✦ Privacy Policy ✦

Last Updated: 'June 30, 2026'  |  Website: https://soorla.com  |  Contact: CONTACT US

Welcome to Soorla (the "Website," "we," "us," or "our"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Website, take the Soul Star Test, register for an account, make a purchase, subscribe to our services, or interact with our AI chat feature ("Stella").

By using our Website, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use our Website.

1. INFORMATION WE COLLECT

We collect several types of information to provide, improve, and personalize your experience.

1.1 Personal Information You Provide Voluntarily

  • Account Information: When you register for an account (before or after taking the test), we collect your email address and a password (hashed for security). This allows us to save your test results, manage your subscription, and provide you with PDF certificates.
  • Payment Information: When you make a one‑time payment for a PDF or subscribe to a monthly plan, we do not store your full payment card details. Payment processing is handled entirely by Stripe, a third‑party payment processor. Stripe collects your name, email address, billing address, and payment method information (e.g., credit card number, expiration date). We only receive confirmation of payment success and a unique transaction identifier.
  • Test Answers (Quiz Data): We collect the images you choose in each of the 20 rounds of the Soul Star Test. These choices are stored along with their hidden scores (star_score, age_score) and the associated descriptive text. This data is used to calculate your Star Seed status and Soul Age.
  • AI Chat Messages: If you subscribe to the AI chat feature ("Stella"), we collect and store the messages you send and the AI's responses. This allows us to provide a continuous, context‑aware conversation.
  • Communications: If you contact us via email or through a contact form, we collect your email address and the content of your message.

1.2 Information Collected Automatically (Passive Collection)

When you visit our Website, certain technical information is automatically collected, including:

  • Device and Browser Information: IP address, browser type and version, operating system, language settings, screen resolution, and device identifiers.
  • Usage Data: Pages visited, time spent on each page, the order of rounds completed, click‑through data, and referral URLs.
  • Cookies and Similar Technologies: We use cookies to remember your progress during the test (so you can continue where you left off), to authenticate registered users, and to serve advertisements via Google AdSense. You can control cookies through your browser settings (see Section 7).

1.3 Aggregated & Anonymized Data

We may aggregate and anonymize test results (e.g., "40% of users received Star Seed = Yes") and usage statistics. This aggregated data does not identify you personally and is used for analytics, research, and to improve our services.

2. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

2.1 To Provide and Manage the Service

  • To operate, maintain, and improve the Website.
  • To administer the Soul Star Test (20 rounds), calculate your Star Seed status and Soul Age based on the scoring algorithm, and present your results.
  • To create and manage your account, including authenticating you when you log in.
  • To process payments via Stripe and manage subscriptions (including automatic renewal, cancellation, and refunds).
  • To generate and email PDF certificates upon successful one‑time payment or for active subscribers.
  • To power the AI chat feature ("Stella") for subscribers, using the OpenAI API.

2.2 To Improve and Personalize Your Experience

  • To remember your test progress (so you can resume later if you leave).
  • To link your test results to your account if you register after taking the test (or before).
  • To display your past test results in your account area.
  • To analyze usage trends and preferences so we can enhance the user experience and content.

2.3 To Communicate With You

  • To respond to your inquiries, support requests, or feedback.
  • To send you important service‑related messages (e.g., payment confirmations, subscription renewal reminders, policy updates).
  • To send you promotional emails only if you have explicitly opted in (you can unsubscribe at any time).

2.4 For Legal, Security, and Compliance Reasons

  • To detect, prevent, and address technical issues, fraudulent activity, security incidents, or violations of our Terms of Service.
  • To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
  • To enforce our rights and protect the safety of our users or the public.

3. HOW WE SHARE YOUR INFORMATION

We respect your privacy and do not sell your personal information to third parties. We share your information only in the following limited circumstances:

3.1 Service Providers (Third‑Party Processors)

We rely on trusted third‑party companies to perform essential functions on our behalf. They are contractually obligated to protect your data and may use it only for the services they provide to us.

Third Party Service Provided Data Shared
Stripe Payment processing (one‑time payments & subscriptions) Name, email, billing address, payment method details (Stripe collects this directly)
Mistral Forge AI chat feature ("Stella") – generates responses based on user messages User messages (the content you type), test results (Star Seed status, Soul Age, chosen description texts)
Email Service Sending PDF certificates and transactional emails Email address, PDF file

3.2 Legal Requirements and Safety

We may disclose your personal information if required to do so by law (e.g., to comply with a subpoena, court order, or governmental request) or if we believe such disclosure is necessary to:

  • Enforce our Terms of Service.
  • Protect the rights, property, or safety of our Website, our users, or others.
  • Investigate or prevent fraud or illegal activity.

3.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you of such a change via email and/or a prominent notice on the Website.

3.4 Aggregated & Anonymized Data

We may share aggregated, non‑personally identifiable information (e.g., "60% of users scored as Star Seed") with partners, advertisers, or researchers. This data cannot be traced back to you.

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies (small text files stored on your device) and similar tracking technologies (e.g., web beacons, pixels) to enhance your experience and analyse traffic.

4.1 Types of Cookies We Use

Cookie Type Purpose
Strictly Necessary Cookies Essential for the Website to function: remembering your progress through the test rounds, authenticating you as a logged‑in user, and ensuring secure payment processing. These do not require your consent.
Preference Cookies Remember your language preferences or other settings (if applicable).
Analytics/Performance Cookies Help us understand how visitors use the Website (e.g., which rounds are abandoned, completion rates). We use this to improve our services.

4.2 Your Cookie Choices

  • Browser Controls: You can configure your web browser to reject or delete cookies. However, doing so may break certain functionality (e.g., you may lose your progress in the test or be unable to log in).
  • Opt‑Out of Google AdSense Personalised Advertising: You can visit Google's Ad Settings to opt out of personalised advertising.
  • Industry Opt‑Outs: You can also opt out of interest‑based advertising through the Network Advertising Initiative or the Digital Advertising Alliance.

