Privacy Policy

1. Scope

This Privacy Policy explains how The Ascension Field (“The Ascension Field,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit the public website, use the members application, purchase a product, subscribe to a membership, watch protected videos, receive email, or contact support.

The Ascension Field is the business name used by a sole proprietor and is the business responsible for the practices described in this Policy. This Policy does not replace the separate privacy policies of third-party services that process information through their own products.

2. Information We Collect

Information You Provide

• Contact and account information, including your email address, first name, and last name.
• Checkout information that you enter through Stripe, including billing contact information and payment details processed by Stripe. We do not directly store your complete payment-card number.
• Communications you send to customer support, including the content of your request and any information you choose to include.
• Marketing preferences, including unsubscribe choices and email engagement information made available through Loops when tracking is enabled for an email.

Account, Purchase, And Membership Information

• Internal customer, authentication, Stripe Customer, order, and subscription identifiers.
• Products purchased, discounts, payment and refund status, subscription status, renewal periods, disputes, and chargebacks.
• For advertising measurement, we may send Meta an InitiateCheckout event when a visitor begins the Series checkout, a StartTrial event after a Membership trial is verified, a Subscribe event after a payment method is saved and a Membership subscription is created, and a Purchase event after Stripe confirms a Series purchase or the customer's first successful Membership payment. Routine Membership renewal payments are not sent as Purchase events. Purchase events may include the confirmed transaction value and currency. These conversion events may include unique event identifiers, advertising-cookie identifiers, and normalized contact identifiers that are cryptographically hashed before transmission.
• Product and membership entitlements, account status, complimentary access, and records needed to administer account merges or support corrections.
• Email-delivery, customer-segment, and automation-enrollment status needed to operate authentication and approved customer email flows.

Member Video Activity

When a signed-in customer uses a protected video player, we collect information from the embedded Vimeo player and associate it with that customer’s account. This information may include the internal customer and content identifiers, a randomly generated viewing-session identifier, play, pause, progress, and completion events, the playback position and video duration, accumulated active watch time, event sequence numbers, and timestamps.

Pausing and resuming the same video remains part of one viewing session. A new viewing session begins when the customer plays a different video or returns after at least 60 minutes of inactivity. We do not use this feature to record audio or video from your device, capture your screen, or collect the contents of other browser tabs.

Because the service provides spiritual content, the videos you choose to watch may reveal or allow inferences about spiritual, religious, philosophical, or wellness interests. We use Member Video Activity only to provide and secure the members service, show your personal activity history, maintain accurate session and watch-time totals, and diagnose playback or reporting problems.

Information Collected Automatically

• Internet Protocol address, browser and device information, request timestamps, referring pages, and basic server or security logs.
• Authentication-session cookies and similar data required to keep you logged in and protect your account.
• Security signals processed by Cloudflare Turnstile to distinguish legitimate visitors from automated abuse.
• Technical playback requests and information processed by Vimeo when an embedded video loads or plays.
• On the public website, Meta Pixel information such as visited page URL, referring URL, browser and device information, IP address, and `_fbp` or `_fbc` advertising identifiers when Meta tracking is enabled. Random or account-linked conversion identifiers may be retained briefly in browser storage or a cookie to prevent duplicate browser and server events. The checkout-start record expires after 30 minutes, and the StartTrial confirmation cookie expires after 10 minutes.

3. How We Use Information

We use personal information to:

• Operate, maintain, secure, and improve the services.
• Send six-digit login codes, authenticate sessions, and prevent unauthorized access.
• Process purchases, subscriptions, renewals, cancellations, refunds, disputes, and billing requests.
• Create and maintain customer accounts and provide the correct product or membership access.
• Deliver protected video content and manage publication or release availability.
• Provide customer-facing session and watch-time totals, maintain viewing continuity, and prevent duplicate or implausible playback records.
• Send transactional messages and approved purchase or membership email automations.
• Provide support, verify account ownership, correct records, and combine duplicate accounts when appropriate.
• Detect, prevent, investigate, and respond to fraud, abuse, account sharing, security incidents, and violations of our Terms.
• Maintain business, tax, accounting, audit, dispute, and legal records and comply with applicable obligations.
• Measure advertising results, attribute trial starts, subscriptions, checkout starts, and first purchases to campaigns, reduce duplicate conversion reporting, and optimize Meta ad delivery.

