Privacy Policy

Last Updated: January 2026

1. Information We Collect

1.1 Information You Provide

When you use EraMe, we collect:

• Name: Your first name (used to personalize your report)
• Birth Date: Month, day, and year of birth (used to generate era-specific insights)
• Email Address: Used to deliver your report and, if you opt in, send occasional updates
• Upbringing Context (Optional): City/region/country, setting, mobility, and birth order to refine personalization
• Marketing Consent: Your choice about receiving marketing communications

1.2 Information Collected Automatically

We automatically collect certain technical information:

• Browser type and version
• Device type
• IP address (for security and rate limiting)
• Pages visited and time spent
• Referring website

1.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to improve your experience. You can manage your cookie preferences through our cookie consent banner.

Essential Cookies (Required)

These cookies are necessary for the website to function and cannot be disabled:

• Remember your form progress
• Store your report token for retrieval
• Maintain session security
• Authentication and fraud prevention

Analytics Cookies (Optional - Requires Your Consent)

With your consent, we use analytics cookies to understand how visitors use our site:

• Google Analytics: Tracks page views, session duration, bounce rates
• PostHog: Product analytics and user behavior insights
• These cookies collect anonymous, aggregated data only

Managing Your Cookie Preferences

You can control cookies through:

• Cookie Banner: Accept or reject optional cookies when you first visit
• Browser Settings: Most browsers allow you to block or delete cookies
• Privacy Extensions: Browser extensions like Privacy Badger, uBlock Origin
• Opt-Out Tools: Google Analytics Opt-out

Note: Blocking essential cookies may affect website functionality.

2. How We Use Your Information

We use your information to:

• Generate your report: Your birth date is used to create personalized insights based on generational psychology
• Deliver your report: Your email is used to send your PDF report
• Personalize content: Your name is used within the report
• Send updates: If you opt in, we may send occasional emails about new features or products
• Improve our service: Aggregate, anonymized data helps us improve report quality
• Prevent abuse: IP addresses help us prevent spam and protect our service

3. Automated Data Processing and AI

3.1 AI-Powered Report Generation

Your report is generated using automated AI language models. What you should know:

• Automated Processing: Your birth year, name, and other provided information are automatically processed by AI systems to generate your personalized report
• Data Sent to AI Providers: Your birth year and name are sent to third-party AI providers (currently OpenAI and/or Anthropic) to generate report content
• Email Privacy: We do not share your email address with AI providers
• AI Provider Compliance: AI providers process data according to their privacy policies and data processing agreements with us
• No Individual Predictions: Generated reports are based on generational patterns and cultural analysis, not individual prediction or profiling

3.2 AI-Generated Content Limitations

Reports are generated by AI and should be understood as follows:

• Content is for entertainment and informational purposes only
• AI-generated insights are not medical, psychological, or professional advice
• Reports may contain generalizations that don't apply to every individual
• AI systems may occasionally produce inaccurate or incomplete information
• We review and refine AI outputs but cannot guarantee complete accuracy

4. Data Sharing and Disclosure

We do not sell your personal information. We have never sold personal data and have no plans to do so.

We share data only in the following limited circumstances:

• Service providers: Companies that help us operate (email delivery, payment processing, hosting)
• AI providers: To generate report content (birth year and name only)
• Legal requirements: If required by law or to protect our rights
• Business transfers: In the event of a merger, acquisition, or sale of assets (you will be notified)
• With your consent: Any other sharing requires your explicit permission

Our service providers include:

• Email delivery: Postmark or Sendgrid
• Payments: Stripe (processes payment information; see Section 4.1 for details)
• Hosting: Vercel or Cloudflare
• AI: OpenAI and/or Anthropic (process birth year and name only)
• Analytics: Google Analytics and/or PostHog (only with your consent)

4.1 Payment Processing and Stripe

All payment transactions are processed by Stripe, our third-party payment processor. When you make a purchase:

