Privacy Policy
Effective August 5, 2026
1. Who We Are
ASA Family Investments LLC (d/b/a InPsychNow) operates the InPsychNow™ platform (“Service”). This Policy explains what data we collect, how we use it, and your rights.
1a. Where the Service Is Offered
InPsychNow™ is offered in the United States and select other countries. It is not offered or directed to residents of the European Economic Area, the United Kingdom, Switzerland, Brazil, China, or other regions we exclude, and access from those regions is technically blocked. If you are located in an excluded region, please do not use the Service.
2. Data We Collect
Account data: name, email address, profile photo (via Google OAuth).
Assessment data: your DISC profile responses, Purpose Prism™ answers, Self-Lens™ check-ins, and Operating Vitals™ entries. This data is used solely to generate your personalized recommendations.
Birth information (optional): if you choose to use our astrology and timing features, you may provide your birth date, and optionally your birth time and birth location. We store this information, and the planetary calculations derived from it, to generate your natal chart, year-ahead report, compatibility reports, and related timing features. Birth information is optional: it is never required to create an account or to use the DISC assessment or the rest of the platform, we do not ask for it during signup, and you can remove it at any time from your settings. If you do not provide a birth date, the astrology-based features are not generated.
Usage data: pages visited, feature interactions (via PostHog, a privacy-respecting analytics platform). IP addresses are not stored long-term.
Billing data: managed by Stripe. We store only your subscription status and Stripe customer ID. We never see or store raw payment card numbers.
3. How We Use Your Data
- To provide, personalize, and improve the Service.
- To send transactional emails (welcome, receipts, feature updates).
- To analyze aggregate usage patterns and improve product features.
- To comply with legal obligations.
We do not sell your personal data. To generate AI features, we send only the minimum necessary data to third-party AI providers (Anthropic/Claude, Google Gemini, Together AI, DeepSeek, our self-hosted inference, and DeepL); we never send your name, email address, or payment details, and we contractually prohibit them from training their models on your identifiable data. DeepSeek is based in China and is never used for users in regions we do not serve.
4. Data Retention
We retain your account and assessment data for as long as your account is active. If you delete your account, your data is purged within 30 days, except where longer retention is required by law or legitimate business need (e.g., billing records).
5. Third-Party Services
- Supabase: database and authentication (hosted in the US).
- Stripe: payment processing (PCI-DSS compliant).
- Resend: transactional email delivery.
- PostHog: product analytics (data minimized; no full IP storage).
- Vercel: hosting and edge functions.
- Upstash: caching and rate limiting (US).
- Anthropic (Claude): AI text generation (US).
- Google (Gemini): AI text generation (US).
- Together AI: AI model hosting and inference (US).
- DeepSeek: AI text generation (China; never used for regions we do not serve).
- Self-hosted inference: our own AI routing and inference (US).
- DeepL: machine translation (EU).
- Wearable providers (Oura, WHOOP, Fitbit, Apple Health): optional health-signal integration.
- Calendar providers (Google, Microsoft, Apple): optional calendar integration.
5a. AI Processing and Operational Logs
When you use an AI-powered feature, the text you submit is processed by our self-hosted inference systems and, when needed to provide the Service, by the third-party AI providers listed in this Policy. This processing is performed to generate the response you requested.
We do not use submitted content to train our self-hosted models. Our application telemetry is designed to record operational metadata, such as the feature used, serving system, status, processing time, and approximate token counts, rather than prompt or response content. The underlying inference, hosting, security, or network systems may create restricted, short-lived technical logs while processing requests or diagnosing failures. We limit access and retain those logs only as long as reasonably necessary for security, reliability, abuse prevention, and troubleshooting.
Reports that you intentionally save to your private account are stored separately from operational logs and remain available until you delete them or your account is deleted, subject to the retention provisions in this Policy.
6. Cookies
We use session cookies issued by Supabase for authentication. We do not use third-party advertising cookies. You can disable cookies in your browser, but this will prevent you from signing in.
Chrome extension privacy
InPsychNow offers two Chrome extensions with different purposes and data access. Cadence Weather for Chrome shows deterministic, transit-based timing guidance. It has no content scripts and does not read webpages, browsing history, email, contacts, calendars, messages, health data, or financial data. The InPsychNow Communication Assistant places controls on supported LinkedIn profile pages and in an open Gmail compose window. It reads the relevant visible profile or draft text only after the member clicks Analyze DISC or Rewrite for DISC. It does not scan that text in the background, use Google OAuth or Gmail APIs, or send an email, message, connection request, or post.
Both extensions use a member-created account key for cloud requests. Cadence Weather stores that key in local Chrome extension storage. The Communication Assistant stores its key and settings in Chrome synchronized extension storage, which Chrome may synchronize when browser sync is enabled. InPsychNow stores only a SHA-256 hash of a cloud account key on its server. A member can remove a key through extension controls or settings, revoke it by generating a replacement, clear extension data, or uninstall the extension.
Cadence Weather Today, Week, and Plan This Moment responses are deterministic and do not call a machine-learning model at runtime. Communication Assistant Analyze and Rewrite send the selected visible text to InPsychNow or, when the member selects local mode, to the member's service at http://localhost:11434. Analyze and Rewrite call AI models and may use the AI providers described in this Policy. The extension does not store submitted page text or generated content in its usage log.
