Privacy Policy
Last updated: [DATE]
1. Introduction
This Privacy Policy explains what personal information Lotus Compass collects, how it is used, and what choices you have. It applies to the Lotus Compass web application only.
This policy describes the product as it currently works. If a feature is not mentioned here, it does not currently exist in the product.
2. Who Operates Lotus Compass
Lotus Compass is operated by:
Legal entity: [LEGAL ENTITY]
Country: [COUNTRY]
Contact email: [CONTACT EMAIL]
3. Information We Collect
When you create an account, we collect:
- Full name
- Email address
- Password (see Section 5 — Authentication, for how this is protected)
- Date of birth
- Location
- Professional area or industry
We also automatically record:
- The date and time your account was created
- The date and time of your most recent login
- The date and time of your most recent activity in the app
When you use the product's core features, we collect:
- Your answers to the Career Wheel assessment (ratings from 1 to 10 across eight areas: purpose, visibility, confidence, leadership, networking, growth, wellbeing, and financial progress) and a calculated overall score
- Your weekly reflection answers (free-text answers to four prompts: what moved forward, what felt challenging, what you learned, and your focus for next week)
- The development Track(s) you choose and your progress within them
- The individual actions you select and mark as completed within a Track
If you subscribe to a paid plan, we collect subscription and billing status information. See Section 6 — Payments for details.
4. How We Use Your Information
| Information | Purpose |
|---|---|
| Full name and email address | Identify your account and let you log in |
| Date of birth | Personalise your experience and confirm you meet the minimum age requirement to use Lotus Compass |
| Location and professional area | Collected as part of your account profile |
| Career Wheel answers, reflections, Track selections, and action progress | Provide the core features of the product — your assessment results, your recommended focus areas, and your progress tracking |
| Subscription and billing status information | Manage your access to paid features |
| Account timestamps (created, last login, last activity) | Operate basic account and product functionality |
We do not use your information for advertising.
5. Authentication
- Your password is never stored in plain text. It is transformed using a cryptographic hashing function before being stored, and only the resulting hash is kept.
- We use a session, managed through a cookie, to keep you logged in while you use the app. This cookie cannot be read by JavaScript running in your browser, is restricted so it is not sent along with most cross-site requests, and is marked as security-restricted (HTTPS-only) when the app is running in production.
- We do not currently offer a "remember me" option — your session is a standard browser session and does not persist as a long-lived login beyond that.
- We do not currently offer a self-service way to reset a forgotten password. If you are locked out of your account, contact us at [CONTACT EMAIL].
- We do not currently offer a way to change your password or email address from within the app.
6. Payments
If you subscribe to a paid plan, payment is handled by Stripe, our payment processor.
What Stripe processes. When you subscribe, we send Stripe your email address and an internal reference to your account. You enter your payment details (such as your card number) directly on a page hosted by Stripe — this information is never sent to or stored by Lotus Compass.
What Lotus Compass stores. We store a Stripe customer reference, a Stripe subscription reference, your plan name, your subscription status (for example, active or cancelled), and the start and end dates of your subscription period. We do not store your card number, card expiry date, security code, or billing address — that information stays with Stripe.
7. Third Parties
We share or expose information to the following third parties:
- Stripe — processes your payment and subscription information, as described in Section 6.
- A charting library — a third-party code library used to draw the visual chart of your Career Wheel results.
- Our cloud hosting provider — provides the infrastructure the application and database run on.
We do not use any advertising, marketing, or analytics third parties. We do not share your information with any other party beyond those listed above.
8. Data Retention
Lotus Compass does not currently have a defined data retention schedule. No automatic process exists to delete or archive your information.
9. Your Rights
Today, Lotus Compass supports the following account actions directly in the app:
- Creating an account
- Logging in and logging out
- Viewing your own Career Wheel history, reflections, and Track progress
We do not currently offer the following as self-service features within the app:
- Editing your profile information after registration
- Changing your password or email address
- Exporting your data
- Deleting your account
10. Security
We take the following technical measures to protect your information:
- Passwords are hashed before storage and are never stored in plain text (Section 5).
- Your login session cookie is protected against being read by page scripts and is restricted from being sent with most cross-site requests.
- Forms that change your data are protected against cross-site request forgery.
- Payment card details are never handled or stored by Lotus Compass directly — they are entered and stored only with Stripe (Section 6).
11. Changes to This Policy
We may update this Privacy Policy from time to time as the product changes. We will update the "Last updated" date at the top of this page when we do.
12. Contact
If you have questions about this Privacy Policy or your information, contact us at:
Email: [CONTACT EMAIL]
Legal entity: [LEGAL ENTITY]
Address: [ADDRESS]