Legal
Draft, not in force. These documents haven’t been reviewed by a lawyer yet and don’t govern your use of Third House. They are published here so they can be read and commented on. Blanks in square brackets are unfilled on purpose.
Applies to: Everyone
Third House — Privacy Notice
Effective date: [DATE] Version: [1.0]
This notice explains what [LEGAL ENTITY NAME] ("Third House", "we") collects, why, who we share it with, how long we keep it, and what you can ask us to do about it.
Retention periods live in the Data Retention Schedule, which is part of this notice.
1. The short version
- We collect your birth date, birth time, and birth place, because that is what a chart is computed from. We treat it as sensitive.
- We collect what you write to Mercury and to astrologers.
- We collect payment records, but not your card number — Stripe holds that.
- We do not sell your personal information, and we do not use your data to train AI models.
- An astrologer sees your chart and birth details only for a session you booked with them.
2. What we collect
2.1 You give us
| Category | What | Why |
|---|---|---|
| Account | Email, password (hashed), display name, avatar, timezone | To have an account |
| Birth Data | Birth date, birth time (if known), birth place, derived coordinates and timezone, chart label | To compute your chart |
| Traditional role | An optional groom/bride answer | Two techniques need it: BaZi luck pillar direction and Vedic guna milan. Declining is a first-class answer. We store the derived astrological values, not a gender or sex field about you. |
| Conversations | Messages to and from Mercury | To run the conversation and keep your history |
| Mercury's memory | Short notes of what you have told Mercury about your life (for example a new job or a move), with the date you said it. Paid plans only; never your chart, health, money or anyone's birth details. You can see, delete or turn off every note in Settings | So a new conversation can pick up where the last one left off |
| Sessions | Messages exchanged with an astrologer | To deliver and support the reading |
| Reviews | Rating and review text | To publish with the astrologer's profile |
| Astrologer profile | Headline, bio, specialties, languages, years of experience | To list you (astrologers only) |
| Support | What you write to us | To help you |
| Waitlist | Your email address, if you ask for an invite | To invite you when there's room. Write to us and we'll delete it |
| Astrologers' list | Your email address, if you ask to hear when the astrologer application opens | To tell you when it opens. Write to us and we'll delete it, and deleting your account deletes it too if you asked while signed in |
2.2 Generated for you
| Category | What |
|---|---|
| Charts | Computed positions, houses, aspects, and tradition-specific structures, cached per chart and system |
| Reports | The delivered PDF and the exact chart it was written from |
| Session records | Start, end, billable minutes, pauses, disconnections, attendance — append-only |
| Money records | Balance ledger entries, earnings, payouts — append-only |
| Usage | Daily message counts, for entitlement caps |
2.3 Collected automatically
Authentication and security logs, product analytics events, and error reports when something breaks (see Sentry in §6.2).
Birth Data is deliberately excluded from logs and from client-side
analytics (architecture.md §9).
2.4 What we never collect
Full card numbers. Stripe processes payments; we store only identifiers and amounts.
3. Sensitive information
We treat Birth Data as sensitive personal information. It is precise personal history, it is permanent and unchangeable, and combined with a name it is unusually identifying.
We therefore: collect the minimum; keep it out of logs and client analytics; never sell or share it for advertising; disclose it to an astrologer only for a session you booked; and use it only for the purposes in §4.
We do not use Birth Data to infer, and do not ask for, health conditions, sexual orientation, religious belief, or any other protected characteristic.
4. Why we use it, and on what basis
| Purpose | What it involves | Basis (GDPR, if in scope) |
|---|---|---|
| Provide the service | Compute charts, run Mercury, generate reports, run sessions | Contract |
| Payments | Charges, holds, captures, refunds, payouts | Contract |
| Support and disputes | Investigate billing and conduct complaints | Contract / legitimate interests |
| Safety and integrity | Moderation scanning, fraud detection, circumvention signals | Legitimate interests |
| Legal and accounting | Tax, bookkeeping, responding to lawful requests | Legal obligation |
| Improving the service | Aggregate usage analysis | Legitimate interests |
| Marketing | Only with your consent, and you can withdraw it | Consent |
4.1 AI processing
Mercury and report generation send your chart and your messages to our AI provider (Anthropic) to generate text.
