Privacy Policy

1. Introduction

Kyshara ("we", "our", "us"), operated by WSS.one, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit kyshara.com, and when you order a reading or membership through WhatsApp.

2. Information We Collect

2.1 Website visitors (kyshara.com)

• Contact information: name, email address, and message content if you use our contact form.
• First-party pageview data: the page visited, referring page, browser/user-agent string, browser language, and IP address (or a salted hash of it, depending on configuration), logged for basic traffic analysis and abuse prevention.
• Cookies: a first-party visitor identifier and your cookie-consent choice (see our Cookie Policy).
• Analytics (Google Analytics): only loaded after you accept analytics cookies where consent is legally required, or by default where it is not (see §4).

2.2 If you register with Kyshara on WhatsApp to order a reading or membership

To register and prepare readings, Kyshara's WhatsApp service collects:

• your name;
• your date of birth (used to confirm you're 18 or older, and as the basis for your reading);
• your birth city, and optionally your birth time, where a reading requires them;
• your email address (verified) and country;
• your language preference;
• your WhatsApp phone number and the content of your conversation with Kyshara;
• for compatibility or relationship readings, limited details about another person you provide for that specific reading — you are responsible for having that person's permission to share their details with us for this purpose.

Birth data is treated with extra care. Your date of birth, birth time, and birth place are not automatically a "special category" of data under GDPR, but we recognize they are personal and sensitive, and we handle them with the same security safeguards described in §6, used only to prepare the reading you requested.

3. How We Use Your Information

We use website information to operate and maintain the Site, understand aggregate traffic patterns, and respond to inquiries. We use WhatsApp registration and birth data solely to verify eligibility (age 18+), prepare the readings and reports you order, deliver them to you, provide support, and comply with our legal and tax obligations (including invoicing).

4. Consent & Cookie Policy

We use an opt-in approach for analytics in regions where consent is legally required (the EU/EEA, UK, and Brazil), determined by a local, no-network IP-to-country lookup that fails closed — meaning if that check ever fails, consent is required by default rather than skipped. Outside those regions, analytics may load by default, and your explicit choice (accept or decline) is always honored once made, in any region. See our Cookie Policy for full detail and how to change your preference at any time.

5. Data Sharing and Disclosure

We do not sell your personal information. We share limited data with service providers that help us operate the Site and Services:

• Google Analytics — website traffic, where consented/applicable.
• Wasender — the WhatsApp messaging platform Kyshara's conversations run on.
• Stripe — our live payment processor; Stripe handles your payment details directly and we do not store your full card number.

We may also disclose information when required by law.

6. Data Security

We use HTTPS/encrypted connections for data in transit, restrict direct access to raw log files and configuration at the server level, and apply the same fail-closed consent design described above to avoid accidentally over-collecting analytics data.

7. Your Rights (GDPR)

Under GDPR you have the right to access, rectify, or request erasure of your personal data, restrict or object to processing, receive your data in a portable format, and withdraw consent at any time. On WhatsApp, you can also send /delete to request erasure or /export to request a copy of your data, or simply message us. To exercise these rights, contact privacy@wss.one.

8. Data Retention

We keep personal data only as long as necessary for the purpose it was collected:

• Website contact-form submissions: as long as reasonably needed to respond to your inquiry, or until you request earlier deletion.
• Website traffic logs: retained for aggregate analysis only, not used to build individual profiles.
• WhatsApp registration & account data: kept while your account or membership is active; if you stop using Kyshara or cancel, we delete it within 6 months, unless a legal retention duty applies.
• Conversation history with Kyshara: retained for up to 12 months to provide continuity and support, then deleted; you can request earlier deletion at any time.
• Delivered readings and reports: kept available for you to re-download for 90 days after delivery, then deleted from our active systems.
• Invoices and payment records: retained for 7 years, as Dutch tax law requires — kept separately from your account data so a deletion request doesn't affect our legal bookkeeping duty.

9. Age Requirement

Kyshara's paid readings and memberships require you to be 18 or older; this is confirmed from your date of birth during WhatsApp registration. The Site's free content is not directed at children, and we do not knowingly collect personal information from anyone under 16 through the website itself.

10. International Data Transfers

Where information is processed outside the European Economic Area (for example, by an analytics or payment provider), we ensure appropriate safeguards are in place in compliance with GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time, particularly as new features are added to the Site or Services. The "Last Updated" date above reflects the latest version.

12. Contact Us

• WSS.one (operator of Kyshara) · Willem de Zwijgerlaan 200, 3136 AX Vlaardingen, Netherlands
• Email: privacy@wss.one · General: info@wss.one
• KvK: 93741448 · BTW/VAT: NL005039139B75

See also our Cookie Policy, AI Disclaimer, and Terms of Service.

13. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.