Privacy Notice

Who is responsible for your information

Divine Threads operates this website and is responsible for the personal information described in this notice. Privacy questions and rights requests may be sent to Christina.DivineThreads@gmail.com.

Information we collect

Account information. When you create an account, we process information such as your email address, account identifier, authentication status, and security/session information needed to keep you signed in. Password authentication is handled through Supabase Auth; Divine Threads does not receive or store your plain-text password.

Membership information. If you purchase Plus or Deep Study, we keep information needed to connect your Divine Threads account to your subscription, including membership tier, subscription status, billing interval, renewal or access-through date, and Stripe customer/subscription identifiers.

Payment, billing, and tax information. Payments are processed by Stripe. Divine Threads does not store your full payment-card number. Stripe may collect payment, billing address, tax-location information, transaction information, fraud-prevention signals, and tax identifiers if you provide them. Stripe Tax may use customer location and product information to calculate applicable sales tax, VAT, GST, or similar indirect taxes where collection is enabled.

Technical and security information. Our hosting, authentication, database, anti-abuse, and security providers may process information needed to deliver and protect the service, such as IP address, browser/device information, request metadata, timestamps, error logs, session identifiers, and security events.

Information you send us. If you contact Divine Threads, we receive the information you include in your message and the contact information you use.

Why we use information

We use personal information to create and secure accounts; authenticate users; provide Free, Plus, or Deep Study access; process and maintain subscriptions; calculate and administer applicable taxes; provide billing and account support; send account-confirmation and password-recovery messages; prevent fraud or abuse; diagnose technical problems; protect the service; respond to questions or research corrections; maintain records; enforce our terms; and comply with legal obligations.

Legal bases where GDPR or UK GDPR applies

Where European or United Kingdom data-protection law applies, we process personal information on one or more of the following bases: performance of a contract when information is needed to create and service your account or paid membership; legitimate interests in operating, securing, supporting, and improving the service, provided those interests are not overridden by your rights; legal obligations such as tax, accounting, fraud-prevention, or lawful process requirements; and consent where applicable law requires it for a particular optional use. If processing is based on consent, you may withdraw that consent prospectively.

Cookies, sessions, and similar technologies

Divine Threads uses cookies or similar technologies that are necessary for authentication, account security, fraud prevention, and keeping you signed in. These technologies allow the site to recognize your account and membership without exposing paid content to unauthorized visitors.

Divine Threads does not currently use personal information to build third-party advertising profiles and does not intentionally place advertising cookies. If we later introduce non-essential analytics, advertising, or similar technologies, we will update this notice and provide consent or preference controls where required by applicable law.

Service providers

We use specialized providers to operate Divine Threads. These currently include Supabase for authentication and database services; Stripe for subscription billing, payment processing, customer billing tools, fraud prevention, and tax calculation; Vercel for website hosting and delivery; Resend for transactional email delivery; and Cloudflare Turnstile for anti-bot and abuse protection on account-related forms. These providers process information as needed to provide their services and are governed by their own contractual and privacy obligations.

When information may be shared

We may disclose personal information to service providers that help us operate Divine Threads; to professional advisers when reasonably necessary; when required by law, court order, or valid legal process; when reasonably necessary to investigate fraud, abuse, security threats, or violations of our terms; or as part of a merger, acquisition, financing, reorganization, or sale of all or part of the service, subject to applicable law.

Divine Threads does not sell personal information and does not share personal information for cross-context behavioral advertising. We do not discriminate against users for exercising privacy rights granted by applicable law.

International data transfers

Divine Threads is operated using service providers that may process information in the United States and other countries. Those countries may have data-protection laws that differ from the laws where you live. Where applicable law requires safeguards for an international transfer, we rely on legally recognized transfer mechanisms or the safeguards maintained by the relevant service provider.

Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this notice, including operating your account, providing paid access, maintaining billing and tax records, complying with legal obligations, resolving disputes, preventing fraud, and enforcing agreements. Retention periods vary by record type. When information is no longer reasonably needed, it may be deleted, anonymized, or retained only where required or permitted by law.

Your privacy rights

Depending on where you live and which privacy law applies, you may have rights to request access to personal information; receive a copy of certain information; correct inaccurate information; request deletion; restrict or object to certain processing; request portability; withdraw consent where consent is the legal basis; opt out of certain sales, sharing, or targeted advertising; or appeal a decision on a privacy request where applicable law provides that right.

Because Divine Threads does not sell personal information or use it for cross-context behavioral advertising, there is currently no sale or advertising-sharing activity to opt out of. If that practice changes, we will provide the controls required by applicable law.

To exercise an applicable privacy right, email Christina.DivineThreads@gmail.com. We may need to verify your identity before fulfilling a request and may retain information where an exception or legal obligation applies. Authorized agents may submit requests where applicable law permits them.

European Economic Area, United Kingdom, and similar rights

If GDPR, UK GDPR, or a similar law applies to you, you may also have the right to lodge a complaint with the data-protection authority in the country or region where you live, work, or believe a violation occurred. We encourage you to contact us first so we can try to address your concern.

United States state privacy rights

Residents of California and other U.S. states may have additional rights under applicable state privacy laws, such as rights to know or access personal information, correct it, delete it, obtain a portable copy, and opt out of certain sales, sharing, targeted advertising, or profiling. These rights and statutory thresholds vary by state. Divine Threads will respond to valid requests as required by applicable law.

Your account and subscription choices

You may update your password through your Divine Threads account and manage supported subscription and payment options through Stripe's secure customer portal. You may cancel a paid subscription so that it does not renew; paid access ordinarily continues through the applicable billing period, subject to any additional cancellation or refund rights required by the law that applies to you.

Security

We use technical and organizational safeguards designed to protect account and membership information, including authenticated sessions, server-side membership authorization, restricted database access, CAPTCHA/anti-abuse protections, and payment processing through Stripe. No online system can guarantee absolute security, so we cannot promise that unauthorized access will never occur.

Children's privacy

Divine Threads is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If local law requires parental or guardian consent for a minor to use an online service, the minor should not create an account without that consent. If you believe a child has provided personal information contrary to applicable law, please contact us so we can review the situation.

Changes to this notice

We may update this Privacy Notice as Divine Threads, our service providers, or applicable requirements change. When we make a material update, we will revise the date above and may provide additional notice where appropriate.

Contact

Privacy questions, complaints, or rights requests may be sent to Christina.DivineThreads@gmail.com.