Purpose of this Policy

This Privacy Policy explains, in plain English:

1. Who operates Eastern OS and how to contact us about privacy;
2. What information we collect on our servers / through accounts and billing, versus what stays local to your browser;
3. How dialogue / chat content and in-browser deliverables are stored and what can make them disappear;
4. What leaves your device transiently so AI-assisted responses can be generated;
5. How payment / PASS / subscription data is handled;
6. How email is used (receipts, optional reminders, user-initiated export)—and why receipt email is not chat backup;
7. Retention, deletion, and your access / export / deletion rights;
8. Conservative regional disclosures (including CCPA- and GDPR-style themes) without claiming certifications we have not obtained;
9. Children (18+), security posture, international transfers, changes, and contact.

Related policies you should also read:

• Terms of Service
• Disclaimer & Sovereignty Architecture
• Refund Policy
• Cookie & Local Storage Policy / Cookie Settings

Commercial pricing, PASS entitlements, and billing mechanics are governed by the Terms of Service and live Pricing materials at purchase—not by this Privacy Policy. This page may mention PASS packaging only for privacy context.

By accessing, browsing, creating an account, purchasing a PASS, starting a dialogue, or otherwise using Eastern OS, you acknowledge this Privacy Policy. If you do not agree, do not use the Service.

1. Who we are (controller / operator)

1.1 Operator identity

In this Policy, “Eastern OS,” “we,” “us,” and “our” mean the operator of easternos.com / the Eastern OS Service as identified on this site and in the Terms of Service.

1.2 Privacy contact

For formal access, deletion, or similar requests, email privacy@easternos.com. A useful subject convention is “Data Sovereignty Request” (you may also use “Privacy Request,” “CCPA Request,” or “GDPR Request”).

1.3 What the product is (privacy-relevant framing)

Eastern OS (easternos.com) is a unified multi-turn decision dialogue product.

For product clarity (without replacing Terms / Pricing):

1 PASS is intended to unlock, as a bundled entitlement provided together:

1. A multi-turn decision dialogue;
2. Main path + backup framing;
3. A report (structured written deliverable); and
4. 30-day daily same-line reminders associated with that line of work.

Illustrative commercial awareness only (not a price schedule; confirm live Pricing / checkout):

• On the order of USD $19.99 per 1 PASS;
• Subscription on the order of USD $59.99 per month for 5 PASS, with a new-user first-month +2 PASS promotion when that promotion is active;
• Where multiple PASS balance types exist (for example, carryover, subscription allotment, and separately purchased / flex PASS), product spend order follows then-current Pricing / FAQ / in-product ledger rules. Launch posture is carryover → subscription → purchased / flex PASS, unless a then-current UI / ledger rule expressly states otherwise. Confirm live ledger behavior in-product.

Eastern OS is not fortune-telling, destiny prediction, medical care, legal advice, or financial advice. Crisis resources for US/CA include 988. See the Disclaimer.

2. Privacy architecture in one page

Honest boundary: “Browser-local chat” means Eastern OS does not treat your dialogue history as a syncable cloud backup attached to your account. It does not mean “nothing ever leaves your device.” Generation requires sending inputs to processing pipelines.

3. How chat stays local (and what can erase it)

3.1 Browser-local by design

Under the current product design:

• Dialogue / chat content and related in-browser deliverables are intended to remain local to the browser / device session context in which you use them;
• Content is not described here as synced across devices or browsers via your Eastern OS account as a chat backup;
• Accounts hold PASS + billing / subscription state—not a primary cloud archive of full chat history.

You (or your browser tools) can typically inspect client-side storage via browser developer tools (for example, Application → IndexedDB / Local Storage) for the easternos.com origin. Exact store names may change with product versions.

3.2 What can make local content disappear permanently

Because chat/deliverables are browser-local, they may be permanently lost if, for example, you:

• Clear site data / cache / cookies / IndexedDB / local storage;
• Use or close an Incognito / Private window;
• Switch browsers or devices;
• Uninstall a PWA / clear app storage;
• Use aggressive privacy extensions that wipe storage;
• Use another browser profile.

Eastern OS does not promise server-side recovery of lost local chat logs. Commercial consequences of local data loss are addressed in the Refund Policy and Terms (loss of local content is not, by itself, a basis for PASS refunds except as those policies separately allow for verified technical delivery failures).

3.3 Export / email for your retention

Where the product offers export or email of reports or companion materials, that is a user-initiated retention / delivery feature—not an automatic cloud chat backup of the entire dialogue.

