1. Introduction
mySoulAtlas ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.
2. Information We Collect
We collect the following types of information:
- Identity and contact: birth name, display name and email address.
- Birth and derived data: birth date, time, time accuracy, birthplace, verified coordinates/timezone and calculated chart or numerology values used to create the report.
- Order and consent data: payment/session identifiers, product details, acceptance timestamps and marketing preference. Stripe processes card details; we do not store card numbers.
- Usage data: page/source information, device category and a coarse IP network prefix for aggregate traffic and abuse analysis; we do not retain a full IP address or full user-agent in new visit records.
- Generated and shared content: report content and any insight a customer chooses to share.
3. How We Use Your Information
We use your information to:
- Create your personalised Soul Atlas report
- Deliver your digital product via email
- Process payments securely
- Communicate about your order
- Improve our services
- Provide the free mini-reading. Your birth date is used to create the result but is not retained with it. Your reflective answers and generated result are saved so your private result link remains available.
- Comply with legal obligations
4. Legal Basis for Processing
We process your personal data based on:
- Contract performance: To deliver the product you purchased
- Legitimate interests: To improve our services and prevent fraud
- Consent: For marketing communications (where you have opted in)
- Legal obligation: To comply with applicable laws
5. Data Retention
We retain your personal data for:
- We do not currently run automatic deletion. Retention periods and deletion workflows are subject to owner approval and implementation.
- Requests are handled manually and may be limited where payment, tax, dispute, security or other legal obligations require retention.
6. Data Security
We implement appropriate security measures including:
- SSL encryption for all data transmission
- Secure payment processing via Stripe
- Limited access to personal data
- Regular security reviews
7. Third-Party Services
We use the following third-party services:
- Stripe: Payment processing. New checkout metadata contains only an internal order reference and operational product/schema values.
- SendGrid: Email delivery, including optional mini-reading copies
- Gmail fallback: email delivery if configured as a fallback
- OpenAI: AI-assisted report and insight generation. Prompts use display name and relevant structured/calculated birth context; name-based numerology may use birth name. They do not include customer email or raw birthplace text in chapter prompts.
- PDFMonkey: PDF generation; Google Maps/Places and Nominatim/OpenStreetMap: location lookup where used; Google Analytics and/or Umami: analytics where active; Replit and the configured database/storage provider: hosting and application storage.
These services have their own privacy policies and data protection measures.
8. Your Rights
Under applicable data protection laws, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate information
- Erasure: Request deletion of your data (where applicable)
- Portability: Receive your data in a portable format
- Object: Object to certain processing activities
- Withdraw consent: Where processing is based on consent
9. Cookies
Our website uses essential cookies for:
- Session management
- Security purposes
We do not use advertising cookies. We store anonymous funnel milestones and source information with an essential session cookie so we can understand whether visitors start and complete the free journey. These events do not contain birth data, names, email addresses, or a link to a saved reading.
10. International Transfers
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for any international data transfers.
11. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.
13. Contact Us
For privacy-related questions or to exercise your rights, including a manual deletion request, contact us at:
📧 contact@mysoulatlas.com
For complaints about data handling, you have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).
← Back to Home