Privacy Policy — Midheaven

The short version

We use your birth details and business profile to calculate your charts and write your readings.
Palm photos are optional. We use them to produce written observations and do not keep the photos. About palm photos.
Whop handles payments. We never receive your full card number.
We do not sell your information for money. midheavenhq.com uses analytics and advertising cookies from Whop only as your choices allow; change them any time with .
Anthropic and OpenAI write the text of your readings and answers from the information each request needs. Midheaven does not train AI models on your information.
Email info@midheavenhq.com to access, correct, export or delete your information. Your rights.

1. Who we are and what this policy covers

AI Digital Productions LLC operates the Service under the Midheaven name and is responsible for the personal information described in this policy. In European data protection terms, AI Digital Productions LLC is the “controller”. You can contact us at info@midheavenhq.com.

Two separate accounts. On midheavenhq.com you sign in with an account provided through our sign-in provider, Clerk. Inside Whop you use your Whop account. Each has its own workspace and saved data, and we never merge them, even when they use the same email address. When you buy on the website, a private checkout reference attaches the purchase to your website account. It does not link your website account with a Whop app account.

Whop’s own processing. Whop is an independent company that also processes information about your Whop account, checkout and payments under its own privacy policy. This policy does not cover Whop’s own practices.

2. Information we collect

Information you give us

Account details. On the website: your email address, name and profile picture from your sign-in account, including from a social login if you use one. In the Whop app: your Whop user ID, name, username and profile picture.
Birth details. Your date of birth; your birth time (exact, a time range, or unknown); and your place of birth (city, region and country), which we convert into map coordinates and a time zone for the calculations.
Sex for BaZi (optional). Female, male or “prefer not to provide”, used only to set the direction of the BaZi luck-cycle sequence.
Business profile. Your business stage, business name, description, role, customers, offer, interests, skills, main priority, biggest constraint, any upcoming change and its date, operating time zone, industry and team size. Several of these are optional.
Palm photos (optional). Photos of both open palms and which hand is dominant, for the paid Founder Blueprint. We do not keep the photos; see Palm photos.
Questions and decisions. Your Ask Midheaven questions and conversation history; the decisions, options and dates you enter for Decision Briefs; and your Decision Log entries, such as actions, metrics, targets, review dates and outcome notes.
Messages to us. What you send when you contact support.

Information we create for you

Your chart calculations, Founder Blueprint, daily, weekly and monthly readings, Ask Midheaven answers, Decision Briefs and palm observations.
Records of your usage, such as questions used, credits remaining and Briefs created, and safety counters that protect the Service from overload and misuse.

Information from Clerk and Whop

From Clerk: confirmation that you signed in and that your email address is verified, together with the account details above.
From Whop: details of your purchases, including membership and payment identifiers, plan, status (such as trialing, active or canceled), renewal and cancellation dates, refunds, credit pack purchases, and the email address and Whop user ID linked to the purchase.

Information collected automatically

Product events. We record a limited set of events about how the Service is used, such as “free Brief generated”, “checkout started”, “credit purchase completed”, “membership canceled” and “purchase refunded”, with basic details such as the offer, plan or channel involved. To group events from the same browser, we store a random identifier in your browser’s local storage and a session identifier in its session storage. These events are kept in our own database and may be linked to your account. They do not contain your birth details, business profile or questions.
Technical information. When you use the Service, our hosting providers automatically record technical information such as your IP address, browser and device type, the pages and features requested, and times and errors. We use it to run, secure and troubleshoot the Service.
Analytics and advertising cookies. If you allow them, cookies and similar technologies from Whop collect information about your visit to midheavenhq.com. See Cookies, local storage and similar technologies.
Whop’s pixel in the Whop app. See Cookies, local storage and similar technologies.

We do not collect precise location from your device. Birth-place search runs on our own servers against an offline list of cities, so what you type is not sent to a mapping service.

What we never store

Your palm photos. We use them to produce written observations, then discard them.
Your full card number or payment credentials. Whop processes payments. We receive only purchase details, such as your plan and its status.
Your sign-in password. Sign-in is handled by Clerk on the website and by Whop in the Whop app.

3. How we use your information

To provide the Service: create and secure your account; calculate charts from your birth details; generate your Blueprint, readings, answers and Briefs; keep your Decision Log; and save your workspace so it is available on your devices.
To manage memberships and purchases: confirm trials and memberships, apply allowances and credits, handle cancellations and refunds, and keep each purchase attached to the right account.
To support you: answer questions, fix problems and respond to your requests.
To keep the Service safe: prevent fraud, abuse and overuse, including through usage limits; protect accounts; and investigate security issues.
To understand and improve the Service: analyze product events and usage to see what works and fix what does not.
To communicate with you: send messages about your account and requests, and notices about important changes to the Service, our Terms or this policy. We do not currently send marketing emails. If we start, we will do so only as the law allows, and you will be able to unsubscribe at any time.
To meet legal obligations: comply with the law, respond to lawful requests, enforce our Terms of Service, and establish or defend legal claims.

