to withdraw consent at any time where processing is based on consent. Our self-service tools cover access, portability, correction, and erasure directly.

Legal bases we rely on: performing our contract with you (providing the experiences and account you purchase); your consent (newsletter, optional SMS); and our legitimate interests (securing the service, preventing fraud, and keeping audit logs), balanced against your rights. We do not make solely automated decisions that produce legal or similarly significant effects about you; AI is used only to generate entertainment readings.

International transfers: our processors may store or process data in the United States and elsewhere. Where required, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses. You have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office).

How to exercise your rights

Fastest: sign in and use My Readings → Privacy & data to export or delete your data instantly. Alternatively, email privacy [at] madamvortex [dot] com from the address on your account and we will action your request. We will not discriminate against you for exercising any of these rights. For questions about this notice or our data practices, contact privacy [at] madamvortex [dot] com.