Privacy

Privacy Notice

The free experience stays local

Your raw birth details and self-report answers stay in your browser. The free chart and result are calculated there. PracticeEco does not receive those raw values during the free flow, sets no analytics cookie there, and does not send form activity to third-party advertising trackers.

We count page loads and coarse first-party events such as a result view. A page-load count is not a unique-person count. Page-load events carry only a broad source category (direct, search, referral, social, shared link, paid or unknown), and sometimes a fixed experiment label. We read a referring site, a paid campaign medium, or the short tag our share buttons add to a shared result link in your browser to choose that category, but do not send the original referrer, that tag or other campaign details to our analytics endpoint. Only the category travels between our public pages and, if you buy, into order metadata so we can count confirmed orders by source. This does not create a visitor identifier or browser storage. Result events include your public chart type and, when you finish the questions, the strongest answer group and its low/middle/high band. These events do not include raw birth details, individual answers, all six scores, email addresses, or a persistent advertising identifier.

When you choose the private report

After you choose the Personal Pattern Report, PracticeEco receives the calculated Purple Star projection, six aggregate self-report scores, your 24 answer selections and the 24 statements you were shown over a TLS-protected connection. The server encrypts this minimised input at rest. Raw birth input, name, email, order key and address are excluded before the private report input is persisted.

The report object itself holds only the calculated chart, your public type label, the six aggregate scores, your 24 answer selections and the statements you were shown. Your name, email address, order key, address, raw birth input, answer interaction history, longitude and latitude are excluded before it is stored, so the report never has to print your identity in order to be yours.

Report processing

The report is produced in English. First-party PracticeEco code calculates the chart and the six aggregate scores, and fixed wording such as titles and practice-library steps is versioned content. During private report preparation, DeepSeek acts as a third-party data processor. Apart from our own fixed wording, the data sent to it is limited to those six aggregate scores, the 24 statements you were shown with the answers you gave, details worked out from them alone (such as your focus area), and, for the checks before release, the drafts of the written interpretation pages. It does not receive your calculated chart, your public type label, your birth date, time or place, your name, your email address, or your order or payment details. This processing takes place in the People's Republic of China. The written narrative is prepared for your order and checked against a fixed editorial policy before release; it can still contain errors. If required interpretation is unavailable or fails checks, the report is not marked as delivered, and if it cannot be completed we refund you automatically. Fixed wording does not replace the promised personal interpretation, except that a practice step that fails our checks is replaced from a fixed, reviewed practice library and labelled as library text. Your processing choice authorizes this limited handling and is recorded with the notice version, report language and a reference to the minimised input in encrypted private records. The digital-delivery consent is a separate checkout choice. Neither choice authorizes marketing.

An unpaid checkout intake expires after 2 hours. After confirmed payment, the encrypted input and private HTML/PDF artifacts are retained for up to 45 days, unless you erase them sooner.

WooCommerce coordinates the order and Stripe processes payment. They receive the order and payment data needed for those jobs under their own privacy terms. PracticeEco keeps minimized payment and audit records only as needed for reconciliation, abuse prevention, and applicable legal obligations.

WhatsApp messages

WhatsApp is run by Meta, which carries the messages between you and us, including your phone number, under its own terms. You contact us first. After that, we reply only within 24 hours of your latest text message, or send a reminder you asked for. We never ask for birth details in chat and never send your report link there. A WhatsApp message alone cannot authorize a refund, disclose an order or private report, or delete private data.

To prepare replies to your messages, we send text from them to Alibaba Cloud (Model Studio), which acts as a third-party data processor. Before sending, we screen the text for recognised forms of birth details, place information, contact details, links, order numbers and codes. We remove sentences containing detected birth or place information and replace other detected details with placeholders. Links to our public home, privacy, terms and method pages may remain. We send at most six of your most recent messages, each cut to 400 characters after screening; messages that only say REMIND, REMIND 6M or STOP, and non-text messages, are not sent. Alibaba Cloud does not receive the phone number you write from. Screening does not catch every personal detail: names, a city named without a place word, or a date outside a birth-details sentence may remain.

Alibaba Cloud stores this text in Singapore and may process it on its servers in other countries outside mainland China. Alibaba Cloud states that it does not use this content to train its models. Under its data-retention policy, it keeps the text we send and what it returns for no longer than 30 days. Please do not send birth details, payment details, report links or other private information in chat.

Our answer library keeps only our own general answers and fixed translations, not your messages.

When a conversation is passed to our team, we send a notice about it to our private Telegram chat, and a reply we write there is sent to you on WhatsApp. Telegram, which provides that chat, receives the notice under its own terms. The notice shows your recent messages in that conversation with their times, the reason it was passed to us, when we last replied, the time by which we can still reply, a note if your 22-day reminder was sent recently, and a short reference code instead of your phone number. Your messages appear as you wrote them; they are not screened first. Non-text messages are not shown. Each notice is scheduled for removal from Telegram one hour after the 24-hour WhatsApp reply window closes, but not sooner than 12 hours after it was sent, so at most 25 hours after sending. If removal keeps failing, we remove it by hand. Replies we write in that chat stay there and are not on this removal schedule.

