Privacy
Draft for owner review. This notice must be checked against the final production setup before publication.
Who handles the data
Eden HQ LLC operates the Ritual web products. Privacy and access requests can be sent to hello@poweredbyeden.com. The seller's postal address must be completed before launch.
Purchases and sign-in
The service records the purchase email, product, order reference, payment status, and access permissions. Stripe processes the payment and billing information. Full card details are not collected by Ritual's own purchase forms.
An emailed link proves access to a mailbox. The service stores protected sign-in records, sessions, and purchase access records so a buyer can return on another device. Essential cookies keep a buyer signed in or connect a verified purchase to the buying browser. They are separate from optional analytics and advertising cookies.
Free downloads and email choices
Requesting the Daily Reset requires permission to send that guide and its access link. Marketing permission is a separate, unticked choice. The service records the consent wording, version, and time. Requested marketing permission is confirmed by an explicit action after email sign-in; opening a delivery link alone does not confirm it.
Marketing emails include an unsubscribe link. Journey reminders have their own opt-in and opt-out. Stopping marketing emails does not remove purchased access or prevent necessary purchase and sign-in messages.
Ritual builder and progress
The builder uses the selected time of day, available minutes, current condition, and desired focus to produce a result. The current-condition answer is not saved. The resulting plan is saved to the buyer's web library.
Day-by-day products save a first-start time, chosen time zone, completed days, and reminder preference. Private journal entries are not part of this web implementation.
Community
A community message contains the display name and text supplied by the member, its time, and a private ownership reference. Other eligible members can read visible messages. Account email addresses and private ownership references are not displayed in the member feed. Reports are available to authorized moderators, and moderation actions are recorded.
Analytics and advertising
If Google Analytics 4 or Google Ads is configured, its scripts load only after a visitor accepts the optional cookies. Declining or leaving the choice unanswered keeps those Google scripts off. The choice can be changed from Cookie settings on a measured page.
The site also keeps its own counts of offer visits and checkout activity using the day and permitted campaign tags. Those counts use no campaign cookie. Purchase records remain separate from these aggregate counts.
Service providers and safeguards
The intended production providers are Vercel for hosting, Neon for records, Cloudflare R2 for protected files, Resend for email, and Stripe for payments. Google receives optional measurement information only when enabled and accepted. The final provider setup must match this notice before launch.
Access checks restrict products to eligible buyers and restrict admin information to authorized roles. Operational records may be retained for security, accounting, support, and payment disputes. Leads without confirmed marketing permission are eligible for removal after 12 months under the configured retention process. Confirmed preferences, active access, and purchase records may need different retention periods.
Requests and changes
To request access, correction, or deletion, email hello@poweredbyeden.com. The request may require proof of the relevant email address. Some payment and accounting records may need to be retained. Changes to this notice are published with a new version; the notice should be reviewed whenever data handling changes.