The chart mathematics is computed by our own engine, not by the AI. The AI receives computed figures and writes interpretation.
We do not use your data to train AI models, and our agreement with our AI provider prohibits them from using data we send for training.
4.2 Automated monitoring
Session messages and profile text are scanned automatically for contact details, payment handles, and external links, and behavioural patterns are analysed, to detect circumvention and abuse. A first match produces a nudge; a person reviews before any significant action.
No decision that removes someone from the Platform is made by automation alone.
5. We do not sell your information
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the preceding twelve months.
6. Who we share it with
6.1 Astrologers
When you book a session, that astrologer receives your chart and the birth details behind it, to give the reading. They are contractually bound to use it only for that, not to retain it beyond [12] months, not to disclose it, and not to market to you (Astrologer Agreement §6).
6.2 Service providers
| Provider | Role | What it handles |
|---|---|---|
| Supabase | Database, auth, storage, realtime | Account data, birth data, charts, messages, report PDFs |
| Vercel | Hosting | Request handling; operational logs |
| Stripe | Payments and payouts | Card processing, subscriptions, Connect payouts, KYC |
| Anthropic | AI | Chart data and messages, for generating text |
| Mapbox | Geocoding | Birth place text → coordinates and timezone |
| Daily | Video | Room creation and attendance for video sessions |
| Resend | Email delivery | Your email address and the emails we send you, such as confirming your account |
| Google Workspace | Our inbox | What you write to us at hello@thirdhouse.app |
| Sentry | Error reports | When something breaks: what failed and where. Reports are stripped of what you typed, your birth details and email addresses before they leave us |
6.3 Legal and safety
We may disclose where required by law or lawful request, to enforce our terms, to protect the rights or safety of any person, or in connection with a merger or sale of assets (with notice to you).
Child sexual exploitation material is reported to law enforcement and NCMEC without exception.
7. Where your data is
Processed in the [United States]. If you are elsewhere, using the Platform involves transferring your data there.
8. Security
Row-level security so users reach only their own rows; session messages readable only by the two participants; money tables writable only by a service-role credential, never from any client path; append-only enforcement on financial and audit records at the database level; secrets held server-side and never shipped to the browser; validation on every route.
No system is perfectly secure. We will notify you and any regulator as required if a breach affects your personal information.
9. Your rights
Subject to verification and to legal exceptions, you may ask us to:
- Know what we hold and how we use it;
- Access a copy in a portable format;
- Correct inaccurate information;
- Delete your personal information;
- Opt out of sale or sharing — we do neither, but the right stands;
- Limit use of sensitive personal information;
- Not be discriminated against for exercising any of these.
Depending on where you live you may also have rights to object, restrict processing, withdraw consent, or complain to a regulator.
9.1 How to ask
Write to hello@thirdhouse.app. We verify your identity, and respond within the time the law allows (45 days in California, extendable once). An authorised agent may act for you with proof.
9.2 What deletion actually does
Deleting your account erases or anonymises your personal information: profile, birth data, charts, conversations, and messages.
Some records survive in anonymised form. Financial ledger entries, earnings, and payouts are append-only and legally required for bookkeeping and tax. We sever the link to your identity rather than delete the history — the row stays, the person does not. Session records needed for an open dispute or chargeback are kept until it closes.
This is a deliberate design: deletion and auditability coexist by severing
identity, not by destroying history (architecture.md §9).
10. Children
The Platform is for adults. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we delete it and close the account. Contact hello@thirdhouse.app if you believe a child has given us data.
11. Changes
We will post changes here and update the date. For material changes we give at least [30] days' notice by email and in-product.
Contact: [LEGAL ENTITY NAME], [POSTAL ADDRESS] · hello@thirdhouse.app
Questions about any of this? Get in touch.