Privacy Policy

1. What data we collect

To create an account: full name and email. To generate an analysis: the name to be analyzed (person or business), date of birth (when applicable to the analysis type), and, for the signature exercise, signature-practice photos you submit.

We don't collect payment data directly — that's handled by our payment processor (Stripe), described in section 3.

2. How we use your data

• —Calculate the numeric diagram and generate the analysis and full study
• —Process AI-assisted name-variant suggestions, validated by the same deterministic engine
• —Review signature-practice photos, when submitted
• —Send transactional emails (account confirmation, study publication, access reminders)
• —Process payments and issue receipts
• —Comply with legal and tax obligations

We never use your data to infer sexual orientation, health condition, moral character, or any sensitive inference unrelated to the service's stated purpose.

3. Who we share data with

We use the following service providers (sub-processors), each receiving only the data strictly necessary for its function:

• —Supabase — database, authentication, and file storage
• —Stripe — payment processing (we never receive your full card number)
• —Resend — transactional email delivery

We do not sell or share your data with third parties for advertising or marketing purposes.

4. How long we keep your data

The published study remains accessible (web reading and PDF) for 120 days after publication. Signature-practice photos have a short retention period: they're deleted shortly after review, kept only for the minimum time needed for error-auditing purposes.

Account data is kept while your account is active. Financial and audit records are retained for as long as required by legal/tax obligations, even if you request account deletion — this retention happens separately from the rest of your data, never bundled with the study content.

5. Your rights

You may request, at any time:

• —Access to the personal data we hold about you
• —Correction of inaccurate or outdated data
• —Deletion of your account and associated data (subject to the legal/tax retention mentioned above)
• —Export of your data in a readable format

Requests can be made to contato@namegema.com.

6. How we protect your data

• —Isolation between different users' accounts, tested (not just declared) — one user never accesses another's data
• —Privileged database access keys used only server-side, never exposed to the browser
• —Real file-type verification (not just the extension), removal of metadata (EXIF) from signature photos
• —Signed, temporary download links with no predictable sequential identifier
• —Secrets and API keys stored in an environment-variable vault, never in source code

7. Children

NameGema is not directed at children. Use by minors requires the authorization and supervision of a legal guardian, per section 3 of our Terms of Use.

8. International data transfers

Some of the service providers listed in section 3 may process data on servers outside your country. In those cases, we require these providers to maintain data-protection standards compatible with applicable law.

9. Changes to this Policy

We may update this Policy periodically. Material changes will be communicated by email or a notice on the platform before taking effect.

10. Contact

Privacy questions can be sent to contato@namegema.com.