Trust

Your data, in plain words

What we collect, and why

Your photos (both palms, the side of each hand, one eye and a selfie) are used only to make your book, and birth details only to work out your chart. We use your name and email to address your atlas and to reach you about it. Payment is handled by our payment provider, so card numbers never touch our systems.

Where your photos go

Your photos come to our studio computer. They are not put on our website. To read your palm lines, the side of your hand and your eye, we send those photos to Claude, an AI service made by Anthropic, which runs in the United States. We only do that if you ticked the separate AI box when you sent them. If someone else filled in your details (a gift, or your half of an Atlas of Us), they ticked it for you and told us you agreed; if you'd rather do it yourself, ask them to send you the link instead. Anthropic handles what we send under its commercial terms, which say it doesn't train its models on it. We never use your photos to identify you or match them against anything.

To look up the coordinates of your birth town we send the town's name, and nothing else, to OpenStreetMap's place search.

What we never do

We never sell your data. Your photographs are used to make your book, and we don't use them to train models of our own. The outside services we use are listed in clause 7, with what each one gets. We share your details only with those strictly needed to make or deliver your atlas. That includes our printer, which receives your name, your shipping address and the print-ready file of your book. That file carries your name, the text written for you, and the artwork and any photographs your edition includes.

Your controls

Email hello@atlasandguide.com and we'll delete your photos: the originals you sent, the edited copies we made for your book and the working files from reading them. We note that we did it (the date and the file names, never the photos) and let you know when it's done. Your finished book file has your photos printed in it, so tell us if you want that gone too. You can also ask us to correct any detail or send you a copy of what we hold about you.

Gifts

When you gift a reading, your recipient's details come to us and are never passed to you, so they stay private even inside a present.

What our analytics can and cannot see

Our site has its own small measurement script. It is built to record which pages are viewed, which steps of an order are completed, the product chosen and whether a purchase happened, along with a random session identifier that is kept in your browser for that tab and cleared when the tab closes. Because that identifier links one visit's events together, we don't describe this data as anonymous. Your name, email, birth details, photographs and the words of your reading are never collected by it, and we use no third-party trackers, no advertising pixels and no cookies for analytics. If your browser sends a Do Not Track or Global Privacy Control signal, the script records nothing. At present the script is not connected to any server, so nothing it records leaves your browser.

Before you rely on this

The full document is below. It is a complete draft awaiting review by legal counsel and has not yet been settled by a lawyer. Passages marked LIKE THIS are decisions counsel has still to make; we have left them visible rather than guess, because a placeholder that looks like settled law is worse than an obvious gap. The plain-English commitments above are what we intend to be held to either way.

Contents

DRAFT FOR LEGAL REVIEW. A drafting aid to be reviewed, adapted and approved by a

qualified legal/privacy practitioner before publication. Not legal advice. Confirm the

position on biometric/sensitive information (palm and eye images), third-party ("Subject")

data, children's data, international transfers, and each sub-processor's terms before

launch. Items to confirm are marked LIKE THIS. Assumes the Australian Privacy Act 1988

(Cth) and Australian Privacy Principles (APPs) apply, with additional obligations under the

EU/UK GDPR and US state laws for customers in those regions.

Effective date: DATE · Last updated: DATE

1. Who we are

Atlas of Self is operated by LEGAL ENTITY NAME (ABN/ACN) of REGISTERED ADDRESS

("we", "us", "our"). We are the entity responsible for personal information handled

through the Service (the data controller, where that term applies). Contact us at

hello@atlasandguide.com or hello@atlasandguide.com.

This policy explains what personal information we collect, why, how we use and share it, how

long we keep it, and the rights you have, including the right to have your information

deleted.

2. The information we collect

You give us:

  • Account and contact details: name, email, phone number (for Guidance SMS), and

password.

  • Birth details: birth date, and optionally birth time and place, used to compose

readings.

  • Images you upload: photographs, which may include palms and eyes (iris) and, for

keepsakes, personal and family photos. See clause 3 on sensitivity.

