Privacy Policy

OrbHeaven is operated by Blaxton Pinnacle Corp, trading as OrbHeaven. We decide what is collected and why, which makes us the controller of your information.

This policy covers orbheaven.com and the app behind it. It sits alongside our Terms of Service.

To make an account: your email address and a password, which is stored only as a hash. Your first name, if you give it.

To cast your chart: your birth date, your birth time if you know it, and your birthplace, which we turn into coordinates and a time zone. If you use the numerology page, the full name given at your birth. If you set a current location, that too.

What you do here: the questions you ask and the answers written for you; your check-in answers and the notes with them; your morning and evening logs; tarot readings, rune casts and hexagrams; dreams you write down; intentions; days you chose; anything saved to memory; and the letters written at the turn of a month or on your solar return.

Technical: a session cookie so you stay signed in, and your browser’s time zone so the app knows what day it is where you are. If analytics and error reporting are switched on, the pages you opened and the details of any crash.

We do not ask for your address, your phone number, your date of death, your income, your health, your beliefs or your identity documents, and there is nowhere to put them. Card details never reach us. We do not buy information about you from anyone, and we do not build a profile of you from anywhere but this app.

You can add other people by their birth details so their chart can be read alongside yours. Those people have not agreed anything with us and usually do not know the record exists, so this deserves saying plainly.

What we hold: the name you gave them, what they are to you if you said, their birth date, time and place, the chart calculated from it, and anything the service wrote for you about the two of you.

What never happens: we do not contact them, we do not create an account for them, we do not tell them, and we never sell or share their details. Their chart is visible to you alone.

Removing them: you can delete a person from their page at any time, which removes their details and their chart. If someone believes you added them and wants the record gone, they can email support@orbheaven.com and we will find it and delete it.

You are responsible for having the right to give us these details. That is section 5 of the Terms.

• To give you the service you asked for. Birth details are the only way to cast a chart; without them there is no product. Your questions and answers are the record, and the record is the thing the service is for.
• Because you turned something on. Memory, the morning email and the calendar feed are each off until you choose them, and each can be turned off again.
• To keep it working and safe. Rate limiting, error reporting and basic usage counts, so the service stays up and is not abused.
• To take payment, if you subscribe.

We never use any of it to target advertising, and there is no advertising in the product.

Written interpretations are produced by a third-party language model provider. What is sent is the calculated chart and the parts of your record needed for that piece of writing: the question, the relevant transits, the cards drawn, and where memory is on, the items you saved.

Your email address, your password and your payment details are never sent to it. Under the terms on which we use the provider’s interface, what we send is not used to train its models.

Every written piece keeps a copy of what it was based on, which you can open and read under the answer. That is there so you can check it, and so this paragraph can be checked too.

We use a small number of providers, each for one job, and each bound by contract to work only on our instructions:

• Hosting and infrastructure — running the site and holding the database where your account and record live.
• The language model provider — the written interpretations, as described above.
• Geocoding — turning a place name into coordinates and a time zone. The lookup is made by our server, so nothing about you is exposed to them.
• Payment processing — if you subscribe. They hold your card details; we never see them.
• Email delivery — sending the morning email, if you turn it on.
• Analytics and error reporting — where enabled. Neither is ever sent what you wrote: no question, no reading, no birth detail, no memory. Page addresses are stripped of identifiers before they are sent, so a link to one of your conversations becomes the shape of the page and not the page itself.

The current list by name is available to anyone who asks: email support@orbheaven.com and we will send it. We name categories here rather than companies because a provider can change; the protections do not, and neither does your right to know who holds your information.

None of them is allowed to use your information for their own purposes. We do not sell it, rent it or trade it, and we never will. If we are ever required by law to hand something over, we will tell you unless we are forbidden to.

We and our providers are based in the United States, and your information is processed there. If you are in the United Kingdom, the European Economic Area or Switzerland, that means it leaves your country; where a transfer needs a legal basis, our providers use standard contractual clauses or an equivalent mechanism.

A session cookie keeps you signed in. Without it you would have to sign in on every page, so there is no way to turn it off and still use an account.

Your browser also keeps small preferences locally, such as which tarot deck you chose. Those never leave your device.

Where analytics is enabled it sets a cookie to count returning visits. We run no advertising cookies and no advertising network. Where a web analytics provider offers advertising features — linking what you do here to an advertising profile, or personalising ads with it — they are switched off in our configuration, and we do not use them.

We do not store it. The public sky page, the birthplace lookup and the sign-up reveal are rate limited, and the counter is keyed on a salted hash of the address that cannot be turned back into it. Those counters expire within a day. The same applies to the ceilings on asking and reading, which are counted against a hash of your account rather than an address.

Our product analytics and our error reporting are both configured to discard it rather than take it off the request. That is a setting in our code, not a promise about a supplier’s defaults.

One thing we will not overstate. Every request your browser makes to anyone carries your address, ours included, and a web analytics provider is no exception. Where we use one to measure how people find the site, it receives the address the way any web server does, uses it to work out roughly which country you are in, and does not store it. We never receive it, and nothing it holds is joined to your account.

Your record is kept until you delete it or close your account, because a record that expired would defeat the point of keeping one.

Rate-limit counters expire within a day. Crash reports and usage counts are kept by those providers on their own schedules, typically months rather than years. Records we are required to keep for tax or accounting, such as an invoice, are kept for as long as the law requires even after an account is deleted.

A message you send through the contact form is kept so we can answer it and remember the answer. If you sent it while signed in it is part of your record: it is in your download, and deleting your account deletes it with everything else. A message sent while signed out, or an email you send us directly, is not attached to an account and we will not find it that way — write to support@orbheaven.com and ask, and we will delete it.

Most of this is a button rather than a request, and needs no waiting:

• Read and take everything. Account downloads your whole record as a document to read and as data to keep. It is the rows as stored, not a summary.
• Correct it. Birth details, current location, name and email can all be changed in the app.
• Delete parts of it. Any conversation, reading, cast, dream or person, from its own page. Memory can be reviewed item by item and switched off.
• Delete all of it. Account closes the account and removes everything attached to it at once. No copy is kept and nothing is recoverable, so take the download first if you want it.

Depending on where you live you may also have the right to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. If you are in California, we do not sell or share personal information as those terms are defined there, and we will not discriminate against you for exercising a right.

Email support@orbheaven.com from the address on the account and we answer within 2 business days.

The service is for people 18 and over. We do not knowingly collect anything from a child. If you believe a child has given us information, email support@orbheaven.com and we will delete it.

Your record is protected by row-level rules in the database, so one account cannot read another’s, and everything travels encrypted. Passwords are stored hashed and we cannot read them. No service can promise it will never be breached; if one happens and it affects you, we will tell you and say what we know.

We may update this policy. The effective date at the top changes when we do, and if a change materially affects you we will tell you by email or in the app before it takes effect rather than changing it quietly.

Questions about this policy, your information, or anything Vesper holds about you:

Email: support@orbheaven.com

We answer privacy questions within 2 business days.