Legal
Privacy Policy
Effective October 14, 2026
Who we are
Fishpole is run by Regeneprise LLC DBA Cosmic Career Clarity, 7090 N Oracle Rd Ste 178 PMB 2014, Tucson, Arizona 85704. We are the business that decides how your personal information is used. This page explains what we collect, why, who helps us handle it, how long we keep it, and what you can ask us to do with it.
Write to us at support@fishpole.me.
What we collect
We group what we collect by the categories California law uses. Each one says what falls inside it.
Identifiers
Your name, email address and IP address, plus device and browser details your browser sends. Names and IP addresses are stored as encrypted values or keyed hashes. The plaintext copies that existed before this policy were cleared on 2026-10-14, and the now-empty database columns are removed in a later maintenance release.
Commercial information
What you bought and what you can access because of it. Card details go straight to Stripe and never reach our servers.
Internet activity
Pages you view and quiz events, collected only when you allow Analytics cookies.
Customer records and professional information
Your business profile, founding details and quiz answers, which you give us so we can tailor what you receive.
Birth data
The date, time and place of birth you enter to calculate a chart.
Chat and generated content
Your messages to the AI coach and the reports, plans and other items we generate and save for you.
Inferences
Chart interpretations and the archetype and profile results we draw from what you gave us.
Geolocation
The place you type in, such as a birth city. We do not read your device location.
Sensitive personal information
Account login credentials only. We do not use them to infer anything about you.
We collect this information from you, from Stripe when you pay, and automatically from your browser. Anything you confide to us in a chat, a form or an email is treated as personal data and handled under this policy.
Why we use it
We need a lawful reason to use your information. Ours are these:
- Contract: to deliver what you bought, run your account and take payment.
- Consent: for marketing email and for Analytics and Marketing cookies. You can withdraw it at any time.
- Legitimate interest: to keep the service secure, prevent fraud and improve what we offer.
- Legal obligation: to keep tax and payment records.
Who handles it for us
These providers process information on our behalf. Each one receives only what it needs for its job.
- Stripe: payments.
- Backblaze B2: encrypted offsite backups, in the United States.
- RackNerd: hosting, in Los Angeles, California.
- Hetzner: a warm standby server, in Helsinki, Finland.
- Hostinger: hosting for the Cosmic Career Clarity WordPress site.
- Anthropic, OpenAI and Google: AI model providers that receive the content you ask us to generate from.
- Email providers: Kit, our self-hosted email sending platform, the SMTP2GO transactional relay, and a Titan mailbox.
- ntfy.sh: operational alerts that carry request ids and counts, never your email address.
- Google Drive: document storage and delivery.
- OpenStreetMap Nominatim: place lookup when we calculate a chart.
- Google Tag Manager and Google Analytics, the Meta pixel and Plerdy heatmaps, on our WordPress site at cosmiccareerclarity.com only, and only after you consent there
We do not sell your information
We do not sell personal information. We share it for advertising across other sites only on cosmiccareerclarity.com, and only after you consent.
How long we keep it
This table is the schedule we run. When a period ends, the data is deleted.
| Data | Where | How long |
|---|---|---|
| An account you ask us to delete | Live system | We confirm the request by email, wait a 7-day cancel window, then permanently delete your account and every record linked to it. |
| Deletion record | Live system | A short record that the deletion happened is kept for 90 days. It holds a one-way keyed hash of your email address, plus the Stripe customer id and course-platform user id needed to keep those outside systems erased and to refuse stale events. |
| Deletion ledger | Live system and backups | A hash-only entry (no name, no email, no content) is kept indefinitely, so an erased account stays erased after any restore. |
| Deleted account data inside backups | Backups | Gone when the last backup holding it expires, at most 90 days. Backups are never used to restore an individual's account. |
| Local daily database backups | Backups | 35 days |
| Local weekly database backups | Backups | 90 days |
| Encrypted offsite backup archives | Backups | 80 days: hidden after 35 days, deleted 45 days later. A weekly offsite copy is hidden after 45 days and deleted 45 days later, so it is gone within 90 days. |
| Pre-migration and protect exports | Backups | 90 days |
| Free account with no sign-in | Live system | We email a warning at 18 months without a sign-in and delete the account at 24 months. |
| Paid account after you cancel | Live system | The account stays until you delete it or it goes inactive. Your access ends as set out in the Terms. |
| Leads and quiz submissions with no account | Live system | 24 months from capture, then deleted. |
| Analytics events, IP address hashes and device records | Live system | 90 days, then deleted. |
| Sign-in sessions and password-reset links | Live system | Until they expire, cleared by a daily sweep. |
| Invoices and payment records | Stripe | 7 years, kept by Stripe for tax. We keep only Stripe reference numbers and your entitlement history. |
| WooCommerce order records on the CCC site | WordPress (cosmiccareerclarity.com) | Kept as tax records (7 years). |
Copies held in backups follow the same schedule. The backup rules are set out under How we protect your information.
Your rights and how to use them
You can ask us to tell you what we hold about you, to delete it, or to correct it. You can ask for a copy you can take elsewhere. You can opt out of sale or sharing and ask us to limit how we use your information. We will not treat you differently for using any of these rights.
Make a request on the privacy request page or write to support@fishpole.me. Before we act, we email the address on the account so you can confirm the request is yours.
We acknowledge a request within 10 business days and complete it within 45 days. If we need more time, we can extend that once, and we will tell you why.
Global Privacy Control
If your browser sends a Global Privacy Control signal, we honour it automatically. We treat it as a request to opt out of sale and sharing, and Marketing stays off.
Cookies and your choices
When you first visit, a banner asks what you allow. We remember your answer in a cookie named fp_consent, set on .fishpole.me, which lasts 12 months. It records your choices for three categories: Essential, Analytics and Marketing. Essential cookies keep you signed in and keep the site secure, and they are always on. Analytics and Marketing stay off until you turn them on, and Reject carries the same weight as Accept on the banner.
You can change your mind at any time. Every page footer has a Cookie settings link and a Do Not Sell or Share My Personal Information link. Either one reopens your choices.
How we protect your information
Your birth and founding data, business profile, quiz answers, chart inferences, saved generations and chat are encrypted at rest with AES-256-GCM. Names and IP addresses are stored as encrypted values or keyed hashes. The plaintext copies that existed before this policy were cleared on 2026-10-14, and the now-empty database columns are removed in a later maintenance release. Our server request log keeps the IP address for 30 days for security, then deletes it. Local and offsite backups are encrypted.
Deleted data may persist in encrypted backups for up to 90 days and is never used to restore an individual's account. Backup archives created before our lifecycle rules took effect are retired on the same schedule.
Children
Our services are for adults. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.
International transfers
We are based in the United States, and our servers and providers sit in the United States and Finland. If you use our services from elsewhere, your information moves to those countries.
If you are in the European Economic Area or the United Kingdom, you also have the right to restrict processing and to complain to your local data protection authority.
If something goes wrong
If a breach puts your personal information at risk, we will tell you without undue delay. Where the law requires it, we notify the authorities within 72 hours.
Terms
The terms every purchase is made under live on the Terms of Service page.
Contact
Questions about this policy go to support@fishpole.me.
Effective date and changes
This policy takes effect on October 14, 2026. When we change it, we post the new version here and add a line to the list below.
- October 14, 2026: Rewrote the policy. Added what we collect by category, the retention schedule, your rights and how long we take to answer them, consent choices, and the providers we use.