Privacy Policy, CosmicProgram

Personal information we collect

Depending on how you use the service, we may collect:

Account information: your name or chosen display name, email address, password (stored only as a secure hash), and account preferences.
Birth data for charts: the date, time and place of birth you enter to generate a reading. This is used to calculate your natal chart.
Payment information: purchases are processed by Stripe. Stripe collects and processes your card details; we receive limited confirmation and billing details (such as amount, status and the last digits of a card) and do not store full card numbers.
Usage and device information: pages viewed, actions taken, approximate location, IP address, browser and device type, and similar analytics data, some of which is collected via cookies (see our Cookie Policy).
Communications: messages you send us, such as support enquiries and feedback.

Why we collect it and the lawful basis

We collect and use personal information to:

Create and manage your account and authenticate you.
Generate, deliver and store your readings and other purchased content.
Process payments, credits and subscriptions, and provide receipts.
Provide support and respond to your enquiries.
Maintain, secure and improve the service, and detect and prevent fraud or misuse.
Send you service and account communications, and (where you have opted in) updates and offers.
Meet our legal and record-keeping obligations.

We collect this information because it is reasonably necessary for our functions and activities. Where you provide sensitive information, or where consent is otherwise required, we rely on your consent, which you may withdraw at any time. For users to whom the GDPR applies, our lawful bases are performance of a contract, our legitimate interests in operating and improving the service, your consent, and compliance with legal obligations.

How we share your information

We do not sell your personal information. We share it only with service providers who help us run the service, and only as needed. These include:

Stripe, our payment processor, to take and manage payments and subscriptions.
Hosting and infrastructure providers that store and serve the application and its data.
Email and communications providers used to send account, support and (where opted in) marketing messages.
Analytics providers that help us understand and improve how the service is used.

Some of these providers may store or process data outside Australia. Where personal information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the APPs. We may also disclose information where required or authorised by law.

Retention

We keep personal information only for as long as needed for the purposes described above, including to provide your library of past readings, and to meet legal, tax and accounting obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it.

Security

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes encryption in transit, hashed passwords, and restricted access. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected individuals and the regulator where required in the event of an eligible data breach.

Your privacy rights

Under the Australian Privacy Act and the APPs, and equivalent rights under the GDPR where it applies, you may:

Request access to the personal information we hold about you.
Ask us to correct information that is inaccurate, out of date or incomplete.
Request erasure of your personal information, subject to our legal obligations.
Withdraw consent to optional processing, such as marketing communications.
Object to or ask us to restrict certain processing, and (where the GDPR applies) request data portability.
Make a complaint about how we have handled your personal information.

To exercise any of these rights, contact us using the details below. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC).

Cookies

We use cookies and similar technologies to operate the service and understand its use. For details and how to control them, please see our Cookie Policy.

Contact us about privacy

For privacy questions or requests, or to make a complaint, contact our privacy team at support@cosmicprogram.com. We will respond within a reasonable time.