Member Video Activity is not used to determine product entitlements, billing, or advertising audiences, and it is not used to make decisions that produce legal or similarly significant effects.

4. Legal Bases Where Applicable

Where a law requires us to identify a legal basis for processing, we rely on one or more of the following:

• Performance of a contract, including providing a purchased product, membership, account, login, billing, or support service.
• Legitimate interests, including securing the services, preventing fraud, maintaining business records, and improving reliability, provided those interests are not overridden by applicable rights.
• Compliance with legal obligations, including tax, accounting, payment, consumer-protection, and lawful-request obligations.
• Consent, where consent is legally required and requested, including for certain marketing communications.

5. How We Disclose Information

We do not sell personal information for money. We disclose information only as reasonably necessary for the purposes described in this Policy or as permitted by law, including to:

• Service providers that host, secure, support, or deliver the services on our behalf.
• Payment processors, financial institutions, card networks, and fraud-prevention providers involved in a transaction.
• Meta for public-site PageView, InitiateCheckout, StartTrial, Subscribe, and verified Purchase conversion events used for advertising attribution and optimization.
• Professional advisers or contractors who need the information to provide authorized business, technical, accounting, or legal services and are subject to appropriate confidentiality duties.
• Government authorities, courts, law enforcement, or other parties when required by law or reasonably necessary to protect rights, safety, security, or the integrity of the services.
• A successor or prospective successor in connection with a merger, financing, reorganization, sale, or transfer of all or part of the business, subject to appropriate safeguards and applicable law.
• Another party when you direct us or give valid consent.

We do not sell Member Video Activity or share it for cross-context behavioral advertising. Supabase stores the account-linked activity, Vercel processes the application requests used to submit and retrieve it, and Vimeo processes playback information needed to operate its embedded player. We do not send member video titles, playback events, watch time, or protected member-page activity to Meta.

6. Service Providers

The service currently depends on the following primary providers. Each provider may process information under its own terms and privacy notice:

• Supabase: customer database, account authentication, entitlements, and member video activity.
• Stripe: checkout, payments, subscriptions, billing, and fraud prevention.
• Loops: authentication, transactional, and marketing email delivery.
• Vimeo: embedded video hosting and playback.
• Vercel: website and application hosting.
• Cloudflare: domain, traffic-security, and bot-protection services.
• Meta: public-website advertising measurement, attribution, and campaign optimization.
• Telegram: optional third-party community access for eligible members. Telegram’s privacy practices apply when you choose to use its service.

These providers may use additional subprocessors and may process information in the United States or other countries.

7. Payments

Stripe processes checkout and payment information. Stripe may collect payment-card information, billing details, transactional information, device information, cookies, and fraud-prevention signals. We receive information needed to identify the customer, record the transaction, administer access, and respond to refunds or disputes, but we do not directly receive or store the complete payment-card number.

8. Cookies And Similar Technologies

The services use cookies and similar technologies that are necessary for authentication, session continuity, security, checkout, fraud prevention, and embedded video delivery.

• Supabase authentication cookies keep a customer logged in and allow server-side access checks.
• The members application uses browser session storage to temporarily retain the current video identifier, randomly generated viewing session identifier, playback counter, event sequence, and last activity time. This allows pauses, resumes, and page navigation within the same browser-tab session to be counted accurately.
• Stripe may use cookies and device signals for checkout, payment processing, and fraud prevention.
• Cloudflare Turnstile processes limited security signals to detect automated abuse.
• Vimeo embeds use the privacy-oriented `dnt=1` setting. Vimeo states that this prevents new non-essential player cookies during that viewing session, but Vimeo and Cloudflare may still use cookies needed for player security, bot prevention, or rate limiting.
• The public website may use Meta `_fbp` and `_fbc` cookies or similar identifiers to connect PageView, InitiateCheckout, StartTrial, Subscribe, and Purchase events with Meta ad interactions and prevent duplicate browser/server conversion reporting. Meta tracking is not loaded in the members application.