4.3 Cookie Consent (GDPR / ePrivacy)

If you are in the European Economic Area (EEA), the UK, or other jurisdictions that require explicit cookie consent, we will display a cookie banner when you first visit. You will be able to accept or reject non‑essential cookies. Your choice will be remembered for future visits.

5. LEGAL BASIS FOR PROCESSING (GDPR)

If you reside in the European Economic Area (EEA) or the UK, we rely on the following legal bases to process your personal information:

  • Contractual Necessity: To perform our agreement with you (e.g., providing the test, processing payments, delivering PDFs, enabling the AI chat).
  • Legitimate Interests: To improve our services, analyse usage, prevent fraud, and ensure the security of our Website. We balance these interests against your privacy rights.
  • Consent: For non‑essential cookies and for sending you promotional emails (where required). You may withdraw consent at any time.
  • Legal Obligation: To comply with applicable laws, court orders, or regulatory requests.

6. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information.

6.1 Rights Under the GDPR (EEA & UK)

  • Right to Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to certain exceptions (e.g., we may need to retain data for legal or tax purposes).
  • Right to Restrict Processing: Ask us to limit how we use your data while we verify its accuracy or the lawful basis for processing.
  • Right to Data Portability: Receive a copy of your data in a structured, machine‑readable format and have it transmitted to another controller.
  • Right to Object: Object to processing based on legitimate interests (e.g., analytics) or direct marketing.
  • Right to Withdraw Consent: Withdraw any consent you previously gave (e.g., for marketing emails). Withdrawal does not affect past processing.

To exercise your rights, please contact us at CONTACT_EMAIL. We will respond within one month.

6.2 Rights Under the CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collection, and the categories of third parties with whom we share it.
  • Right to Delete: Request deletion of your personal information, subject to exceptions (e.g., legal or contractual obligations).
  • Right to Opt‑Out of Sale or Sharing: We do not sell your personal information. We also do not "share" it for cross‑context behavioural advertising (though Google AdSense may place advertising cookies – you can opt out of personalised ads via Google's Ad Settings).
  • Right to Non‑Discrimination: We will not discriminate against you for exercising your CCPA rights (e.g., by charging different prices or denying services).

To exercise your CCPA rights, please email us at CONTACT_EMAIL. We will verify your identity before responding. You may also use an authorised agent to submit a request.

6.3 Other Jurisdictions

We comply with applicable privacy laws in the jurisdictions where we operate. If you are in Canada (PIPEDA), Australia (Privacy Act), or another region, you may have similar rights. Please contact us for assistance.

7. COPPA COMPLIANCE (Children Under 13)

Our Website is intended for a general audience and is not directed at children under the age of 13. We comply with the Children's Online Privacy Protection Act (COPPA).

  • We do not knowingly collect personal information from children under 13 without verifiable parental consent.
  • If you are a parent or guardian and believe your child under 13 has provided us with personal information (e.g., by registering an account), please contact us immediately. We will delete that information.
  • If we learn that we have collected personal information from a child under 13 without prior parental consent, we will take steps to delete the information as soon as possible.

We encourage parents to supervise their children's online activities and to review our Disclaimer and Privacy Policy together with their children.

8. DATA RETENTION

We retain your personal information only as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account information & test results: Stored for as long as you keep your account active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud prevention reasons.
  • AI chat messages: Stored for the duration of your subscription and for a reasonable period thereafter (e.g., to handle customer support requests). After that, the conversation history is anonymised or deleted.
  • Payment information: Stripe retains transaction records as required by financial regulations. We do not store your full payment card details.
  • Aggregated & anonymised data: May be retained indefinitely for analytics purposes.

9. DATA SECURITY

We take reasonable technical, administrative, and physical measures to protect your personal information from unauthorized access, use, alteration, or disclosure.

  • Encryption: Data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
  • Passwords: Your account password is hashed (using bcrypt) and never stored in plain text.
  • Access Controls: Only authorised personnel have access to personal data, and they are trained in privacy and security best practices.
  • Third‑Party Security: We require our service providers (Stripe, OpenAI, etc.) to maintain robust security measures.

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law.

10. INTERNATIONAL DATA TRANSFERS

We operate from [Your Country]. However, we use service providers that may be located in other countries.

  • Stripe: Processes payments globally; data may be transferred to the United States or other jurisdictions. Stripe has certified to the EU‑U.S. Data Privacy Framework and the UK Extension.

By using our Website, you acknowledge that your personal information may be transferred to and processed in countries outside your country of residence, which may have different data protection laws. We take steps to ensure that your data receives an adequate level of protection in accordance with this Privacy Policy and applicable law.

11. THIRD‑PARTY LINKS

Our Website may contain links to external websites (e.g., social media, affiliate partners). We are not responsible for the privacy practices or content of those third‑party sites. We encourage you to read their privacy policies before providing them with any personal information.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons.

  • Notification of Changes: If we make material changes, we will post a notice on our Website and/or send you an email (if you have an account) before the changes become effective.
  • Small Changes: Minor updates (e.g., clarifying language, adding new service providers) may be posted without individual notice.
  • Review Periodically: We encourage you to review this Privacy Policy regularly. The "Last Updated" date at the top indicates when the latest version was published.

Your continued use of the Website after any changes constitutes your acceptance of the revised Privacy Policy.

13. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Contact: CONTACT US

For GDPR / EEA / UK matters: You also have the right to lodge a complaint with your local supervisory authority if you believe we have violated data protection laws.

14. CONSENT

By using our Website, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

— End of Privacy Policy —