🔐 Privacy Policy
Last updated: March 2026
🔒 Your privacy matters to us. OccultSanctum collects only the data necessary to provide its services and does not sell, rent, or trade your personal information to third parties for marketing purposes.
1. Who We Are
OccultSanctum ("we," "us," "our") operates the platform at myday.occultsanctum.com and associated mobile applications. We are based in Perth, Western Australia, Australia. For any privacy-related inquiries, contact us at occultsanctum@gmail.com.
2. Information We Collect
2.1 Account Information (Collected at Sign-Up)
| Data | Source | Purpose |
|---|---|---|
| Name | Google / Apple sign-in | Account identification, personalisation |
| Email address | Google / Apple sign-in | Account identification, transactional emails, support |
| Profile photo URL | Google sign-in (optional) | Avatar display in the app |
| Google ID / Apple User ID | OAuth providers | Unique account linking |
2.2 Birth and Personal Details (Provided by You)
| Data | Purpose | Required? |
|---|---|---|
| Date of birth | Astrological chart calculation, numerology | Required for most services |
| Time of birth (with seconds) | Precise chart calculation, BTR | Optional but recommended |
| Place of birth (coordinates, timezone) | Astrological chart calculation | Optional but recommended |
| Full name | Numerology calculations | Required for numerology services |
2.3 Data Generated Through Use
| Data | Purpose | Retention |
|---|---|---|
| Chat conversations with AI oracles | Service delivery, context continuity | Stored until you delete or request deletion |
| Generated charts and reports | Your reference, chart comparison | Stored until you delete or request deletion |
| BTR results and saved charts | Birth time analysis reference | Stored until you delete or request deletion |
| Palm images (palmistry) | AI-powered palm reading | Processed temporarily; not permanently stored |
| Credit balance and transaction history | Billing, audit, dispute resolution | Retained for legal/accounting requirements |
| Widget preferences, profile settings | Dashboard personalisation | Stored with your account |
2.4 Automatically Collected Data
When you access the Platform, we may automatically collect:
- Session cookies — to maintain your authenticated session. No tracking or advertising cookies are used.
- Basic server logs — IP address, browser type, request timestamps, and page visited. These are used for security monitoring and debugging, and are rotated regularly.
- Device information — operating system and browser version, used to ensure compatibility.
3. Sensitive Data — Special Category Information
Some data you provide may be considered sensitive or special category data under certain privacy laws. This includes:
- Religious or philosophical beliefs — Your use of astrological, numerological, and spiritual services may imply interest in these belief systems.
- Biometric-adjacent data — Palm images used for palmistry analysis.
- Health-related inferences — Astrological readings may reference health topics.
By using the Platform and voluntarily providing this information, you give explicit consent to its processing for the stated purposes. You may withdraw this consent at any time by ceasing to use the Platform and requesting deletion of your data.
4. How We Use Your Information
We use your personal information exclusively for the following purposes:
- Service delivery — Generating astrological charts, numerology reports, palmistry readings, and AI-powered consultations.
- Account management — Authentication, credit balance management, profile customisation.
- Transactional communications — Payment receipts, credit notifications, service updates.
- Platform improvement — Analysing anonymised usage patterns to improve service quality (not individual data profiling).
- Customer support — Responding to your enquiries and resolving issues.
- Security and fraud prevention — Detecting and preventing unauthorised access, payment fraud, and abuse.
- Legal compliance — Meeting applicable regulatory and legal obligations.
We do not use your data for:
- Targeted advertising or ad profiling
- Selling or renting to third-party marketers
- Training AI models (your data is not used to train Anthropic or Google models)
- Building profiles for purposes unrelated to Platform services
5. Third-Party Services and Data Sharing
We share limited data with the following third-party service providers, solely for the purposes stated:
| Service | Provider | Data Shared | Purpose |
|---|---|---|---|
| Authentication | Google, Apple | OAuth tokens | Account sign-in |
| AI Processing | Anthropic, Google | Chat messages, chart context sent as API prompts | Generating AI responses |
| Payments | Stripe, Razorpay, Apple, Google | Payment details (handled by processor) | Credit purchases |
| Geocoding | Google Maps / Places | Place search queries | Birth place coordinates |
| Resend | Email address, transactional content | Sending receipts, notifications | |
| Hosting | Render | All Platform data (hosted infrastructure) | Running the Platform |
| Vector Search | Pinecone | Anonymised knowledge base embeddings | RAG for AI oracle responses |
Each third-party provider operates under their own privacy policy. We encourage you to review their policies. We do not control how these providers handle data once transmitted to them.
5.1 AI Provider Data Handling
When you interact with our AI oracle chatbots, your messages and relevant chart/numerology context are sent to Anthropic (Claude) or Google (Gemini) via their APIs for processing. These providers:
- Process your data to generate responses and return them to our Platform.
- May retain API request data in accordance with their own data retention policies.
- Do not use API data submitted through our Platform for training their foundation models (per their current API terms).