Browser settings may allow you to block or delete cookies, but blocking required cookies may prevent login, checkout, or video playback from working.

9. Email And Communication Choices

We use Loops to deliver six-digit login codes and other operational email. Transactional messages necessary to operate an account, complete a requested action, or provide a purchased service may still be sent when appropriate.

New customers are added to customer marketing communications when they purchase. Marketing messages include an unsubscribe mechanism. We preserve unsubscribe status and do not use marketing labels or email segments to grant product access. You may also request help with communication preferences by emailing info@theascensionfield.com.

10. Retention

We retain personal information only for as long as reasonably needed to provide the services and for legitimate business, security, accounting, tax, dispute, fraud-prevention, and legal purposes. Retention periods vary according to the type of record and applicable obligations.

Purchase, subscription, entitlement, refund, dispute, audit, and related records may be retained after an account becomes inactive when needed to preserve access history, honor the Series guarantee, resolve disputes, prevent fraud, or meet legal and financial-record requirements. Backup copies may remain for a limited period after deletion from active systems. Service providers maintain information under their own retention requirements.

Account-linked Member Video Activity may be retained while the account is active and afterward for as long as reasonably needed to provide activity history, maintain accurate service records, secure and troubleshoot the service, resolve disputes, or meet legal obligations. When it is no longer reasonably needed, we may delete or de-identify it, subject to backup and legal-retention requirements.

Meta conversion-delivery records contain hashed matching identifiers and limited technical attribution data. We retain them only as long as reasonably needed to deliver, retry, reconcile, or audit advertising events and then delete or de-identify them subject to backup and legal requirements.

11. Security

We use administrative, technical, and organizational measures designed to protect personal information. These measures include passwordless login codes, protected session cookies, server-side authorization, database access policies, restricted service credentials, webhook verification, rate limiting, bot protection, audit records, and redaction of sensitive log fields.

No method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security. Never send a password, login code, complete payment-card number, or other unnecessary sensitive information through customer-support email.

12. Your Privacy Rights And Choices

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about the personal information we process. You may also have a right to withdraw consent where processing depends on consent and to appeal or complain to a privacy regulator.

Submit a request to info@theascensionfield.com. To protect customer information, we may need to verify your identity and account ownership. We may retain or decline to delete information where permitted or required for legal, tax, accounting, security, fraud-prevention, dispute, or contract purposes.

These requests may include Member Video Activity linked to your account. Deleting browser session storage through your browser controls removes the temporary copy stored in that browser but does not itself delete activity already recorded in our systems.

We will not discriminate against you for exercising an applicable privacy right. Where applicable, you may request to opt out of the sale or sharing of personal information or its use for targeted advertising by emailing info@theascensionfield.com or by using an available consent control.

13. International Processing

The Ascension Field and its service providers may process information in the United States and other countries. Those countries may have data-protection laws different from the laws where you live. Where required, providers may rely on contractual or other approved transfer safeguards.

14. Children’s Privacy

The services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child under 13 has provided personal information, contact info@theascensionfield.com so the information can be reviewed and deleted where appropriate.

15. External Links And Services

The websites and member area may link to or embed third-party websites and services. Their privacy practices are governed by their own notices. Review those notices before providing information directly to a third party.

16. Changes To This Policy

We may update this Privacy Policy to reflect changes in services, providers, business practices, or law. The updated version will be posted on this page with a revised effective date. Where required, we will provide additional notice or request consent.

17. Contact

Questions, privacy requests, or complaints may be sent to The Ascension Field at info@theascensionfield.com.