Trust & Privacy

Account security

Sign-in is handled by our managed authentication provider. Passwords are never stored in plain text, and sessions are issued as short-lived tokens that refresh automatically.

Payments

All purchases and payouts to healing practitioners and authors run through Stripe. They keep 90% of each sale, less payment-processing fees, while Cosmic Ocean's 10% supports operating and promotional costs. Tips are not subject to Cosmic Ocean's 10% share. Cosmic Ocean never sees or stores your full card number — Stripe handles card data under PCI-DSS Level 1 compliance. Webhook events are verified by signature before any order is recorded.

Your data

• Row-level security is enforced on every database table — you can only read and write your own records.
• Digital product downloads and video links are only accessible to buyers who have actually purchased the product.
• Creator contact details are only revealed according to each creator's chosen visibility setting.
• Uploaded files (deck covers, card art, audio) are stored in private buckets and served through signed URLs.

Content, healing practitioners & authors

Healing practitioners and authors retain ownership of their artwork and recordings. Cosmic Ocean only stores and distributes what they upload, and they can unpublish or delete their work from their Studio.

Getting in touch

Questions about your account, a purchase, or a privacy request? Reach out via the creator or support channels listed in your dashboard.