Privacy Policy

1.Information We Collect

Account information. Your name, any display or sacred name you choose, your email address, and a cryptographically hashed version of your password. We store the hash, not the password — we cannot read your password, and neither can anyone who obtains our database.

Subscription status. Your role, account status, and whether your subscription is active. This is what determines your access.

Content you create. Grimoire journal entries, annotations on texts, and bookmarks. These are private to your account by design and are not visible to other members.

Waitlist information. If you joined the waitlist, we hold the name, email, and any tradition or intention you volunteered.

Technical information. Our host records standard server logs — IP address, browser type, requested pages, timestamps — used to operate the site, diagnose faults, and detect abuse.

What we do not collect. We do not collect your payment card number, bank details, government identifiers, or precise location. Card data goes directly from you to Stripe and never passes through our systems.

2.How We Use It

We use personal information only to:

• ✦Create and maintain your account, and authenticate your logins.
• ✦Provide the archive and store your private research work.
• ✦Process payments, manage subscription status, and send transactional email — credentials, receipts, access changes, and security notices.
• ✦Send archive updates and new-research notices, if you have opted in. Every such email carries an unsubscribe link.
• ✦Respond to your support requests.
• ✦Detect, prevent, and investigate fraud, credential sharing, abuse, and security incidents.
• ✦Comply with our legal obligations.

3.Why We Are Allowed To (Legal Bases)

If you are in the United Kingdom or the European Economic Area, we rely on these lawful bases: contract, to provide the Services you purchased; legitimate interests, to secure the Services and prevent abuse; consent, for optional marketing email, which you may withdraw at any time; and legal obligation, for tax and accounting records.

4.Who Else Processes Your Data

We keep our vendor list deliberately short. Each of these companies processes data on our behalf under contract, and each publishes its own privacy policy.

We may also disclose information where required by law, court order, or valid legal process, or to protect the rights and safety of our members and the public. If we are ever part of a merger or sale, personal information may transfer as a business asset, and we will notify you before it becomes subject to a different policy.

5.Cookies

We use a small number of strictly necessary cookies. The essential one holds your authentication session so you stay logged in between pages. Without it, the archive cannot function.

We do not use advertising cookies, cross-site trackers, or third-party marketing pixels. If we ever add optional analytics, we will update this policy first and ask for your consent where the law requires it.

6.How Long We Keep It

We keep account information and your content for as long as your account exists. If you cancel, we retain the account in a suspended state so that you can return without losing your Grimoire — many members do.

If you ask us to delete your account, we delete your account record and your content within 30 days. We retain transaction records for as long as tax and accounting law requires, typically seven years, and we may retain minimal records needed to enforce our Terms or resolve a dispute.

7.Your Rights

Wherever you live, you may ask us to do any of the following, and we will honor the request without charging you or degrading your service for asking:

• ✦Access a copy of the personal information we hold about you.
• ✦Correct information that is inaccurate or incomplete.
• ✦Delete your account and the personal information associated with it.
• ✦Export your Grimoire entries and other content you created.
• ✦Withdraw consent to marketing email, at any time.
• ✦Object to or restrict certain processing.

Email support@akashacodex.com and we will respond within 30 days. We may need to verify your identity before acting on a request, to make sure we are not handing your data to someone else.

California residents. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not discriminate against anyone for exercising their rights.

UK and EEA residents. You also have the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address the concern first. Note that our systems are operated in the United States, so your information is transferred and processed there.

8.Security

Passwords are stored only as bcrypt hashes. All traffic is encrypted in transit over HTTPS. Login attempts are rate-limited to resist brute-force attacks. Access to production systems is limited to the operator of the archive. Payment card data never touches our infrastructure.

No system is perfectly secure, and we will not claim otherwise. If a breach affecting your personal information occurs, we will notify affected members and the relevant authorities as the law requires.

9.Children

The Services are intended for adults 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, email support@akashacodex.com and we will delete it.

10.Changes & Contact

If we change this policy we will revise the “last updated” date above, and for material changes we will notify active members by email.

Privacy questions, requests, and complaints go to support@akashacodex.com. A mailing address is available on written request. See also our Terms of Service.