When you send REMIND or REMIND 6M, we keep a consent record for that reminder and, while it is pending, your phone number in encrypted form, so that we can send one reminder 22 days later for REMIND or 160 days later for REMIND 6M. The number and the consent record are removed when the reminder is sent, cancelled or otherwise ended. A REMIND request expires after 30 days and a REMIND 6M request after 170 days, measured from that request, with expired records removed during routine cleanup. A message starting with STOP cancels both. After STOP, we keep a record without your phone number for 7 days so that a delayed copy of an earlier request cannot restart a reminder.

Incoming WhatsApp events, including your messages, your phone number and delivery receipts, are stored encrypted and become unreadable 30 days after the event; routine cleanup then removes the encrypted content. Hashes used to recognise repeated deliveries, with their timestamps, are kept until 90 days after the event and then removed. For photos, voice notes and files, we keep only a record that one arrived, not its content. Messages from WhatsApp accounts that do not share a phone number with us are not stored. Sending STOP does not shorten these periods.

Conversation records are scheduled for deletion 30 days after your last message. Reply records contain no message text and are scheduled for deletion 30 days after each reply decision; records of when we contacted you are scheduled for deletion 30 days after the contact. Routine cleanup removes these expired records.

Practice and check-in

Your report includes a private practice link. The link itself carries what the practice page needs: a signature, your six purchase-day scores, your focus area and direction, and the ids of the statements you were shown. The practice page checks the link in your browser. Using it sends none of that to us, your check-in answers are not sent to us, and the page itself stores nothing on your device.

The practice link has no expiry date, and we cannot switch off the link of a single order. Deleting your report, a refund or the end of the 45-day file period does not stop a practice link you already have, and anyone you pass the link to can see those scores. The link you save after your first practice day also carries your starting answers. The only way we can stop practice links is to change the site's signing key, which stops every customer's link at once. Keep your practice link private.

The practice page sends us a bare count when you save your starting point and when you finish a check-in, with nothing you entered and nothing else attached. Your network address is used only briefly, in memory, to limit abuse, and is not stored.

Recovering a practice link

To help you recover a lost practice link, we keep a separate recovery record containing your order number, a practice identifier, identifiers and version information for your question set and any tailored statements, your report date and the scheduled deletion date. It contains no answers, scores, focus area, direction, name or email address. To verify your order, you enter the order number and paste the private report link from your order confirmation email; we use them only for that check and do not keep them. This record then lets us issue a replacement link without your scores or answers; you enter your six starting totals yourself.

The record can be used for recovery until 190 days after midnight UTC on your report date. After that deadline, it is unavailable for recovery and is removed during routine retention cleanup. Deleting your report or a refund removes this record from the active database sooner. These limits concern recovery records: they do not disable a practice link you already saved.

The record is also included in encrypted local and off-site backups. Local backups are replaced as newer verified backups are made. Our off-site policy keeps recent daily copies and selected monthly copies for roughly a year; about 400 days from a backup's creation is an operating estimate, not a guaranteed deletion deadline. Deletion pauses if a backup upload or verification fails, or retention safety checks do not pass, so copies can remain longer after the record is removed from the active database.

Restoring a backup does not extend the recovery deadline. Before service resumes, our recovery procedure removes restored records for reports already deleted or refunded. If the earlier deletion history is unavailable, it removes all restored recovery records, so replacement links may no longer be available. This does not disable practice links you already saved.

Earlier report notice requests

The free result no longer asks for an email address. If you entered one in the Personal report notice form it showed earlier, PracticeEco uses that address only to send the one notice that form described. The address is encrypted in the first-party WordPress database, no cookie is set, and it is not sent to a third-party form, advertising, or mailing-list service. The record is deleted after that notice is sent or within 180 days of when you entered it, whichever comes first. You can ask support@practiceeco.com to remove it sooner.

Customer email handling

Zoho Mail hosts the PracticeEco support mailbox. Support enquiries are handled through that mailbox. Include only the information needed to explain the issue; keep raw birth details, payment-card information and private report links out of email. An email request alone cannot authorize a refund, disclose an order or private report, or delete private data.

Access, erasure, and refunds

The private access link is a bearer credential: anyone who has it can open the report, so do not post it publicly. You can erase the report from its private page. The deletion control on your report page removes the access token, the encrypted report input, the HTML and the PDF. A minimised accounting shell may remain where the law requires one, and it cannot rebuild the report. A verified refund also revokes access and removes the report input and artifacts. Neither deleting the report nor a refund switches off a practice link you already have; see Practice and check-in above. For help or a data-rights request, email support@practiceeco.com.