Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you register, use our Services, or communicate with us, we may collect:

• Account Information: Name, email address, password, and profile details (bio, interests, photos, avatar).
• Birth & Astrological Data: Date of birth, time of birth, and birth location, used to generate astrological readings, Saturn Return analyses, and Human Design profiles.
• Payment Information: Billing details processed through our third-party payment processor, Stripe. We do not store your full credit card number on our servers.
• Communications: Messages sent through our community chat, city group chats, direct messages, and any content you post in our community forums.
• Facilitator Information: If you are a facilitator, we collect professional details, service offerings, pricing, availability, Google Calendar data (with your consent), and Stripe Connect payment information.
• Quiz & Assessment Responses: Answers to our Cosmic Quiz and other assessments used to provide personalized spiritual insights.
• Location Data: City, country, and postal code information you provide for city group features and member discovery, displayed on our interactive member map.
• Feedback & Support: Information provided through help requests, bug reports, and feedback forms.

1.2 Automatically Collected Information

When you access our Services, we automatically collect:

• Device & Browser Data: IP address, browser type, operating system, device identifiers, and screen resolution.
• Usage Data: Pages viewed, features used, content interactions, session duration, and navigation patterns.
• Video Analytics: Watch duration, completion rates, and playback positions for content you view.
• Cookies & Tracking Technologies: We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage. See Section 5 for details.

1.3 Information from Third Parties

• Google Sign-In: If you authenticate via Google, we receive your name, email address, and profile picture.
• Stripe: Payment confirmation and subscription status from our payment processor.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and membership.
• Generate personalized astrological readings, Saturn Return analyses, Human Design profiles, and AI-powered spiritual insights.
• Facilitate community features including posts, comments, direct messaging, city group chats, and member connections.
• Process payments for memberships, content purchases, and facilitator bookings.
• Match you with compatible community members based on profile information and compatibility algorithms.
• Display your approximate location on the global member map (based on city-level data you provide).
• Send transactional emails (account verification, password resets, booking confirmations) and, with your consent, marketing communications about events, content, and community updates.
• Provide AI-powered features such as the Cosmic Advisor chatbot, content descriptions, and personalized readings.
• Manage facilitator bookings, scheduling, and video call sessions.
• Improve our Services through analytics, usage patterns, and feedback.
• Detect fraud, enforce our terms, and protect the safety of our community.

3. How We Share Your Information

We do not sell your personal data. We may share information in the following circumstances:

• With Other Members: Your profile information (name, avatar, bio, interests, city) is visible to other authenticated members based on your privacy settings. You control what is visible through your profile privacy controls.
• With Facilitators: When you book a session, relevant booking details are shared with the facilitator you select.
• Service Providers: We share data with trusted third-party providers who assist in operating our Services, including:
  • Stripe: Payment processing and subscription management
  • Mux: Video hosting, streaming, and analytics
  • Mapbox: Interactive maps and location services
  • Klaviyo: Email marketing and communications
  • Google: Authentication and calendar integration
  • Zoom: Video call sessions for facilitator bookings
  • AI Providers: AI model providers for generating personalized readings and chat responses (data is processed but not retained by these providers for training purposes)
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Safety: To protect the rights, safety, or property of She Who Returns, our users, or the public.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our Services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required for legal obligations, dispute resolution, or fraud prevention. Anonymized or aggregated data may be retained indefinitely for analytics purposes.

5. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language, theme, and display settings.
• Analytics Cookies: Help us understand how members use the platform so we can improve engagement and value. Provided by PostHog (US-hosted). Session replays mask all form inputs and any field tagged as private (birth data, passwords, payment fields, direct messages, profile editor). Off by default and only activated after you accept.
• Marketing Cookies: Measure email and campaign performance and personalize content. Provided by Klaviyo (US-hosted). Off by default and only activated after you accept.

You can change your choices at any time using the Cookie preferences link in the site footer. We honor browser "Do Not Track" signals by treating undecided visitors as opted out of analytics and marketing cookies until they explicitly accept. California residents may use the same control to exercise their "Do Not Sell or Share My Personal Information" right under the CCPA/CPRA.

When you delete your account, we issue corresponding deletion requests to PostHog and Klaviyo so your activity history is removed there as well.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), secure authentication protocols, Row Level Security on our database, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data.
• Export your data in a portable format.
• Withdraw consent for data processing where consent is the legal basis.
• Opt out of marketing communications at any time via the unsubscribe link in our emails or through your account settings.
• Control your profile visibility through privacy settings.
• Request restriction of processing or object to certain data uses.
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at privacy@shewho-returns.com. We will respond within 30 days. For EU/EEA residents, see our GDPR Policy. For California residents, see our California Privacy Notice.

8. International Data Transfers

She Who Returns is based in Italy and serves a global community. Your data may be transferred to and processed in countries outside your own, including the United States and other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions, to protect your data in compliance with applicable data protection laws.

9. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

10. Third-Party Links

Our Services may contain links to third-party websites or services (including social media platforms like Instagram and TikTok). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last Updated" date at the top of this page. We will notify you of material changes via email or a prominent notice on our Services. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: