Privacy Policy

    Last updated: April 2026

    1. Who We Are

    CosmikCodes9 is operated by LifeSecret. We provide numerology-based Blueprint reports accessed at CosmikCodes9.com. This policy explains how we handle personal data collected through this website.

    2. Information We Collect

    We collect the following categories of data:

    • Account data: full name, email address — required to create an account and receive your Blueprint.
    • Blueprint input: the name and date of birth you provide for report generation.
    • Payment data: transactions are processed by Razorpay. We do not store card numbers, CVVs, or bank account details — these never touch our servers.
    • Analytics data: page views, session duration, device type, and approximate location via Google Analytics 4 (anonymised IP). See Section 5.
    • Communication data: messages or queries you send us via email or WhatsApp.

    3. How We Use Your Data

    • To generate and deliver your personalised numerology Blueprint
    • To manage your account and authenticate your sessions
    • To process payments and maintain purchase records
    • To respond to support queries
    • To improve website experience and content using aggregated analytics

    We do not sell, rent, or trade your personal information to any third party for marketing purposes.

    4. Third-Party Services

    We share data with the following trusted processors only to the extent necessary to operate the platform:

    • Supabase — cloud database and authentication. Data is stored on encrypted servers.
    • Razorpay — payment processing. Governed by Razorpay's own PCI-DSS compliant privacy policy.
    • Google Analytics 4 — anonymised usage analytics. No personally identifiable data is sent to Google.

    Each of these processors has their own privacy policies and security certifications. We are not responsible for their independent practices.

    5. Cookies & Analytics

    We use the following cookies on this website:

    • Session / auth cookies — set by Supabase to keep you logged in. Strictly necessary; cannot be declined without losing login functionality.
    • Analytics cookies (Google Analytics 4) — track anonymised usage patterns (pages visited, time on site). These are set only if you accept cookies via our consent banner. No personal identity is shared with Google.
    • Preference cookies — store your theme (light/dark) and cookie consent choice in your browser's local storage.

    You can decline analytics cookies via our consent banner at any time. You can also clear all cookies through your browser settings, though this will log you out.

    6. Data Security

    We implement the following measures to protect your data:

    • HTTPS/TLS encryption for all data in transit
    • Encrypted database storage via Supabase
    • Row-level security policies — each user can only access their own data
    • No storage of payment credentials on our infrastructure

    Despite these measures, no internet-connected system can be guaranteed completely secure. In the event of a data security incident affecting your personal data, we will notify affected users as promptly as reasonably possible and take appropriate remedial action.

    We shall not be held liable for breaches or incidents originating from third-party infrastructure, malicious cyberattacks, or events beyond our reasonable control, to the fullest extent permitted by applicable law.

    7. Your Rights

    You have the right to:

    • Request a copy of the personal data we hold about you
    • Request correction of inaccurate data
    • Request deletion of your account and associated data
    • Opt out of analytics tracking (use the cookie banner or browser settings)
    • Withdraw consent at any time without affecting the lawfulness of prior processing

    To exercise these rights, contact us at the details in Section 9.

    8. Data Retention

    We retain your account and Blueprint data for as long as your account is active, or as required to fulfil our legal obligations. If you request account deletion, your personal data will be removed within 30 days, except where retention is required by law (e.g., financial transaction records).

    Anonymised analytics data held by Google Analytics is retained according to Google's own retention settings (typically 14 months).

    9. Contact & Data Requests

    For any privacy-related queries, data access requests, or deletion requests:

    Email: [email protected]
    WhatsApp: +91 769 870 3833

    We will respond within 7 business days.

    Your identity is sacred.

    We protect what you share with us.