Privacy Policy
This Privacy Policy explains how Atlantic SQ Ltd ("Dorothy", "we", "us", "our") collects, uses, retains, shares, and protects personal data when you use our website and AI companion products — Dorothy Relationship, Growth Cards, and Healing Room — at dorothymindread.com. It also explains the choices you have over your data, how long we keep it, and how to reach us. Use of Dorothy is also subject to the Terms of Service below.
1. Who we are
Dorothy is operated by Atlantic SQ Ltd ("we", "us", "our"), a private limited company registered in England and Wales, company number 16467255, with its registered office at Unit A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE. Atlantic SQ Ltd is the controller of your personal data. You can reach us for anything privacy-related at [email protected].
2. What data we collect
Information you provide
- Account data: your email address, used to send passwordless sign-in links. We never ask for a password or your real name.
- Content you create: the messages, questions, journal entries, and readings you send or create in Relationship, Growth Cards, and Room, so Dorothy can respond and you can revisit what you made.
- Purchase data: payment status, transaction identifiers, and subscription state. Card details are handled by our payment provider and never reach our servers.
- Launch-notification email: if you ask to be notified when the Dorothy app launches, we store your email solely to send that one notification. It is never used for marketing, and you can remove it at any time by contacting us.
Information collected automatically
- Device identifier: a random visitor key stored in your browser's local storage, used to link your purchases and privacy choices across pages. It contains no personal details.
- Technical and security logs: limited request and rate-limiting records needed to keep the service safe and available.
- Optional analytics data: if you allow it, pseudonymous usage events (such as page views or checkout starts) and anonymous topic counters. Your questions and answers are never included, and you can switch this off at any time.
3. How we use your data and our legal bases
- To provide the service (contract): signing you in, generating Dorothy's replies, applying your quotas, unlocking and delivering what you purchase, and answering your requests.
- Legitimate interests: keeping Dorothy secure, preventing fraud and abuse, and improving reliability — balanced against your rights, using the least data that does the job.
- Consent: optional usage analytics and anonymous topic counters, which stay off until you allow them. You can withdraw consent at any time without losing core access.
- Legal obligation: transaction and accounting records we are required to keep under consumer and tax law.
We do not use your personal data for advertising, and we never sell it.
4. You are always talking to an AI
Every Dorothy surface — including its personas and readings — is an AI system, and we say so in the product. Replies are generated by commercial AI models reached through vetted providers under zero-data-retention terms: providers do not keep your conversation content beyond what is technically needed to generate the reply, and it is never used to train their models or ours. We clearly disclose when you are interacting with AI and label AI-generated content, and we do not build psychological profiles about you.
5. Sensitive conversations
Companion conversations naturally touch on emotions and relationships. We treat what you write as private content: it is encrypted at rest, kept only as long as described in section 8, and never sold. We do not ask you for health data and do not use Dorothy to infer medical conditions. Please share only what feels comfortable, and avoid unnecessary sensitive details about other people.
6. How we share data
We share personal data only with a narrow set of trusted service providers that process it solely on our documented instructions:
- AI model providers — generate Dorothy's replies. They receive your messages only as needed to produce a response, under zero-data-retention and no-training terms, and may not use that content for their own purposes.
- Cloud hosting and database providers — run our sign-in, database, storage, and server functions.
- Payment providers — process payments and help prevent fraud. They receive transaction details, never conversation content.
- Website infrastructure and security providers — deliver the site, confirm you are human, and block automated abuse.
We do not sell your personal data, and we run no advertising trackers. We may disclose data if we are legally required to do so, to protect rights, safety, and security, or in connection with a business transfer — in which case the recipient must honour this Privacy Policy.
7. International data transfers
Our providers may process personal data in countries other than your own. When your data is transferred across borders, we rely on recognised legal safeguards — such as standard contractual clauses adopted for the transfer — together with the encryption-at-rest and short-retention measures described in this policy, and we keep those arrangements under review.
