Privacy Policy | Purple Heaven Cosmology

This Privacy Policy explains how Purple Heaven Cosmology (“Purple Heaven,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information when you use purpleheaven.app, our applications, blog, charts, artificial-intelligence features, readings, bookings, subscriptions, communications, and related services (collectively, the “Services”).

It also describes choices and privacy rights that may be available to you. Our Terms of Service govern use of the Services.

1. Scope and important distinctions

This Policy applies to personal information that Purple Heaven controls. It does not govern an independent practitioner or third-party site that provides its own privacy notice, or information collected by a third party that independently controls how it processes that information. If a feature links to or embeds a third-party service, review that service’s privacy notice as well. This Policy also does not apply to information that has been deidentified so it can no longer reasonably be linked to a person, except where we use it to test our deidentification methods.

Purple Heaven is an astrology and cultural-education service, not a health-care provider or health plan. Information you submit generally is not protected health information under HIPAA merely because it concerns health. Please do not send medical records or more sensitive information than is needed for the reading or feature you request.

2. Information we collect

The information we collect depends on the features you use.

Account and identity information

We may collect your name, email address, authentication method, verification status, account identifiers, preferences, and account-security records. If you sign in through Google or another identity provider, we receive the information that provider makes available under your permission, such as your name, email address, and provider account identifier. We do not receive your identity-provider password.

Birth and profile information

We collect information used to create and calculate profiles, such as a profile name, birth date, birth time, birth location, coordinates, time zone, sex or gender selection where a calculation method uses it, calculation settings, notes, relationship to the person, and profile history. Profiles may concern you or another person whose permission you have obtained.

Charts, readings, and conversation information

We process chart inputs and outputs, questions, prompts, conversations, selected chart features, generated answers, practitioner notes, feedback, and the calculation and policy versions used for a response. To keep a conversation understandable and auditable, persisted agent turns may retain the exact chart-context evidence used for that turn even if you later edit the underlying profile.

You may choose to discuss physical or mental health, symptoms, vitality, relationships, sexuality, finances, beliefs, legal concerns, or other sensitive matters in a question, booking, or reading. We collect this information only when you provide it or when the requested Service necessarily derives a related inference. Please do not submit medical records or other sensitive information unless it is necessary for a Service you request.

Booking and event information

If you schedule a reading, class, consultation, or event, we may collect contact details, appointment time and time zone, selected service, intake responses, accessibility needs, attendance, cancellation status, session communications, and any recording or notes disclosed to you.

Subscription, transaction, and payment information

If you make a purchase, we collect the selected offering, price, currency, tax, subscription status, renewal and cancellation events, invoices, refunds, disputes, payment-processor customer identifiers, and limited payment details such as card brand and last four digits. Our payment processor, such as Stripe, collects and processes full payment-card or bank information; Purple Heaven does not need to store full card numbers.

Communications

We collect messages and attachments you send through contact, support, feedback, waitlist, booking, or other communication channels, along with delivery status and our response. If you join a mailing list, we collect your email address and subscription preferences.

Surveys, promotions, and voluntary submissions

If we invite you to participate in a survey, promotion, waitlist, or similar activity, we collect the information you choose to provide and any information needed to administer that activity. Any activity-specific terms or notices shown at the time will also apply. Please do not send information that a form or feature does not request.

Device, network, and usage information

We may automatically receive IP address, browser and device type, operating system, approximate region derived from IP, language, referring page, requested pages, timestamps, session and security events, error information, and interactions with features. We use narrowly scoped product analytics to understand account and feature usage.

As a product rule, Purple Heaven does not intentionally place birth data, chart contents, or conversation text in URLs, product-analytics events, or routine operational logs.

Cookies and local storage

We use cookies or similar browser storage for sign-in, session security, preferences, account continuity, and necessary application functions. We may use limited analytics storage if disclosed. You can control browser storage, but blocking necessary storage may prevent login or other features from working.

We do not currently use third-party advertising pixels or sell information for targeted advertising. If that changes, we will update this Policy and provide any choices required by applicable law before the new practice begins.

Derived information

The Services derive charts, elemental balances, timing indicators, interpretations, recommendations, conversation context, and similar results from submitted information. These are traditional or generated inferences, not verified facts about a person.

3. Sources of information

We collect information:

directly from you or a person using the Services with authority to act for you;
automatically from your browser, device, and interaction with the Services;
from identity, booking, payment, mapping, email, hosting, security, and analytics providers;
from practitioners or support personnel involved in a requested Service; and
by deriving calculations or inferences from information already described.