• What Stripe Receives: Your payment card information, billing address, email address, and transaction amount
• Direct Processing: Payment card data goes directly to Stripe and is never stored on our servers
• PCI Compliance: Stripe is PCI-DSS Level 1 certified, the highest level of payment security
• Stripe's Privacy: Stripe's use of your payment information is governed by their Privacy Policy
• What We Receive: We receive confirmation of successful payment, transaction ID, last 4 digits of card, and billing email
• Fraud Prevention: Stripe uses your data for fraud detection and prevention
• Data Location: Stripe may process payment data in the United States and other countries where they operate

Subscription Payments: If you subscribe, Stripe stores your payment method securely to process recurring charges. You can update or remove payment methods through your account or by contacting support.

Payment Records Retention: Transaction records (amount, date, payment method type) are retained for 7 years to comply with tax and financial regulations, even if you delete your account.

5. Data Retention

• Report data: Stored for 12 months to allow report retrieval
• Email address: Retained until you unsubscribe or request deletion
• Payment records: Retained as required by tax and legal obligations (typically 7 years)
• Analytics: Aggregated data retained indefinitely; individual session data expires after 26 months

6. Your Rights

You have the right to:

• Access: Request a copy of data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Withdraw consent: Unsubscribe from marketing emails anytime
• Object: Object to certain types of processing

To exercise these rights, email us at: privacy@erame.co

7. Data Security

We protect your data through:

• HTTPS encryption for all data transmission
• Encrypted database storage
• Access controls limiting who can view data
• Regular security reviews
• Rate limiting to prevent abuse

8. Children's Privacy

EraMe is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us.

For reports about children (Parenting Reports), the parent provides information about the child. These reports are designed for parents and contain age-appropriate content.

9. International Users

EraMe operates from the United States. If you're accessing from the EU, UK, or other regions with data protection laws, please note:

• Your data may be transferred to and processed in the United States
• We comply with applicable data protection requirements through appropriate safeguards
• EU/UK users have rights under GDPR including those listed in Section 6

10. California Privacy Rights (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

10.1 Your California Rights

• Right to Know: Request disclosure of personal information we collect, use, share, and sell
• Right to Delete: Request deletion of your personal information (subject to legal exceptions)
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of sale or sharing of personal information (we don't sell data)
• Right to Limit: Limit use of sensitive personal information (we don't collect sensitive data beyond what's necessary)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

10.2 Categories of Personal Information We Collect

CCPA requires us to list the categories of personal information we collect:

• Identifiers: Name, email address, IP address
• Personal Information (Cal. Civ. Code 1798.80): Name, date of birth, optional upbringing context
• Commercial Information: Purchase history, transaction records
• Internet/Network Activity: Browsing history on our site, interactions with our website
• Geolocation Data: General location from IP address (city/state level, not precise)

10.3 Business Purposes for Collection

We collect and use personal information for the business purposes described in Section 2 of this policy.

10.4 Sale and Sharing Disclosure

We do not sell personal information. We do not sell and have not sold personal information in the past 12 months.

Sharing for Cross-Context Behavioral Advertising: We may share data with analytics providers (Google Analytics, PostHog) if you consent to analytics cookies. You can opt out via our cookie banner or at privacy@erame.co.

10.5 Exercising Your California Rights

To exercise your California privacy rights:

• Email: privacy@erame.co
• Include "California Privacy Request" in subject line
• We'll verify your identity and respond within 45 days
• You may designate an authorized agent to make requests on your behalf

10.6 Shine the Light Law

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing. We do not share personal information with third parties for their direct marketing purposes.

11. Changes to This Policy

We may update this privacy policy from time to time. We'll notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email for material changes (if you've opted in)

12. Contact Us

For privacy questions or concerns:

• Privacy Inquiries: privacy@erame.co
• General Support: support@erame.co
• Data Subject Requests: privacy@erame.co

Data Controller: EraMe, United States

We will respond to privacy inquiries within 30 days (or as required by applicable law).