Receipt email ≠ chat backup. A payment receipt, invoice, or billing email does not store or restore your dialogue history.

Optional reminder email (if you opt in) delivers reminder content under the companion / reminder rules—it is not a promise that the full chat lives in your inbox forever.

3.4 Local encryption claims (accuracy over marketing)

This Privacy Policy does not warrant AES-256 (or any specific cipher) as a current, universal property of all local stores. The accurate product statement is: chat/deliverables are intended to be browser-local. Whether a particular store uses client-side encryption depends on the shipped implementation. Security of data on your device also depends on your device, browser, OS account controls, malware posture, and who can unlock your machine.

4. What we collect

We distinguish (A) data associated with accounts, PASS, billing, and service operation, from (B) browser-local chat content that we do not operate as a cloud backup.

4.1 Account and authentication data

Where accounts are used for PASS purchase / subscription management:

• Email address (and related authentication identifiers);
• Authentication session cookies / tokens needed to keep you signed in;
• Account profile fields you choose to provide (minimal by design);
• PASS balance / entitlement ledgers and subscription status linked to the account.

Accounts are used for PASS and billing—not as a cloud chat sync product. Creating or signing into an account does not create a cloud archive of your chat history.

4.2 Billing, payment, and PASS records

• Transaction amounts, currency, timestamps;
• Product / PASS SKU or entitlement identifiers;
• Subscription status, renewal periods, cancellation state;
• Payment-processor session / customer / invoice references (as provided by the processor);
• Limited fraud-prevention / risk signals the processor or our systems require.

We do not intend to store raw full card Primary Account Numbers on Eastern OS systems. Card data is handled by the payment processor / merchant-of-record stack actually integrated at launch (see §7).

4.3 Email and communication data

• Email for receipts / invoices when provided at checkout or via the processor;
• Email for optional reminder / companion delivery if you opt in;
• Email content you ask us to send when you use export / email features;
• Support emails you send to privacy@ / support@ / legal@.

4.4 Technical, security, and aggregated usage data

• Approximate network metadata that hosting / edge providers may log (e.g., IP address or ranges, user-agent, request URLs, timestamps) for security, abuse prevention, reliability, and debugging;
• High-level country / region derived from GeoIP-style lookups where used for localization, fraud, or compliance—not precise GPS tracking as a product feature;
• Device or browser identifiers / hashes where used to support session continuity, entitlement checks, or fraud prevention;
• Aggregated, de-identified or anonymous volumetric stats (e.g., traffic counters) not used to rebuild individual chat histories.

4.5 Cookies and similar technologies

We use cookies and similar technologies (including local storage) for operation, session continuity, preferences, security, and billing flows. Details and preference controls live in the Cookie & Local Storage Policy. This Privacy Policy incorporates that page by cross-reference rather than duplicating every cookie table row.

We do not describe the Service as selling personal information to data brokers or running cross-site advertising pixel programs as a business model. If tooling changes, this Policy and the Cookie page must be updated together.

4.6 Content you type into the dialogue (local + transient processing)

• Text and structured inputs you enter in the dialogue;
• Generated replies, path framings, reports, and reminders as stored in browser-local stores;
• The same (or derived) content as transiently transmitted for AI generation (§6).

We do not claim that Eastern OS operators routinely read your private dialogues as a default operational practice. Abuse, security, legal process, or support troubleshooting may require limited access to server-side logs or account records that exist—not to a cloud copy of chat we do not keep as backup.

4.7 What we explicitly try not to collect as product defaults

Subject to what you voluntarily type into chats or send by email:

• We do not require your legal name, street address, or phone number as a condition of reflective dialogue use (payment processors may collect billing details under their own policies);
• We do not seek precise GPS continuous tracking as a core Eastern OS product feature for the unified dialogue;
• We do not operate a behavioral advertising network that monetizes your chat content;
• We do not treat chat history as a sellable data product.

You control what you type. Do not enter secrets you are unwilling to transmit for AI generation (passwords, full government ID numbers, others’ private data, etc.).

5. Product privacy boundaries

Eastern OS is a unified multi-turn decision dialogue. It is not sold as fortune-telling, destiny prediction, or metaphysics forecasting, and this Policy does not treat “birth & metaphysics inputs” as a special product data category.

Accounts are part of PASS / billing posture. “Browser-local chat” means we do not offer cloud chat backup; it does not mean that nothing ever leaves your device for AI generation.

6. What leaves your device for AI generation

6.1 Why transmission happens

To generate AI-assisted dialogues, reports, path framings, and related outputs, your inputs and necessary contextual payloads are sent over HTTPS to Eastern OS application backends and/or third-party model providers.