We do not sell your information for money, and we do not use it to train AI models. On midheavenhq.com, and with your permission where the law requires it, we use analytics and advertising cookies to measure visits and improve our ads. See Cookies, local storage and similar technologies.

4. Legal bases (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

Contract: to provide the Service you ask for, including your account, calculations, readings, Briefs, Ask Midheaven, memberships and credits.
Legitimate interests: to keep the Service secure and prevent abuse; to understand and improve the Service using product events and technical logs; to keep website and Whop app accounts separate and attach purchases correctly; and to establish or defend legal claims. We balance these interests against your rights, and you can object at any time (see Your rights and choices).
Consent: for optional palm photos, for analytics and advertising cookies on midheavenhq.com, and wherever else the law requires consent. You can withdraw consent at any time. This does not affect processing that has already happened.
Legal obligation: to keep records and respond to lawful requests when the law requires it.

What you need to provide

We need your date and place of birth to calculate a chart, and an account to save your workspace and purchases. Your birth time, sex for BaZi, palm photos and several business profile fields are optional. Leaving them out limits the parts of your readings that depend on them.

Automated decision-making

Midheaven generates readings automatically, but it does not make decisions about you that have legal or similarly significant effects. Automated usage limits only affect how many readings or questions you can create in a period.

5. How we use AI

We use two AI providers to generate the written parts of the Service. Anthropic’s Claude models write your readings, Founder Blueprint and Decision Briefs and describe palm photos. OpenAI’s models answer your questions in Ask Midheaven. We may change which provider handles a feature; whichever does receives only the information described here.
For each request we send only what is needed: your calculated chart facts, relevant parts of your business profile, your question, relevant earlier conversation or Decision Log text, and, for palm observations, your palm photos. We do not include your account name, email address or payment information.
Neither provider uses data sent through its API to train its models unless the customer chooses to share it, and Midheaven has not chosen to. Each may keep API data for a limited time to monitor for abuse and keep its services safe, as described in its policies. We send OpenAI requests with its response storage turned off.
Midheaven does not train AI models on your information.
We check AI output automatically before saving or showing it. Our team does not routinely read your readings, conversations or Decision Log. Authorized people may access them when needed to help with a request you make, fix a problem, investigate misuse or meet a legal requirement.
When we assemble a Decision Brief, we keep the raw AI response in encrypted form only briefly while it is checked, then delete it. The finished Brief is saved to your account.

6. Palm photos

We do not keep your palm photos

Your photos are used only to read your palm patterns and are not stored. Midheaven keeps the written observations, never the photos.

Palm photos are optional and used only for the paid Founder Blueprint. Please upload only photos of your own open palms. We do not accept photos of faces.
When you upload them, the photos travel over encrypted connections through our servers to our AI provider, currently Anthropic, which returns short, neutral descriptions of the visible lines and hand shape. We save those written observations as part of your Blueprint. We do not save the photos in our database or file storage.
Previews of the photos you choose are held in your browser’s memory for that visit only.
We keep a one-way technical fingerprint of each upload so the same photos are not processed twice. It cannot be used to recreate your photos.
We do not use palm photos or observations to identify you. Our instructions to the AI prohibit identifying the person or inferring characteristics such as age, sex, race, ethnicity, health, disability or personality from the photos.
As with other AI requests, the AI provider may keep the images for a limited time to monitor for abuse, under its policies.
You can ask us to delete your saved palm observations at any time.

7. Birth details and other sensitive information

Some people consider their date, time and place of birth sensitive. We use them only to calculate your charts and readings, never to verify your identity, to decide eligibility or for advertising.
Sex for BaZi is optional. Traditional BaZi uses it only to set the direction of its luck-cycle sequence. Midheaven does not infer it or use it for identity, personality or eligibility. If you choose “prefer not to provide”, that layer is left out and the rest of your Blueprint remains available.
We do not ask for special categories of information, such as health, religion, ethnicity, political opinions, sex life or sexual orientation. Please do not enter them in free-text fields.

We do not sell your personal information for money, and we never give advertisers or data brokers your account, profile or workspace content. If you allow analytics and advertising cookies on midheavenhq.com, the partners listed under Analytics and advertising partners receive information about your visit through them. We share information only as described below.

Service providers

These companies process personal information on our behalf, under contracts that limit how they can use it:

Clerk: Website sign-in and account security. Processes your account details and sign-in information.
Whop: Payments, memberships and credit purchases, and hosting of the Midheaven app inside Whop, including your identity there. Processes purchase details and, in the Whop app, the information you use there.
Convex: Our database and backend. Stores your account, profiles, workspace, readings, conversations and usage records.
Vercel: Hosts the website and runs our server functions, including chart calculations and AI requests.
Cloudflare: Runs the Whop app’s server code as part of Whop’s hosting.
Anthropic: Writes readings, Founder Blueprints and Decision Briefs, and describes palm photos. Receives the information described in How we use AI.
OpenAI: Answers questions in Ask Midheaven. Receives the information described in How we use AI.

Analytics and advertising partners

If you allow them, these companies’ cookies and similar technologies run on midheavenhq.com. They receive identifiers (such as cookie IDs and your IP address) and information about your visit (such as the pages you view and steps like starting a free Brief or a checkout), and may use it for their own purposes under their own privacy policies, including to measure and target ads. We never send them your birth details, business profile, readings or questions.

Whop: The Whop Pixel connects visits to purchases and reports ad results, including to the ad platforms above. It can also read contact details, such as a name, email address or phone number, that you type into forms on the page.

Whop as an independent company

Whop also processes information about your Whop account, checkout and payments for its own purposes, as described in the Whop Privacy Policy.

Other disclosures

Legal and safety reasons: when required by law or legal process, or to protect the rights, property or safety of Midheaven, our users or others.
Business transfers: as part of a merger, acquisition, financing, reorganization or sale of all or part of our business. We will tell you before your information becomes subject to a different privacy policy.
At your direction: when you ask us to share information, or when you choose to share your own readings.

9. Cookies, local storage and similar technologies

midheavenhq.com uses analytics and advertising cookies from Whop, but only as your choices allow. If you are in the European Economic Area, the United Kingdom or Switzerland, they stay off unless you accept them. Elsewhere they are on unless you turn them off with or your browser sends a Global Privacy Control signal. They are never used in the Midheaven app inside Whop, where Whop’s own pixel applies (see below).

Analytics and advertising (Whop): cookies and similar technologies that measure visits and ad results and help show our ads to people likely to be interested. See Analytics and advertising partners. We remember your choice in your browser’s local storage.
Sign-in (Clerk): cookies that keep you signed in and protect your account on the website. Sign-in does not work without them.
Checkout (Whop): when you buy on the website, Whop’s checkout loads from Whop and uses its own cookies and similar technologies to process payments and prevent fraud. Whop also records checkout views and purchases.
Whop app: Whop automatically adds its own measurement pixel to the pages it hosts, including the Midheaven app inside Whop. The pixel records page views and checkout activity, and our app passes it the same product events we record ourselves, such as “checkout started”. Whop handles this data under its own privacy policy.
Our browser storage: we use your browser’s local storage and session storage to remember your light or dark theme; to keep the random identifiers used for product events; to keep a copy of your profile, latest reading, Blueprint and Ask Midheaven conversation on your device, so the app loads quickly and can recover if a connection drops; and to save unfinished drafts, such as a Decision Brief or Decision Log entry, including your free Brief details while you sign in.

Using a shared computer? The copy kept in your browser is not removed automatically when you sign out. On a shared or public device, clear your browser’s site data for midheavenhq.com after signing out.

Your choices

You can block or delete cookies and site data in your browser settings. Blocking Clerk’s cookies stops website sign-in from working.

You can change your choice about analytics and advertising cookies at any time with , also at the foot of every page. We treat a Global Privacy Control signal from your browser as a request to opt out, and keep those cookies off. There is no common standard for “Do Not Track” signals, so we do not respond to them.

10. How long we keep information

We keep personal information only for as long as we need it for the purposes in this policy:

Account and workspace content (your profile, birth details, business profile, Blueprint, readings, Briefs, conversations, Decision Log and palm observations): for as long as your account exists. When you ask us to delete your account, we delete or de-identify this content, except anything we must keep for the reasons below.
Purchase, membership, credit and refund records: for as long as needed to provide what you bought, and then as needed for accounting, tax, fraud prevention, disputes and legal compliance.
Product events and usage records: for as long as they help us run, secure and understand the Service.
Technical logs: for limited periods set by our hosting providers.
Raw AI responses for Decision Briefs: deleted shortly after the Brief is checked.
Palm photos: not stored.
Backups: deleted information may remain in routine backups until those backups expire.
Information in your browser: stays on your device until you clear it.

Canceling your membership does not delete your account or saved work.

11. Security

We use safeguards designed to protect your information, including encrypted (HTTPS) connections, access controls that keep each account’s data separate, keeping AI requests and secret keys on our servers, and additional encryption for some stored records. Payment details stay with Whop.

No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and the authorities as the law requires.

You can help by using a secure sign-in method and signing out on shared devices.

12. Your rights and choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you and get a copy of it.
Correct inaccurate information. You can also update your birth details and business profile yourself in the app.
Delete your information.
Portability: receive your information in a structured, commonly used format.
Object or restrict: object to, or ask us to restrict, processing based on our legitimate interests.
Withdraw consent where we rely on it.
Complain to a data protection authority. In the EEA, that is the authority where you live or work; in the UK, the Information Commissioner’s Office (ICO).

We respond to access, correction and deletion requests from any user, wherever you live, subject to the exceptions the law allows. We will not treat you differently for exercising your rights.

Choices you can make yourself

Continue with an unknown birth time, skip palm photos, or choose “prefer not to provide” for sex in BaZi.
Update your birth details and business profile at any time.
Cancel your membership from your Whop orders page.
Clear the Midheaven data stored in your browser.

13. US state privacy rights, including California

Residents of California and a growing number of other US states, including Colorado, Connecticut, Oregon, Texas and Virginia, have rights under state privacy laws. These can include the rights to know about and access personal information, correct it, delete it, receive a portable copy, opt out of its sale or sharing, targeted advertising and certain profiling, and not be discriminated against for using these rights. See How to make a privacy request.

Selling, sharing and targeted advertising. We do not sell personal information for money. Some state laws treat letting advertising partners collect information through cookies on midheavenhq.com as “selling” or “sharing” it, or as targeted advertising. The categories involved are identifiers (such as cookie IDs and IP address) and internet activity (such as pages viewed and steps taken on the website), and they go to Whop. You can opt out at any time with , and we honor Global Privacy Control signals as an opt-out. We have no actual knowledge of selling or sharing the personal information of anyone under 16.
No significant profiling. We do not use personal information for profiling that produces legal or similarly significant effects.
Sensitive personal information. We do not use or disclose sensitive personal information for purposes that would give you a right to limit it under California law.
Appeals. If we decline your request, you can appeal by replying to our decision or by emailing info@midheavenhq.com with “Privacy appeal” in the subject line. If you disagree with the outcome of your appeal, you can contact your state attorney general.
Authorized agents. You may use an authorized agent to make a request for you. We may ask for proof of the agent’s authority and ask you to verify your identity directly.
Direct marketing. We do not share personal information with third parties for their own direct marketing.

Categories of personal information we collect

In the past 12 months we collected the categories below. They came from you, from your use of the Service, and from Clerk and Whop. We used them for the purposes in How we use your information, disclosed them for business purposes only to the service providers in How we share information, and keep them as described in How long we keep information.

Identifiers: Name, email address, account and user IDs, and IP address.
Customer records: Name and email address.
Characteristics of protected classifications: Date of birth, which shows your age, and, if you choose to provide it, sex for BaZi.
Commercial information: Plans, trials, purchases, renewals, refunds and credits.
Internet or network activity: Product events and technical logs.
Visual information: Palm photos, which are processed and not stored.
Professional information: Your business profile, such as your role, business and industry.
Inferences: The interpretive descriptions in your Blueprint and readings.
Other information you provide: Birth time and place, questions, Decision Brief inputs and Decision Log entries.

14. How to make a privacy request

Email us at info@midheavenhq.com from the email address on your account. Tell us what you would like us to do, and whether your request is about your website account, your Whop app account or both.
In the Whop app, you can also submit a help ticket through your Whop purchase page. Midheaven support handles these requests.
Verification. To protect your account, we verify requests, usually by confirming that you control the email address on the account or, for the Whop app, through your Whop account. We may ask for more information if needed.
Timing. We respond within the time the law requires, for example one month under the GDPR and UK GDPR, or 45 days under California law. Where the law allows us to extend this, we will tell you.

Please note: canceling your membership, or deleting your sign-in account with Clerk or Whop, does not by itself delete your Midheaven workspace. To delete it, email info@midheavenhq.com.

15. International transfers

Our service providers are based in the United States, and your information is processed in the United States and in other countries where they operate. Data protection laws there may differ from those where you live.

When we transfer personal information from the EEA, the UK or Switzerland, we rely on safeguards recognized by data protection law, such as the European Commission’s Standard Contractual Clauses and their UK and Swiss equivalents in our providers’ data processing terms, or a provider’s certification under the EU–US Data Privacy Framework and its UK and Swiss extensions.

16. Children

Midheaven is only for adults aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us at info@midheavenhq.com and we will delete it.

17. Changes to this policy

We may update this policy as the Service or the law changes. We will update the “Last updated” date at the top, and if a change is material we will tell you before it takes effect, by email or with a notice in the Service.

18. Contact us

For questions about this policy or your information, email info@midheavenhq.com.

In the Whop app, you can also use the seller-contact option on your Whop purchase page.
For help with Whop itself, visit Whop help.

Website: midheavenhq.com