  • Questionnaire answers: your self-reported responses (for example, energy or pattern

questions) used to shape a reading.

  • Letters and text: for products such as The First Atlas, text you ask us to typeset.
  • Third-person ("Subject") details: for Atlas of Them, limited details about another

person (such as a name and birthday) that you provide. See clause 8.

  • Order and communication details: what you buy, gift messages, and your messages to us.

We collect automatically:

  • Usage and device data: pages viewed, actions taken, approximate location, device and

browser type, and similar usage information, collected where permitted. Our own measurement

script uses a random session identifier kept in your browser rather than cookies (see clause 12).

We receive from others:

  • Payment confirmation from our payment processor (we do not receive or store your full

card number).

  • Fulfilment and delivery status from print and shipping partners.

3. Sensitive and biometric-adjacent information

3.1 Some of what you provide could be treated as sensitive information under privacy law,

in particular images of palms and eyes, and any inferences that touch health or beliefs.

We treat these carefully: they are collected only with your consent, used only to

create the product you ordered, never used for identification or any biometric-matching

purpose, and deletable on request.

3.2 We ask for a separate yes before any palm, hand or eye photo is read by an AI service

(clause 5.2), and we never use these images for identification or matching. Counsel to confirm how palm and eye images are classed under each law that applies.

3.3 We do not knowingly collect more sensitive information than a product needs, and we do not

use readings to make decisions that produce legal or similarly significant effects about a

person.

4. How we use your information

We use personal information to:

  • create, compose, deliver and support the reading, book, print, message or gift you ordered;
  • process payments, prevent fraud, and keep records we must keep;
  • operate, secure, and improve the Service;
  • send you service messages (order and delivery updates) and, where you have opted in,

Guidance messages and marketing;

  • respond to your requests and comply with our legal obligations.

We do not sell your personal information.

5. Automated processing and AI

5.1 Readings are composed with the assistance of artificial intelligence and deterministic

software that interpret the details you provide within reading traditions. This is automated

processing used to create the product you asked for; it does not make decisions with legal or

similarly significant effects about you.

5.2 Your palm, hand and eye photos are read by Claude, an AI service made by Anthropic,

which runs in the United States. We send them only when you (or the person who filled in your

details, on your behalf) ticked the separate AI box. Without that yes the photos are not sent,

and your book teaches you how to read those pages yourself instead. Anthropic acts as our

processor under its commercial terms, which say it does not train its models on what we send.

The text of your book is put together by our own software from the details you gave us.

Where those laws apply, we rely on: performance of a contract (to deliver what you

ordered); consent (for sensitive information such as palm/eye images, for marketing, and

for SMS, and you can withdraw it); legitimate interests (to run, secure and improve the

Service, balanced against your rights); and legal obligation (for tax and record-keeping).

7. When we share information

We share personal information only as needed:

  • Payment processor (Stripe), to take payment.
  • Print-on-demand and shipping partners (currently Prodigi, and the carriers they use), to

produce and deliver physical goods; they receive the details needed for that order (such as

name, address, and the print file).

  • Email and SMS providers, to deliver messages you have opted into.
  • Anthropic (Claude), to read your palm, hand and eye photos, only with your separate

yes (clause 5.2). It receives those photos and nothing else about you.

  • OpenStreetMap (its Nominatim place search), to find the coordinates of a birth town.

It receives the town's name as you typed it, and nothing else.

  • Analytics providers, where you have permitted cookies. We do not use any analytics provider at present.
  • Professional advisers, authorities, or acquirers, where required by law, to protect

rights and safety, or in connection with a sale of the business (with your rights preserved).

We require these parties to protect your information and use it only for the purposes we

specify. The list above is every outside service we use today, and we'll update it when that changes.

8. Third-person data (Atlas of Them): special handling

8.1 When you provide a Subject's details, we use them only to create the relating-focused

sketch you asked for. We do not contact the Subject, do not market to them, and do

not build a standalone profile of them for our own purposes. Their presence in your private

constellation is not disclosed to them by us.

8.2 A Subject may contact us to ask what information is held about them and to request its

deletion; we will handle such requests in line with this policy and applicable law, and may

delete the Subject's data from a buyer's constellation on request. Counsel to confirm the lawful basis for third-person data.

8.3 You are responsible for having a proper basis to provide a Subject's information and for

your use of anything you choose to share.

9. Children's information (The First Atlas)

9.1 The Service is for people 16 and over. The First Atlas is bought by a parent or

guardian; a child's details are provided by, and controlled by, that adult, used only to make

the keepsake, deletable on request, and never used to market to the child.

9.2 We do not knowingly collect personal information directly from a child under 16. If you

believe we hold such information, contact us and we will delete it. Counsel to confirm children's-data obligations.

10. How long we keep information, and deletion

10.1 We keep personal information only as long as needed for the purposes above, or as the law

requires (for example, tax records).

10.2 You may delete your data. Email hello@atlasandguide.com at any time.

For photos we delete every copy we hold: the originals you sent, the edited copies made for your

book, and the working files from reading them. We keep a short note that we did it (the date and

the file names, never the photos). Your finished book file has your photos printed in it and is

deleted too if you ask. We will delete or de-identify your other details as well, except where

we must keep limited records by law (such as an order for tax) or where copies persist briefly

in routine backups pending deletion. A book you have already received remains yours.

11. Your rights

Depending on where you live, you may have rights to: access the information we hold about

you; correct it; delete it; object to or restrict certain processing; withdraw

consent; receive a copy in a portable form; and complain to a regulator. To exercise

these, contact hello@atlasandguide.com. We will respond within the time the law allows.

  • Australia: you may complain to the Office of the Australian Information Commissioner

(OAIC).

  • EU/UK: you may complain to your local data protection authority.
  • US (e.g., California): you may have rights to know, delete, correct, and opt out of

"sale"/"sharing"; we do not sell personal information.

12. Cookies and analytics

We use cookies and similar technologies (such as your browser's local and session storage) for essential site function, to remember choices and, where permitted, for analytics. Our analytics is a small script of our own. It keeps a random session identifier in your browser's session storage until the tab is closed, and because that identifier links one visit's events together, we do not treat the data as anonymous. The script sets no cookies, loads nothing from third parties, and records nothing if your browser sends a Do Not Track or Global Privacy Control signal. It is not connected to any server at present, so nothing it records leaves your browser.

You can clear or block non-essential cookies and browser storage through your browser settings.

We do not yet offer cookie controls on the site itself. Add a cookie banner/consent tool where required, and a cookie list.

13. International transfers

We and our providers may process information in countries other than yours, including

Australia, the United States, and the EU. Where we transfer personal information across

borders, we take steps required by law to protect it (for example, standard contractual clauses

and provider commitments). Confirm transfer mechanisms and provider locations.

14. Marketing

We send marketing (including Guidance and promotional email/SMS) only where you have opted in

or where the law otherwise permits. Every marketing message includes an easy way to opt out;

for SMS, reply STOP. Opting out of marketing does not stop essential service messages such

as receipts and delivery updates.

15. Security

We use reasonable technical and organisational measures to protect personal information,

including encryption in transit, access controls, and vetted providers. No system is perfectly

secure; if a data breach occurs that is likely to cause serious harm, we will notify affected

individuals and the relevant regulator as required (for example, under the Notifiable Data

Breaches scheme). Confirm the breach-response plan and notification thresholds.

16. Changes to this policy

We may update this policy. If a change is material, we will take reasonable steps to notify

you. The "last updated" date shows the current version.

17. Contact and complaints

Questions or requests: hello@atlasandguide.com · hello@atlasandguide.com

LEGAL ENTITY NAME, Registered address, ABN/ACN.

If you are not satisfied with our response, you may contact the relevant regulator listed in

clause 11.

End of Privacy Policy (draft for counsel review).

Rendered from legal/privacy-policy.md on 16 July 2026; the photo, AI and deletion passages were updated on this page on 25 September 2026. Questions: hello@atlasandguide.com.