Privacy Policy

The assessment asks you to answer honestly about yourself, so this page returns the favour: it says plainly what we store, where it goes, and what you can do about it — written to be read, not clicked past.

What we store

When you use Persona AI, this is what ends up in our database:

• Your email address, used to sign you in and to write to you about your account.
• Your name, if you give one — the sign-up form asks for it but leaves it optional.
• A hash of your password — a one-way scrambled form. We never store the password itself and cannot recover it.
• The account record around all of this: the date you signed up, whether you have confirmed your email address, your access level, and — if you have bought Premium — the date that access runs out.
• Your sign-in sessions: a hashed form of the token sitting in your browser, and the date it expires, so we can keep you signed in and sign you back out.
• The one-time links we email you: a hashed form of each email-verification and password-reset link, which kind it is, and when it expires. Hashed means the link in your inbox cannot be reconstructed from our database.
• Your assessment answers.
• Details of the assessment itself: the language you took it in, and which set of questions you were shown, so an assessment in progress stays consistent even if we later edit the question bank.
• Your computed results — the dimension scores and the archetype they map to.
• Your premium report, if you have one.
• Your AI-coach conversation — every message you and the coach exchange.
• Payment records: what was paid, when, by which method, the reference number the payment provider gives us, and any coupon code you used.
• If you subscribe by card: the subscription's status, when the current period ends, and the date you cancelled, if you did.
• The reference ids of the payment notifications Stripe and Omise send us, kept so that the same notification is never processed twice.

That list is meant to be complete rather than a summary — including the unglamorous plumbing most policies leave out. Some things are deliberately absent: we do not store your card number, we run no advertising or analytics trackers, and we neither buy nor sell data about you. If we ever start storing something new, this list changes at the same time.

Payments and card details

Card payments are handled by Stripe, and PromptPay payments by Omise. Your card number goes to them directly and never touches our servers — we never see it and never store it.

What we keep is the receipt side: the amount, the date, the method, and the reference numbers Stripe or Omise give us, so we can find a payment again when you ask about it.

The AI coach

People tell a coach personal things, so you should know exactly where those words go. When you message the coach, your conversation — together with your scores and a summary of your report, which the coach reads in order to answer you — is sent to Anthropic, the AI provider whose model generates the coach's replies.

Your coach conversation history is stored with your account and is currently kept indefinitely. If you want it deleted, email us and we will delete it — see Your rights below.

Cookies

Cookies are small pieces of text a site stores in your browser. Every cookie we set is there to make something work — none are used for advertising, and none follow you to other sites. Your language choice travels in the page address, not in a cookie. These are the ones the site sets today:

• session — keeps you signed in. It holds a random token, not your email or password, and it lasts 30 days. Only our server can read it; scripts running on the page cannot.
• assessmentId — remembers which in-progress assessment belongs to your browser, so refreshing the page does not lose your place. It lasts 30 days, and only our server can read it.
• bigfive — set when you finish the Big Five quiz. It holds your five trait scores, each a number from 0 to 100, and lasts 30 days.
• type16 — set when you finish the 16 Types quiz. It holds your four-letter type code and lasts 30 days.
• ennea — set when you finish the Enneagram quiz. It holds your dominant type number, 1 to 9, and lasts 30 days.

Those last three deserve to be spelled out. They are written by the quiz page itself, inside your browser, and unlike the first two they are not marked httpOnly — so any script running on the page can read them. They are how a result survives the trip out to payment and back. What they hold is the result itself, not your name or email, and they stay for 30 days unless you clear your browser's cookies, which removes them immediately.

Your rights

Thailand's Personal Data Protection Act (PDPA) and, if you are in the EU, the GDPR give you real rights over this data: to see it, to correct it, and to have it deleted.

Here is honestly how that works today: there is no self-service delete button and no export tool in the product yet. To exercise any of these rights, email us from the address on your account and say what you need. A person reads it and handles the request by hand.

Until you ask, your data — including your coach conversation — stays stored. We would rather tell you that plainly than describe machinery we have not built.

Who we are and how to reach us

Persona AI is operated from Thailand by Mello Verse Co., Ltd., registered in Thailand under company registration number 0105565115859. For questions about your personal data, or to exercise any of the rights above, email ask@personalityloom.com.

Email is the only way to reach us — there is no phone line, no live chat, and no contact form. A real person reads the inbox.

ask@personalityloom.com

If this policy changes, we will update this page and the date at the top.