4. How we use information

We use personal information to:

create and secure accounts and authenticate users;
create, save, calculate, and display profiles and charts;
provide readings, conversations, bookings, subscriptions, and requested support;
preserve the evidence and version history needed to reproduce or understand persisted AI responses;
process payments, renewals, cancellations, refunds, disputes, and transaction records;
send service, security, booking, billing, and account communications;
send newsletters or marketing where permitted, with an unsubscribe option;
personalize settings and remember user choices;
maintain, debug, measure, and improve the Services;
prevent abuse, fraud, security incidents, and violations of our Terms;
protect users, Purple Heaven, and the public;
comply with law, legal process, tax, accounting, and recordkeeping duties; and
establish, exercise, or defend legal claims.

Where applicable law requires a legal basis, we rely on performance of a contract, your consent, compliance with law, protection of vital interests, or our legitimate interests in operating and securing the Services, as appropriate. You may withdraw consent prospectively, but withdrawal does not invalidate earlier lawful processing.

5. How we disclose information

We may disclose information only as reasonably necessary for the purposes above:

Cloud, hosting, database, and security providers, such as Cloudflare and Neon, process network requests, application hosting, storage, backups, and security data.
Identity and communications providers, such as Google and Resend, support sign-in, location lookup, authentication, email delivery, and communications.
AI and calculation providers, which may include Google, OpenAI, local Codex infrastructure, and traditional calculation libraries, process the bounded question, chart context, and instructions necessary to produce a requested result. We structure provider access through service contracts and technical controls where available, but provider terms may differ by feature.
Payment and booking providers, such as Stripe and any scheduling provider identified when used, process transactions, subscriptions, appointments, fraud checks, and related records.
Practitioners and contractors receive information needed to perform a reading, booking, support request, or other service for you and are expected to handle it consistently with their role and obligations.
Professional advisers and authorities may receive information when reasonably necessary for legal, accounting, insurance, security, or compliance purposes, or when required by valid legal process.
Transaction counterparties may receive information in connection with a merger, financing, reorganization, sale, or transfer, subject to appropriate confidentiality and notice where required.

We may disclose information at your direction or with your consent. We may also use or disclose aggregated or deidentified information that cannot reasonably be linked to a person, and we will not attempt to reidentify it except to test our deidentification methods or as permitted by law.

Third-party providers may process information under their own terms and privacy notices, especially when they independently control a payment, identity, communications, hosting, mapping, or other platform. We do not control those independent practices. We disclose only the information reasonably needed for the requested feature, subject to the provider relationship, technical controls, and applicable law.

6. Artificial intelligence and automated processing

When you request an AI-assisted interpretation, we may send a limited evidence packet containing relevant chart details, your question, conversation context, and safety instructions to the selected provider. The provider returns generated output. Purple Heaven may retain the request context, response, provider and model identifiers, and safety or cost records as part of the conversation history.

AI output is not used by Purple Heaven to make legal, employment, housing, credit, insurance, health-care, or similarly significant eligibility decisions about you. Do not submit another person’s private information to an AI feature without permission.

7. Sale, targeted advertising, and financial incentives

Purple Heaven does not sell personal information for money. We do not currently share personal information for cross-context behavioral advertising or targeted advertising, and we do not knowingly sell or share the personal information of anyone under 18. We do not currently offer a financial incentive in exchange for personal information.

If these practices change, we will update this Policy and provide any required notice and opt-out mechanism before the new practice begins. We honor legally required browser-based opt-out preference signals, such as Global Privacy Control, for processing to which they apply.

You can unsubscribe from marketing emails by using the unsubscribe control in the message. We may continue to send transactional, security, account, booking, and billing communications that are necessary to provide the Services or respond to you.

8. Retention

We keep each category only as long as reasonably necessary for the disclosed purpose, considering the sensitivity, volume, legal duties, security needs, user expectations, and whether the information can be deleted or deidentified.

In general:

active account and profile information is kept while the account or profile is active;
deleted or archived profiles are removed from active use but may remain for a limited period in protected backups, fraud-prevention records, or records required by law;
persisted conversation turns and their chart-context evidence are kept while needed to provide conversation history, preserve the record you requested, resolve disputes, and meet security or legal obligations;
booking, payment, subscription, tax, refund, and dispute records are kept for legally required accounting, tax, fraud, and contract periods;
contact and support records are kept while the matter is active and for a reasonable follow-up period;
consent and cancellation records may be kept for the period required to prove compliance; and
security logs and backups are kept on limited, risk-based schedules and then deleted or overwritten.

