Kebijakan privasi

PRIVACY POLICY

Last updated: 30 October 2026

1. Introduction

Landcore OÜ ("we", "us") operates Soul Aura at soulaura.ai and its language sites (tr.soulaura.ai, id.soulaura.ai). This Privacy Policy explains what personal data we collect, why we use it, who receives it and what rights you have. It is written to meet the EU General Data Protection Regulation (GDPR), the UK GDPR and applicable U.S. state privacy laws. Visitors to tr.soulaura.ai also have our Turkish notice (Aydınlatma Metni) at tr.soulaura.ai/pages/aydinlatma-metni.

2. Data controller

Landcore OÜ, Estonian commercial register code 17268422, VAT (KMKR) number EE102941517
Address: F. R. Kreutzwaldi tn 43b, 65610 Võru, Võru maakond, Estonia
Email: info@soulaura.ai
Phone: +90 266 384 23 74

3. What we collect and why

3.1 Free test

Your answers to the free test and your result are processed only in your browser. They are not sent to our servers and are not stored. The "Send my result" button opens your result in your own email app; you send the email yourself, and your email address is not sent to us for this step.

3.2 Email list

Only if you tick the email list box, we keep your email address and a record of your consent (date, source page, language, the version of the consent text and your confirmation that you are 18 or older). We use it to send you emails from Evren Gürkan about his book, his workshop, free report spots and new videos. Legal basis: your consent (GDPR Art. 6(1)(a)). We ask you to confirm your subscription by email. You can withdraw your consent at any time with the unsubscribe link in every email or by writing to info@soulaura.ai.

3.3 Orders and reports

To create and deliver your report we use your current name, your name at birth, your date of birth, the report language and, for the Human Asset Report, your written answers, together with your email address and your order and billing details. Legal basis: performance of our contract with you (Art. 6(1)(b)) and our legal obligations for accounting and tax records (Art. 6(1)(c)). Card details are processed by the payment provider and are not shared with us.

3.4 Contact

When you write to us, we use your name, email address and message to answer you (Art. 6(1)(b) for questions about an order; otherwise our legitimate interest in answering you, Art. 6(1)(f)).

3.5 Technical data

When you visit the site, technical data such as your IP address, approximate location, browser, device, pages visited and referring site are recorded to run and secure the store (legitimate interests, Art. 6(1)(f)). Analytics and advertising cookies are used only as described in section 9.

3.6 Whether you must give us your data

Your name, name at birth, date of birth, report language, email address and billing details are required to take your order and to create and deliver your report, and we cannot provide the report without them. The email list box, your cookie choices and the free test are optional, and declining them does not affect your order.

4. Automated processing

Reports are generated with an AI-assisted system (Google Gemini) from your name and date of birth, using Pythagorean letter-to-number mapping and core numerological values (Life Path, Personal Year, Destiny). A report gives personal insight only; it does not produce legal effects or similarly significant decisions about you. You can ask for a human review of your report at info@soulaura.ai.

5. Who receives your data

  • Shopify (Shopify International Limited, Ireland, and its group companies): store platform, hosting, checkout, email sending, Shopify Forms and Shopify Collabs. Shopify also combines customer data with other Shopify data to improve products, advertising targeting and personalization for our store (Shopify Network Intelligence); other merchants cannot see your data.
  • Payment providers: Shopify Payments, Stripe and PayPal, to take your payment.
  • Apps that run store features, only when you use that feature: Easify (report personalization fields on product pages), Shopify Forms and Hulk Form Builder (forms), Oxi Social Login (sign-in with a social account and wishlist), Judge.me (product reviews).
  • Meta (Facebook and Instagram pixel and Conversions API) and Google (Google Analytics and Google advertising), for analytics and advertising as described in section 9.
  • Google (Gemini AI service, paid API): to generate your report, we send it the data we use for your order, as described in section 3.3, including your name, name at birth, date of birth, report language, your written answers for the Human Asset Report, and your email address and billing details. Google processes this data for us under its data processing terms, does not use it to improve its products, and keeps prompts and responses for a limited period to prevent abuse and meet legal duties.
  • Skool: if you buy the "Kendin Ol, Zengin Ol" workshop, Skool processes your payment and membership as the seller of record, under its own privacy policy.
  • Public authorities, when the law requires it.