We recommend reviewing Anthropic's Privacy Policy and Google's Privacy Policy for details.
6. Data Storage and Security
6.1 Storage Location
Your data is stored on servers managed by Render, Inc. Infrastructure is hosted in data centres that maintain industry-standard physical and digital security measures.
6.2 Security Measures
We implement the following security measures to protect your data:
- Encrypted data transmission (HTTPS/TLS) for all communications between your device and our servers.
- Secure authentication via OAuth 2.0 (Google) and Sign in with Apple — we never store your password.
- Server-side session management with secure, httpOnly cookies.
- Payment processing handled entirely by PCI-DSS compliant third-party providers — we do not store credit card details.
- Access controls limiting data access to authorised personnel only.
- Regular security monitoring and log review.
6.3 Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users by email within 72 hours of becoming aware of the breach and, where required, notify the relevant data protection authority.
7. Data Retention
- Account data: Retained as long as your account is active.
- Chat histories and saved charts: Retained until you delete them or request account deletion.
- Palm images: Processed temporarily during the reading session; not stored permanently on our servers.
- Payment records: Retained for a minimum of 7 years to meet tax and accounting obligations under Australian law.
- Server logs: Rotated and deleted on a rolling basis (typically within 30 days).
- Email delivery records: Retained for delivery tracking and bounce management.
Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g., payment records for tax compliance).
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to Access — Request a copy of the personal data we hold about you.
- Right to Correction — Request correction of inaccurate or incomplete data.
- Right to Deletion — Request deletion of your account and personal data (subject to legal retention requirements).
- Right to Data Portability — Request your data in a structured, commonly used, machine-readable format.
- Right to Withdraw Consent — Withdraw consent for processing at any time (this does not affect the lawfulness of processing before withdrawal).
- Right to Object — Object to processing based on legitimate interests.
- Right to Complain — Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at occultsanctum@gmail.com. We will respond within 30 days.
9. Australian Privacy Act Compliance
We comply with the Australian Privacy Principles (APPs) as set out in the Privacy Act 1988 (Cth). Where there is any inconsistency between these policies and the APPs, the APPs prevail. Australian residents can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if they believe their privacy has been breached.
10. International Users
If you are accessing the Platform from outside Australia, your data will be transferred to and processed in Australia (or wherever our hosting provider maintains servers). By using the Platform, you consent to this transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws: your data is transferred on the basis of your explicit consent provided at sign-up. You may withdraw this consent at any time by ceasing use and requesting account deletion.
For users in India: we comply with applicable provisions of the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA) to the extent applicable. Your data is processed with your consent and you have the right to withdraw consent and request deletion.
11. Children's Privacy
The Platform is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such data, we will delete it promptly. Users aged 13–17 may only use the Platform under parental supervision. If you believe a child under 13 has provided us with personal data, please contact us immediately.
12. Cookies and Tracking
We use only essential session cookies to maintain your authenticated session. These cookies are strictly necessary for the Platform to function and cannot be opted out of while using the service.
We do not use:
- Advertising or retargeting cookies
- Third-party analytics trackers (Google Analytics, Facebook Pixel, etc.)
- Cross-site tracking mechanisms
- Fingerprinting technologies
13. Push Notifications
If you opt in to push notifications, we may send you daily astrological insights or service updates. You can disable push notifications at any time through your device settings or browser permissions. We do not use push notification tokens for tracking or profiling purposes.
14. Email Communications
We send the following types of email communications:
- Transactional emails — Payment receipts, credit notifications, account-related alerts. These cannot be opted out of while maintaining an active account.
- Service updates — Notifications about new features, maintenance, or important changes to the Platform.
We do not send marketing or promotional emails. You may unsubscribe from non-essential emails at any time using the unsubscribe link provided in each email or by visiting your account settings.
Emails are sent through Resend, a third-party email delivery service. We track delivery status (delivered, bounced, opened) for reliability purposes. Hard bounces result in automatic unsubscription to maintain list hygiene.
15. Account Deletion
You may request deletion of your account and all associated personal data at any time by contacting occultsanctum@gmail.com. Upon receiving your request:
- Your account will be deactivated immediately.
- Personal data (profile, birth details, chat histories, saved charts, preferences) will be permanently deleted within 30 days.
- Payment records will be retained as required by Australian tax law (minimum 7 years) but will be disassociated from your personal profile.
- Data already transmitted to third-party AI providers via API calls cannot be recalled by OccultSanctum — it is subject to their respective retention policies.
- Any remaining credits at the time of deletion are forfeited and non-refundable.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated policy on this page with the revised "Last updated" date. For material changes, we will make reasonable efforts to notify you via email or a prominent notice on the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.
17. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, contact us at:
OccultSanctum — Privacy Enquiries
Email: occultsanctum@gmail.com
Website: occultsanctum.com
Location: Perth, Western Australia, Australia
For complaints that are not resolved to your satisfaction, Australian residents may contact the OAIC at www.oaic.gov.au/privacy/privacy-complaints.