That transient processing is required for the Service to function. It is not described here as Eastern OS maintaining a permanent, user-reopenable cloud archive of your full chat history.

6.2 Processors

The following providers are used (or may be used) in connection with the Service. The live inventory can change; where a provider’s role ends, we update this Policy.

Additional processors may appear (analytics, error monitoring, etc.). If added, we will update this Policy and Cookie disclosures.

6.3 Training / retention claims (conservative)

We configure providers, where available, so that customer content is not used to train public models and is not retained longer than needed for generation / abuse safety—to the extent those configurations are actually enabled and contractually supported.

We do not promise that every subprocess or future provider will have identical zero-data-retention terms. Provider policies and abuse-review exceptions can change. Prompt/response content that you voluntarily export or email is outside “local-only” expectations once it leaves your browser under your instruction.

7. PASS, billing, and payment processing

7.1 What billing data is for

We use payment and PASS records to:

• Fulfill PASS entitlements and subscription allotments;
• Apply then-current spend order across PASS balance types (launch posture carryover → subscription → purchased / flex PASS, unless a then-current UI / ledger rule expressly states otherwise; confirm live ledger behavior in-product);
• Provide receipts / invoices;
• Prevent fraud and abuse;
• Meet tax, accounting, and legal recordkeeping obligations;
• Handle refunds / disputes per the Refund Policy and processor rules.

7.2 Merchant of Record / payment stack

Payments are processed through the payment processor and/or merchant-of-record stack actually integrated at launch (secure hosted checkout or equivalent).

• Eastern OS does not intend to store raw full card Primary Account Numbers on its own servers.
• Your bank / wallet statement or receipt may show the processor or merchant of record as the seller of record.
• The exact name shown at live checkout and on your receipt controls for that transaction.
• Those providers’ own privacy policies apply to data they collect as independent controllers or as processors, depending on the arrangement.

7.3 Unused PASS after cancel / period end

Unused PASS expiry and related ledger rules follow the Terms of Service and then-current Pricing / ledger rules. Privacy retention of ledger rows follows those commercial rules.

7.4 Pricing cross-reference only

Illustrative figures (~$19.99 / 1 PASS; ~$59.99/mo · 5 PASS; new-user first month +2 when active) are not a price list in this Policy. Live Pricing / Terms / checkout control.

8. Email: receipts, optional reminders, export

We do not use your email for unsolicited brokered marketing lists. Service, billing, security, and policy notices may still be sent where appropriate to operate the account or meet legal duties.

Opt-out: use unsubscribe links where provided, reminder settings in-product (when available), or email privacy@easternos.com / support@easternos.com. Transactional receipts and legally required notices may still be sent when necessary.

9. How we use information

We use personal information to:

1. Provide, maintain, and improve the unified decision-dialogue Service;
2. Authenticate accounts and protect against fraud / abuse;
3. Process payments and manage PASS / subscriptions;
4. Generate AI-assisted outputs you request;
5. Send receipts, optional reminders, and user-requested exports;
6. Respond to support and privacy requests;
7. Comply with law, enforce Terms, and protect rights, safety, and security;
8. Produce aggregated statistics that do not re-identify your chat history.

We do not sell your personal information as a business model in the ordinary consumer sense of selling lists to data brokers. “Share” for CCPA/CPRA purposes is addressed conservatively in §11. If our practices change, we will update this Policy.

We do not use your dialogues to train our own public foundation models. Third-party model training is governed by provider contracts/settings (§6.3).

10. Retention

Deletion of local chat is under your control on-device. Deletion of server-side account/billing records is requested via privacy@easternos.com and may be limited where law requires retention (e.g., payment records).

11. Your rights and choices

11.1 Controls you already have

• Clear browser site data / use in-app wipe controls where offered (e.g., “End & Wipe” style actions if present in the then-current UI);
• Export or email content when the product offers those features;
• Cancel subscription via the billing portal / flows described in Terms (or contact support@);
• Opt out of optional reminder email where offered;
• Stop using the Service.

11.2 Access, correction, deletion, export (server-side)

Subject to verification and applicable law, you may request:

• Access to personal information we hold about your account on our systems;
• Correction of inaccurate account/billing personal information;
• Deletion of personal information we hold, subject to legal retention exceptions (especially payment/tax records);
• Export / portability of account-held personal information we can reasonably assemble (note: we generally cannot re-export chat content we never stored as cloud backup—export local content from your browser features where available).