We may retain information longer when reasonably necessary for litigation hold, a legal obligation, safety, fraud prevention, or a dispute. When retention ends, we delete, aggregate, or deidentify the information.

9. Security

We use administrative, technical, and organizational safeguards designed for the nature of the information, including access controls, encrypted transport, secure session handling, scoped provider interfaces, data minimization, and restrictions on sensitive data in telemetry. No system is perfectly secure. You are responsible for protecting your account credentials and for choosing what sensitive information to submit.

If a breach requires notice, we will provide notice as required by applicable law.

10. Your choices and privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to:

know or confirm whether we process your personal information;
access or obtain a portable copy of certain information;
correct inaccurate information;
delete information;
withdraw consent or object to or restrict certain processing;
opt out of sale, targeted advertising, profiling, or certain automated decisions;
unsubscribe from marketing communications; and
appeal a denied privacy request.

You can edit or delete certain profile information through available account controls. To make another request, use our contact page or email ghberetvas@gmail.com with the subject “Privacy Request.” Tell us the right you want to exercise and the jurisdiction where you live.

We will verify requests in a way proportionate to the sensitivity of the information, such as by asking you to use an existing account or confirm control of an email address. Authorized agents may submit requests where permitted, but we may require proof of authority and direct identity confirmation. You do not have to create a new account to make a request. We will not unlawfully discriminate against you for exercising a privacy right.

We may deny or limit a request where permitted—for example, if we cannot verify it, must retain records by law, need them for security or legal claims, or the request would affect another person’s rights. We will explain the decision and any appeal route that applies.

California notice

The categories collected in the preceding 12 months may include identifiers; customer records; protected-classification information you choose to provide; commercial information; internet or electronic activity; approximate geolocation and submitted birth location; audio or similar information if a recording is disclosed; professional or employment-related information you choose to discuss; sensitive personal information; and inferences. The sources, purposes, recipients, and retention criteria for those categories are described above.

California residents may have rights to know, access, correct, delete, and receive information, and to opt out of sale or sharing and limit certain uses of sensitive personal information, subject to the California Consumer Privacy Act’s scope and exceptions. Purple Heaven does not currently sell or share personal information as those terms are used for cross-context behavioral advertising. If Purple Heaven becomes subject to a requirement that changes this notice, we will update it and provide the required controls.

Other U.S. state privacy rights

Residents of other jurisdictions may have additional rights under the privacy law that applies where they live, including rights to confirm processing, access, correct, delete, obtain a portable copy, withdraw consent, opt out of certain sale, targeted-advertising, or profiling practices, and appeal a denied request. The scope and exceptions vary by jurisdiction. Purple Heaven does not use personal information to make decisions that produce legal or similarly significant effects about you. We will honor applicable rights and provide the controls required by the law that applies to your request.

EEA, Switzerland, and the United Kingdom

If you are in the European Economic Area, Switzerland, or the United Kingdom, applicable data-protection law may give you rights to access, correct, delete, restrict, object to, or port your personal information, and to withdraw consent where processing relies on consent. Our stated legal bases, where required, are performance of a contract, consent, compliance with law, protection of vital interests, and legitimate interests in operating and securing the Services, as appropriate to the processing. You may also complain to the data-protection authority in your jurisdiction. Where required, we use appropriate safeguards for transfers to countries outside your region.

11. International and interstate processing

Purple Heaven operates in the United States and uses providers that may process information in the United States or other locations. Privacy laws in those places may differ from those where you live. Where required, we use an approved transfer mechanism or other safeguard.

12. Children

The Services are for adults 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and delete it as appropriate.

13. Do Not Track

Some browsers send “Do Not Track” signals, but there is no universally accepted response standard. Because we do not currently use cross-context behavioral advertising, our practices do not change in response to ordinary Do Not Track signals. We do honor legally recognized opt-out preference signals where applicable, as described above.

14. Changes to this Policy

We may update this Policy as the Services, providers, or law change. The “Last updated” date identifies the current version. We will provide any additional notice or obtain consent required before a material change applies to previously collected information.

15. Contact

For privacy questions or requests, use the contact page or email ghberetvas@gmail.com with the subject “Privacy Request.” Please do not include sensitive health details in an unencrypted email.