Analyze and Rewrite share a monthly AI call allowance based on the connected plan. The counter uses a pseudonymous account identifier and calendar month, not the submitted profile, draft, or generated content. Monthly counters expire when the calendar month resets. Limited account-linked operational records may include endpoint, method, status, call count, and time. They are retained while the account is active and deleted within 30 days after account deletion, except where a longer period is required by law or a documented legitimate business need. Cadence Weather's deterministic reads do not consume the monthly AI allowance.
Extension cloud availability is determined on each request from the country code that Vercel or Cloudflare derives from the request's IP address. InPsychNow uses that country only to allow or refuse the request. It is not added to the member's profile, and InPsychNow does not create or retain a nationality or ethnicity classification from it. Chrome Web Store distribution may also be limited to countries where InPsychNow offers the Service.
InPsychNow does not sell extension data, use it for advertising, or share it with data brokers. Necessary hosting, security, authentication, and AI-processing providers may process data only to provide the requested Service under the arrangements described in this Policy. Personality estimates may be incomplete, biased, or wrong and should not be treated as diagnoses or verified facts about another person. Do not submit confidential, privileged, regulated, or sensitive information, or use an estimate as the sole or determinative basis for employment, credit, housing, insurance, healthcare, education, law enforcement, or another high-impact decision.
Voice and biometric safeguards
Voice Check is optional and requires affirmative wellness-data consent. The recording is processed on your device and is not uploaded or retained. If you save a check-in, InPsychNow stores the transcript and limited delivery measures in your private account until you delete them or your account. InPsychNow does not create a voiceprint, use voice for identity or authentication, detect deception, diagnose emotion or health, or infer protected characteristics. Wearable information is user-provided and is used only for non-clinical comparison with the user's own historical patterns.
7. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, port, or delete your data. To exercise these rights, email legal@inpsychnow.com. We will respond within 30 days.
You can also delete your account directly from Settings → Account → Delete Account, which initiates immediate anonymization of your profile and queues full deletion within 30 days.
8. EU/EEA Residents, GDPR Rights
The Service is not offered to residents of the European Union, European Economic Area, or the United Kingdom. This section explains the GDPR and UK GDPR rights that may still apply to public-site visitors, residual processing, or other circumstances where those laws govern. ASA Family Investments LLC (d/b/a InPsychNow) acts as the data controller for InPsychNow™.
Legal Bases for Processing
- Contract performance: processing your account data, assessment results, and subscription information to deliver the Cadence Method™ Service.
- Consent: analytics cookies, marketing emails, and behavioral tracking. You can withdraw consent at any time via your Privacy Settings or the cookie banner, without affecting the lawfulness of prior processing.
- Legitimate interest: product improvement, fraud prevention, and system security. We balance our interests against your rights and document our assessments.
Your GDPR Rights
- Right of access (Art. 15): request a copy of all personal data we hold about you.
- Right to rectification (Art. 16): correct inaccurate personal data.
- Right to erasure (Art. 17): request deletion of your personal data (“right to be forgotten”).
- Right to restriction (Art. 18): request limited processing while we resolve a dispute.
- Right to data portability (Art. 20): export your data in machine-readable JSON format.
- Right to object (Art. 21): object to processing based on legitimate interest.
- Right to withdraw consent (Art. 7): withdraw any previously given consent.
To exercise any of these rights, visit your Privacy & Data settings, or email legal@inpsychnow.com. We will respond within 30 days as required by GDPR Article 12. If we need additional time (up to 60 days for complex requests), we will notify you within the initial 30-day period.
Data Transfers
Your data may be processed in the United States by our service providers (Supabase, Vercel, Stripe, Resend, PostHog). These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, supplementary security measures including encryption in transit and at rest.
Supervisory Authority
If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
9. California Residents (CCPA/CPRA)
If you are a California resident, you have the right to: know what personal information we collect and how it is used; request deletion of your personal data; opt out of the sale of personal information. We do not sell personal information as defined under the CCPA/CPRA. To exercise these rights, contact legal@inpsychnow.com.
9a. Washington Consumer Health Data (My Health My Data Act)
If you are a Washington consumer, some data we process (such as mood, mental-wellness, and wearable health signals, and inferences from them) may be “consumer health data.” We collect and share it only with your consent, we do not sell it without your separate valid authorization, and you may withdraw consent and request access to or deletion of that data by emailing legal@inpsychnow.com. We do not use geofences around health-care facilities to identify or track you. This notice also informs consumers in other states with comparable consumer-health-data protections.
9b. Texas and Other State Privacy Rights
Residents of Texas (under the Texas Data Privacy and Security Act) and other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Oregon, and Montana) may have rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale, and certain profiling. We obtain opt-in consent before processing sensitive data, and we treat health, wellness, and religious or spiritual-belief information as sensitive personal information subject to your right to limit its use. To exercise any of these rights, email legal@inpsychnow.com; you may appeal a decision by replying to our response.
10. Children
The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected data from a person under 18, we will delete it promptly.
11. Security
All data is encrypted in transit (TLS) and at rest. Row-Level Security (RLS) is enforced at the database layer. Each user can only access their own records. We conduct regular security reviews and follow responsible disclosure practices.
12. Changes to This Policy
We may update this Policy. We will notify you by email at least 14 days before material changes take effect. Continued use after the effective date constitutes acceptance of the updated Policy.
13. Contact
Privacy questions: legal@inpsychnow.com
ASA Family Investments LLC (d/b/a InPsychNow) · Dallas, TX
https://inpsychnow.com