8. How long we keep your data
- Relationship and Duo chat content on our servers expires after at most 90 days.
- Growth Cards and Room content on our servers expires after at most 30 days.
- Required payment, fraud-prevention, and legal transaction records may be kept separately for as long as the law requires.
- Local, browser-only records (for example device-side journal entries) stay on your device until you delete them in the product.
9. Security
Requests use TLS in transit and sensitive server content uses application-level encryption at rest. This is not end-to-end encryption, because readable text must briefly be processed in memory to generate a response. We apply rate limiting and human-verification checks to protect the service from abuse.
10. Cookies and local storage
We use browser local storage — not advertising cookies — for your sign-in session, your visitor key, and your privacy choices. Optional analytics are set only after you allow them. You can clear this storage at any time from your browser; clearing it signs you out and resets optional choices to off.
11. Your privacy rights
Depending on where you live, the privacy law that applies to you may give you some or all of the following rights:
- Access and portability — ask what personal data we hold about you and take a copy of it.
- Correction — ask us to fix data that is inaccurate or incomplete.
- Deletion — ask us to delete your personal data.
- Restriction and objection — ask us to limit processing, or object to processing based on our legitimate interests.
- Withdraw consent — switch off optional analytics and anonymous topic counters at any time.
We respond within one month, and we will tell you if a complex request needs a little longer. We do not sell or share personal data for advertising, and you will never be treated differently for exercising your rights. If you are not satisfied with our answer, you may also complain to the data protection supervisory authority where you live.
How to exercise your rights
Signed-in users can export or delete associated personal content directly from the product where it was created, or delete personal data at account level. For anything else, email [email protected] with your account email and the request type. We may ask a small verification step so we never act on the wrong account.
12. Children
Dorothy is for adults: you must be at least 18 years old, and we ask you to confirm this when you sign in. We do not knowingly collect data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy as Dorothy evolves. If a change is significant, we will notify you in the product before it takes effect. The "Last updated" date above always shows the current version, and earlier versions are available on request.
14. Contact us
Questions, privacy requests, or account help: email [email protected]. For billing or access help, include your order identifier; for a privacy request, include the account email and the request type (for example access, export, correction, or deletion). Postal: Atlantic SQ Ltd, Unit A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE.
Terms of Service
What Dorothy is — and is not
Dorothy is an AI companion for reflection, conversation, and tarot-inspired readings, provided to you by Atlantic SQ Ltd under these terms. It is not a human, not therapy, not crisis care, and not medical, legal, financial, or guaranteed predictive advice. Readings and personas are creative interpretations, and AI replies can be wrong or incomplete — you stay responsible for your decisions.
If you are struggling
If you are in crisis or thinking about harming yourself, please stop here and contact your local emergency number or a crisis line — for example 988 in the US, Samaritans on 116 123 in the UK and Ireland, or 112 in the EU. Trained people are there to help, and Dorothy cannot replace them.
Who may use Dorothy
You must be 18 or older. Do not use Dorothy to harass, coerce, stalk, or endanger anyone, to seek sexual content involving minors, or for anything illegal. Do not present Dorothy's replies as professional advice.
Fair use
Quotas, rate limits, and single-device sessions exist to keep the service available and safe for everyone. Abuse, automated scraping, or attempts to bypass payment may lead to suspension of access.
Billing
One-time products
- Growth Pack (3 card readings + 1 Deep Love report): $29.90
- Curiosity Pack (5 Astro Dice + 30 replies): $29.90
- Healing Room Active Minutes: $0.50 per active minute · 10 min $5.00 · 30 min $15.00 · 60 min $30.00
Subscriptions
Dorothy Gold Membership is $299 per month and includes 10,000 Dorothy experiences each month. Renewal, cancellation, and refund terms are shown before payment. You also keep any statutory cancellation and refund rights that apply to you as a consumer.