Privacy Policy

Vedic Cards by OccultSanctum

Last updated: March 2026

🔒 Your privacy matters to us. Vedic Cards collects only the minimum data necessary to operate your account and process payments. We do not collect birth data, location, photos, or any sensitive personal information.

1. Who We Are

Vedic Cards is operated by OccultSanctum ("we," "us," "our"), based in Perth, Western Australia, Australia. Vedic Cards is an educational platform dedicated to the study and exploration of the Vedic card system through articles, teachings, and AI-assisted learning.

For any privacy-related inquiries, contact us at occultsanctum@gmail.com.

2. What We Collect

Vedic Cards is intentionally minimal in the data it collects. We do not collect date of birth, time of birth, location, photographs, palm images, or any health-related information.

2.1 Account Information (Collected at Sign-Up)

Data	Source	Purpose
Name	Google / Apple sign-in	Account identification, display
Email address	Google / Apple sign-in	Account identification, transactional emails, support
Google ID / Apple User ID	OAuth providers	Unique account linking

We never store your Google or Apple password. Authentication is handled entirely by those providers.

2.2 Billing and Credits

Data	Purpose	Retention
Credit balance	Part of a unified OccultSanctum credit system shared across all OccultSanctum platforms under your account	Active while account exists
Transaction history	Billing records, dispute resolution	Retained for legal and accounting requirements
Payment processing	Handled entirely by Stripe, Apple, or Google — we never store card details	Per provider retention policy

2.3 Automatically Collected Data

When you use the app, we may automatically collect:

Session tokens — to keep you signed in. No tracking or advertising cookies are used.
Basic server logs — IP address, request timestamps, and device type. Used for security monitoring and debugging. Rotated regularly.
Device information — operating system and app version, used to ensure compatibility and diagnose issues.
Push notification tokens — only if you opt in to notifications. Used solely to deliver notifications you have requested.

2.4 AI Interaction Data

When you interact with AI-assisted features within the app, your queries and the relevant card and article context are sent to Anthropic (Claude) via their API to generate responses. This data:

Is used solely to generate and return your response.
Is not stored permanently by OccultSanctum beyond your session.
Is processed by Anthropic under their own privacy policy and API terms.
Is not used to train AI foundation models per Anthropic's current API terms.

We recommend reviewing Anthropic's Privacy Policy for full details.

3. How We Use Your Information

We use your data exclusively for:

Account management — authentication, credit balance, profile display.
Service delivery — providing access to Vedic card articles, teachings, and AI-assisted content.
Billing — processing credit purchases and maintaining transaction records.
Transactional communications — payment receipts, credit notifications.
Security and fraud prevention — detecting unauthorised access and payment abuse.
App improvement — anonymised usage patterns to improve content and performance.
Legal compliance — meeting applicable regulatory obligations.

We do not use your data for:

Targeted advertising or ad profiling
Selling or renting to third-party marketers
Building profiles unrelated to the Vedic Cards service
Training AI models

4. Third-Party Services

We share limited data with the following providers, solely for the purposes stated:

Service	Provider	Data Shared	Purpose
Authentication	Google, Apple	OAuth tokens	Account sign-in
AI Processing	Anthropic	Queries and content context	Generating AI responses
Payments	Stripe, Apple, Google	Payment details (handled by processor)	Credit purchases
Email	Resend	Email address, transactional content	Receipts, notifications
Hosting	Render	All app data (hosted infrastructure)	Running the platform

Each provider operates under their own privacy policy. We do not control how these providers handle data once transmitted to them.

5. Data Storage and Security

5.1 Storage Location

Your data is stored on servers managed by Render, Inc., which maintains industry-standard physical and digital security measures.

5.2 Security Measures

Encrypted data transmission (HTTPS/TLS) for all communications.
Secure authentication via OAuth 2.0 (Google) and Sign in with Apple — we never store your password.
Server-side session management with secure, httpOnly cookies.
Payment processing handled entirely by PCI-DSS compliant providers — we do not store card details.
Access controls limiting data access to authorised personnel only.
Regular security monitoring and log review.

5.3 Data Breach Notification

In the event of a data breach likely to result in risk to your rights, we will notify affected users by email within 72 hours of becoming aware and, where required, notify the relevant data protection authority.

6. Data Retention

Account data — retained as long as your account is active.
Transaction history — retained for a minimum of 7 years for legal and accounting compliance.
Server logs — rotated and deleted on a regular schedule (typically 30–90 days).
Session tokens — expire upon sign-out or after a period of inactivity.
Push notification tokens — retained while you have the app installed; removed upon uninstallation or opt-out.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the personal data we hold about you.
Correction — request correction of inaccurate data.
Deletion — request deletion of your account and associated data.
Withdrawal of consent — cease using the platform at any time.
Portability — request your data in a portable format where applicable.
Objection — object to certain processing activities.

To exercise any of these rights, contact us at occultsanctum@gmail.com. We will respond within 30 days.

8. Children's Privacy

Vedic Cards is intended for users aged 17 and over. We do not knowingly collect personal information from anyone under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly. If you believe a child has provided us with their data, please contact us at occultsanctum@gmail.com.

9. International Users

OccultSanctum is based in Australia and operates under Australian Privacy Law (Privacy Act 1988). If you access Vedic Cards from outside Australia, your data may be transferred to and processed in Australia and other countries where our service providers operate. By using the app, you consent to this transfer.

Users in the European Economic Area (EEA) or United Kingdom have additional rights under GDPR/UK GDPR, including the right to lodge a complaint with your local data protection authority.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via email or an in-app notice. Your continued use of Vedic Cards after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

OccultSanctum
Perth, Western Australia, Australia
occultsanctum@gmail.com