We do not sell your personal data for money.

6. International transfers

Our store data is hosted by Shopify in the United States. Shopify transfers data to Canada on the basis of the European Commission's adequacy decision and to other countries, including the United States, under the Standard Contractual Clauses approved by the European Commission. Our other providers that process data outside the EEA rely on the Standard Contractual Clauses or, where the provider is certified, the EU-U.S. Data Privacy Framework and its UK extension. You can get a copy of the safeguards we rely on, for example the Standard Contractual Clauses, by writing to info@soulaura.ai.

7. How long we keep data

  • Report data (names, date of birth, written answers): deleted 14 days after delivery. We do not keep the generated PDF.
  • Order and billing records, including the email address linked to an order: 7 years, as accounting and tax rules require.
  • Email list: until you withdraw your consent. Consent and unsubscribe records: 3 years after your consent ends, so that we can show we had your consent.
  • Analytics data, if you consented: up to 26 months.

8. Security and data breaches

We use TLS encryption, secure payment processing and access controls. If a personal data breach is likely to put your rights at risk, we notify the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI) within 72 hours of becoming aware of it (GDPR Art. 33). Where the risk is high, we also tell you without undue delay (Art. 34).

9. Cookies and your choices

EU, EEA, United Kingdom and Türkiye: a cookie banner asks for your choice before any non-essential cookie is used. Only strictly necessary cookies run without consent. Analytics and advertising cookies rely on your consent (GDPR Art. 6(1)(a) and the ePrivacy rules). Categories: preferences; analytics (Google Analytics, Judge.me); marketing (Meta, Google advertising, Shopify Collabs). You can change or withdraw your choice at any time with the "Cookie preferences" link in the footer. Withdrawing consent does not affect processing that took place before.

United States and other regions: no banner is shown, and analytics and advertising cookies may run when you visit. Meta and Google can collect information about your online activity over time and across different websites. You can opt out of this sharing with the "Do Not Sell or Share My Personal Information" link in the footer. Our site does not respond to browser "Do Not Track" signals.

10. Your rights (EU, EEA and UK)

  • Access to your data (Art. 15) and a copy of it
  • Correction (Art. 16) and erasure (Art. 17)
  • Restriction of processing (Art. 18) and data portability (Art. 20)
  • Objection to processing based on legitimate interests (Art. 21)
  • Human review of automated report generation (Art. 22)
  • Withdrawal of consent at any time
  • Complaint to a supervisory authority: the Estonian Data Protection Inspectorate (AKI), www.aki.ee, info@aki.ee, Tatari 39, 10134 Tallinn, Estonia, or the authority in your country; in the UK, the Information Commissioner's Office (ico.org.uk)

Write to info@soulaura.ai. We answer within 30 days.

11. U.S. state privacy rights

Depending on where you live, you may have the right to know what personal information we collect, to delete or correct it, to opt out of its sale or sharing for targeted advertising, and not to be discriminated against for using these rights. We collect the categories described in section 3: identifiers (name, email address, IP address), order and commercial information, internet activity on our site, approximate location and the report data you provide. The recipients are listed in section 5. Use the "Do Not Sell or Share My Personal Information" link or write to info@soulaura.ai. We respond within 45 days; if we need more time, we tell you within that period and may extend it by another 45 days. We use your date of birth only to create your report and delete it 14 days after delivery.

12. Children

Our services are for adults aged 18 and over, and we do not knowingly collect personal data directly from children. When a counselor or parent orders a report for a young person, they provide that person's name and date of birth and confirm that they are entitled to do so. If you believe a child has given us personal data, write to info@soulaura.ai.

13. Changes to this policy

We may update this policy. We post the new version here with a new "Last updated" date and, for significant changes, also inform you by email.

14. Contact

Landcore OÜ, F. R. Kreutzwaldi tn 43b, 65610 Võru, Estonia. Email: info@soulaura.ai. Phone: +90 266 384 23 74.
Supervisory authorities: Estonian Data Protection Inspectorate (AKI), www.aki.ee; for California residents, the California Privacy Protection Agency, cppa.ca.gov.