Privacy Policy

1. Introduction

Divinity Code, operated by Pandora Ninety LLC ("we," "us," or "our"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our numerology service at divinitycode.net ("the Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and authentication data when you create an account
• Profile Information: Birth name, current name (if different), and birthdate for numerology calculations
• Reading Context: Optional personal context you provide for AI-generated readings
• Payment Information: Processed securely by Stripe; we do not store your payment card details

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and interactions with the Service
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use your information solely to:

• Provide and maintain the Service, including generating numerology charts and readings
• Process transactions and manage your account
• Authenticate your identity and maintain session security
• Respond to your inquiries and provide customer support
• Improve and optimize the Service
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

4. Data Sharing and Disclosure

WE DO NOT SELL, RENT, OR TRADE YOUR PERSONAL INFORMATION TO THIRD PARTIES.

We may share your information only in these limited circumstances:

• Service Providers: With trusted third parties who assist in operating the Service (e.g., Stripe for payments, hosting providers), bound by confidentiality obligations
• AI Processing: Names and birthdates are sent to AI providers (Anthropic) to generate readings; this data is processed according to their privacy policies and is not used to train their models
• Legal Requirements: When required by law, court order, or governmental authority
• Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls limiting data access to authorized personnel
• Secure payment processing through PCI-compliant providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Charts and Readings: Retained until you delete them or your account
• Transaction Records: Retained as required for accounting and legal compliance (typically 7 years)
• Deleted Data: Soft-deleted items may be retained for up to 30 days before permanent deletion

You may request deletion of your data at any time by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to certain processing of your data
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at the email address below. We will respond within the timeframe required by applicable law.

8. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We do not use third-party advertising or tracking cookies.

• Session Cookies: Required for authentication and security
• Preference Cookies: Store your language and display preferences

You can control cookies through your browser settings, but disabling essential cookies may affect the functionality of the Service.

9. Third-Party Services

The Service integrates with the following third-party services:

• Stripe: Payment processing (Privacy Policy)
• Google: Authentication (Privacy Policy)
• Anthropic: AI-generated readings (Privacy Policy)

These services have their own privacy policies governing their use of your data.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to such transfers. We take appropriate safeguards to ensure your data remains protected in accordance with this policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date." Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights