Privacy Policy
1. The short version
We collect the minimum needed to generate your profile and run the service: birth data you choose to provide, the email address of the Google account you sign in with, your account status and, if you buy, what you paid. If you sign in and choose Save to my account, your birth inputs are stored to your account so you can return to your profile. We never store the rendered profile itself — it is recomputed fresh from your inputs each time, so it always reflects the latest depth. Payments happen on Stripe's page, and SuperMap never sees your card number. We don't sell your data. Your profile is yours, exportable at any time, and you can delete your account yourself.
2. What we collect
- Birth data (date, time, place) — provided by you, used solely to compute your charts and profile. If you sign in and save, these birth inputs are stored to your account so your profile is there when you return. The computed profile itself is never stored; it is regenerated from your inputs on each visit.
- Where you live now — if you add it, used to rank places for you instead of your birthplace.
- Email address and name — from the Google account you sign in with. Used for account access. If you tick the optional email box when you save, it also records your consent to occasional updates.
- Self-typed inputs — e.g. Enneagram type, if you choose to add them.
- Account status — your tier, free or paid.
- Payment record — only if you buy: the amount paid for the install, the amount paid for a session if you added one (zero when a code covered it), the time you added a session, and, when you came from one of our sales pages, which one. Card details are entered on Stripe's page and never reach us.
- Feedback — what you type into the feedback box, and some error reports, with the page they came from. They are stored without any link to your account.
- Technical data — hosting logs and Google Analytics (page views, referrers).
3. How it's used
Birth data is used to compute your profile and, when you are signed in, your daily sync. When you sign in and save, your birth inputs are stored to your own account so you can come back to your profile. Your account status and payment record decide what you can open, count how many people have bought (the founder price climbs with that count), and tell us whether you added a session. Email is used for the things you asked for. We do not sell or rent personal data, and we do not use your birth data for anything other than your own profile.
4. Third parties
Sign-in uses your Google account. Authentication and saved profiles are handled by Supabase, where your account's birth inputs are stored under access controls that allow only you to read or change your own row; your account status and payment record can be changed only by our server. Chart computation runs on our own server. Payments are processed by Stripe on its own checkout page: Stripe receives your card details and email, and we never see or store card numbers. Stripe keeps its own record of each payment under its own privacy policy. The site is hosted on Vercel, and page views are measured with Google Analytics. Each receives only what it needs to perform its function.
5. Your rights
- Export your profile at any time (it's plain markdown — that's the point).
- Delete your account yourself: on your profile page (/me), choose Delete my account. That removes your sign-in and your saved row, including birth inputs, account status and payment record. It does not remove Stripe's own record of a payment.
- Withdraw consent to update emails at any time: write to hello@supermap.me.
6. Retention
Account and profile data are kept until you delete your account. Logs rotate on standard short schedules. Questions about your data: hello@supermap.me.
7. Changes
This policy may be updated as the product evolves; the effective date above will change when it does.