← Pillar

Privacy Policy

This Privacy Policy explains how Aimgonna Inc. (“Pillar,” “we,” “us”) collects, uses, and shares information when you use pillar.aimgonna.com and related services (the “Service”). Pillar is an entertainment and self-reflection service; see our Terms of Service.

1. Information we collect

Category	Examples	Why
Birth information you enter	Date, time, and city of birth; sex assigned at birth	To compute your saju (four pillars) chart — the core of the Service
Account	Email address (via sign-in)	To save your chart and creations across devices
Conversations	Messages you exchange with Pillar AI	To provide the counseling feature and remember context across sessions
Creations	AI-generated portraits, talismans, forecasts you make	To store them in your library
Payment	Handled by Stripe; we do not store card numbers	To sell credit packs
Technical	IP address, approximate location, device/browser, usage	Security, abuse prevention, and rate limiting

We do not knowingly collect information from children. The Service is not intended for children under 13 (see Terms). If you believe a child has provided us information, contact info@aimgonna.com. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

2. How we use information

To operate and improve the Service, compute charts, generate readings and images, remember your conversations, process payments, prevent abuse, and comply with law. Birth details and conversation content are treated as sensitive and used only to provide the Service.

3. Service providers we share with

We share limited information with processors who act on our behalf under contract:

• Supabase — database, authentication, and file storage
• OpenAI — text and image generation (chart-derived prompts and your messages are sent to produce readings; we do not sell this data)
• Stripe — payment processing
• Vercel — application hosting
• PostHog — product analytics (page views, feature usage; URL query strings carrying birth details are stripped before sending)
• Sentry — error monitoring (crash diagnostics; URL query strings are stripped before sending)
• Google — sign-in (Google OAuth) and Google Analytics (aggregate site-usage measurement on our web pages)
• numai — site measurement (page views and feature usage), served from our own domain rather than a third party. It sets no cookies and stores no identifier on your device. It does keep one entry in your browser’s session storage to remember how you arrived (a campaign tag, or the site that linked you) — it holds no identifier, is not shared with anyone, and is erased when you close the tab. Visitors are counted using a hash generated on our servers and rotated every day, so nobody can be followed from one day to the next.

We do not sell or share your personal information for cross-context behavioral advertising, and we do not use advertising SDKs.

3a. Cookies & your choices

Pillar works without any optional cookies. We divide them in two:

• Strictly necessary — keeping you signed in (Supabase) and completing a purchase (Stripe). These are required for the Service and are always on.
• Our own site measurement (numai) — currently runs without asking. It sets no cookies, stores no identifier, and sends nothing to a third party; the one session-storage entry described in Section 3 disappears when you close the tab. We keep this under review and will move it behind the same choice if that assessment changes.
• Optional analytics — Google Analytics, PostHog, and Sentry error monitoring. These set cookies or store identifiers in your browser.

If you visit from the European Economic Area, the United Kingdom, or Switzerland, the optional analytics are not loaded at all unless you accept them: no script is fetched and no cookie is set before you choose. Declining is one click, exactly as easy as accepting, and the Service is unaffected either way.

We determine which region you are in from the network address of your request at the moment the page is served. That lookup is used only to decide whether to ask you, and the result is not stored or logged. Your own choice is remembered in your browser so we do not ask again; clearing your browser storage for this site will make the choice appear again.

Elsewhere, including the United States, the optional analytics load by default. You can opt out at any time by emailing info@aimgonna.com, and we honour Global Privacy Control signals where required.

4. Retention

We keep personal information only for as long as it is needed for the purposes described in this policy. Retention periods by category:

• Account data, birth details, charts, conversations, and generated images — kept while your account is active. When you delete your account (self-serve, in Settings) or send us a verified deletion request, we delete this data from our active systems promptly, and in any event within 45 days of the request.
• Backups — our database backups are encrypted and rotate automatically. Data removed from active systems ages out of backups no later than 35 days after deletion, and backups are never restored except for disaster recovery.
• Purchase and transaction records — we retain records of credit-pack purchases (not your card details, which are held by Stripe) for up to 7 years, as needed for tax, accounting, fraud-prevention, and other legal obligations.
• Analytics and error logs — these do not include your birth details (see Section 3). Error diagnostics are automatically deleted within 90 days; product analytics are kept only as long as needed to understand and improve the Service, then deleted or aggregated.

We may retain limited information longer where required by law, to resolve disputes, or to enforce our agreements, and only for as long as that purpose requires.

5. Your choices & rights

You may request to access or delete your personal information, including your chart, conversations, and creations, by emailing info@aimgonna.com. We will verify your request and respond within the time required by applicable law.

California residents: You have the right to know what personal information we collect, to request deletion and correction, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as defined by the CCPA/CPRA.

6. Security

We use industry-standard measures including access controls and encryption in transit. No method of transmission or storage is perfectly secure.

7. Third parties & shared links

Some features let you enter another person’s birth information (e.g., a chemistry check) or share a link. You are responsible for having that person’s permission before entering their information.

8. Do Not Track and opt-out signals

Our Service does not currently respond to browser “Do Not Track” signals. We do not sell or share personal information for cross-context behavioral advertising, so there is no sale or sharing to opt out of; where required by law, we honor browser opt-out preference signals such as Global Privacy Control (GPC).

9. Changes

We may update this Policy; material changes will be posted here with a new date.

10. Contact

Aimgonna Inc.
1401 21st St, Ste R, Sacramento, CA 95811
info@aimgonna.com