Email privacy@easternos.com. We may need to verify control of the account/email before acting. We will respond within timeframes required by applicable law (and otherwise aim for a reasonable period).

11.3 California / CCPA–CPRA style disclosures

If you are a California resident, applicable law may provide rights to know/access, delete, correct, and to non-discrimination for exercising rights, and rights related to “sale” or “sharing” for cross-context behavioral advertising.

Our posture:

• We do not sell personal information for money to data brokers as a business model;
• We do not intentionally operate a cross-context behavioral advertising “share” program as the core Service;
• Service providers / processors receive data only to run hosting, auth, AI generation, email, and payments.

To exercise California rights, email privacy@easternos.com with subject “CCPA Request” (or “Data Sovereignty Request”). We do not charge discriminatory prices for exercising privacy rights; PASS pricing is commercial product pricing, not a privacy penalty.

We do not claim CCPA “certification,” official seal, or completed regulatory audit on this page.

11.4 EEA / UK GDPR-style disclosures

If GDPR/UK GDPR applies to you, you may have rights of access, rectification, erasure, restriction, objection, and portability, and the right to lodge a complaint with a supervisory authority.

Possible legal bases (listed for transparency):

• Contract — providing the Service you request (account, PASS fulfillment, generation you initiate);
• Legitimate interests — security, fraud prevention, service improvement via aggregated metrics, limited logs;
• Legal obligation — tax and accounting retention;
• Consent — where we rely on consent (e.g., certain optional emails or non-essential cookies), which you may withdraw.

We do not claim that Eastern OS has appointed an EU representative, completed a Schrems II transfer impact assessment package, or obtained specific ISO/SOC certifications unless those are separately documented. Cross-border processing is described in §13.

Contact privacy@easternos.com for GDPR-style requests.

11.5 Other regions

Residents of other jurisdictions may have analogous rights under local law. Contact privacy@easternos.com; we will honor mandatory rights that apply to our processing.

12. Children (18+)

Eastern OS is intended exclusively for adults aged 18 or older.

We do not knowingly collect personal information from children under 18 for PASS purchase or account use. If you believe a minor has provided personal information, contact privacy@easternos.com and we will take reasonable steps to delete server-side personal data associated with that use, consistent with law and this Policy.

Age representations at account creation / purchase are described further in the Terms and Disclaimer.

13. International transfers

Eastern OS may be operated from, and use infrastructure located in, multiple countries. Personal information may therefore be processed in countries that may have different data-protection laws than your home jurisdiction.

Where applicable law requires specific transfer mechanisms (for example, standard contractual clauses or other safeguards), we will implement them as appropriate for the operator of the Service and the processors then in use.

14. Security (no overclaim)

We take reasonable administrative, technical, and organizational measures appropriate to a software service of this type, including:

• HTTPS / TLS for data in transit to our services;
• Access controls for server-side systems;
• Reliance on reputable infrastructure and payment providers for card handling;
• Browser-local storage of chat/deliverables so Eastern OS does not hold a cloud chat backup to steal in a server breach of chat archives we do not keep.

No method of transmission or storage is 100% secure. We do not warrant:

• Absolute immunity from breach, misuse, or interception;
• That AES-256 applies universally to all local stores (see §3.4);
• That third-party processors will never experience incidents;
• That local device compromise cannot expose browser-stored content.

Report suspected security issues affecting personal data to privacy@easternos.com or legal@easternos.com.

15. Third-party links and processor policies

The Service may link to third-party sites or checkout pages. Their privacy practices are governed by their own policies. Review processor policies (payment, AI, hosting, email) when you use those flows.

16. Changes to this Privacy Policy

We may revise this Policy to reflect product, vendor, legal, or operational changes. The Last updated date at the top marks the current version.

Material updates may be surfaced via in-app notice, banner, or entry acknowledgment where implemented. Continued use after an update is posted may be treated as acceptance under the Terms. Where law requires fresh consent, we will seek it.

17. Contact

Questions about this Policy: email privacy@easternos.com. We read privacy requests.

18. Relationship to other legal pages

If a technical privacy detail here conflicts with the Disclaimer’s high-level local-session summary, prefer this Privacy Policy—and revise the Disclaimer if needed.

19. Acknowledgment summary

By using Eastern OS, you acknowledge that:

• Chat/deliverables are browser-local with real loss risk across browsers, Incognito, and cache clears;
• Accounts (where used) hold PASS / billing, not cloud chat backup;
• AI generation requires transmitting inputs to processors;
• Receipt email ≠ chat backup;
• You are 18+;
• English governs this Policy.