Privacy notice

Who we are

Transcendent Institute operates the Inner System Map and the Tree of Life tests (the Sephirot test and the Malkuth test). This notice covers all of them. Contact: info@transcendentinstitute.com.

What we process and why

Inner System Map, public mode: your answers are scored in your browser. When you give your name and email at the start, we email you your results as a PDF, keep a copy of your name, email, answers and results for 6 months, and send a copy to Transcendent Institute so the school can follow up if you ask. Only the institute's administrators can see the stored copy, and every time they open it is recorded. This is based on your explicit consent, which you can withdraw at any time using the deletion link in the email.

WhatsApp (optional, public mode): if you give a WhatsApp number and tick the WhatsApp box, we also send your results PDF to that number through Meta's WhatsApp Cloud API, keep the number with your stored copy for 6 months, and include it in the institute's copy so the school can reply to you on WhatsApp. The deletion link removes the number with everything else.

WhatsApp messages: if you write to the institute's WhatsApp number, we keep your messages, your WhatsApp profile name and our replies for 6 months so the institute's administrators can answer you. Only administrators can read them, and every time they open them is recorded. Photos, voice notes and files are not downloaded or kept; we keep only their type and caption. To have the conversation deleted sooner, write to info@transcendentinstitute.com and an administrator deletes it.

Inner System Map, cohort mode: your answers, results and any notes you choose to share are stored under your account and are visible to the named facilitators of your cohort, to support your work in the retreat. This is based on your explicit consent, recorded with its date and policy version. You can export or delete everything at any time from your data page.

Sephirot and Malkuth tests: you give your name and an email address, and we store them with your answers (each saved as a number), your language, the date and a random session identifier, so that we can email you your results as a PDF when you finish. We also look at combined answers, never individual ones, to understand how the questions behave. Your data is not sold and is not used for advertising or profiling.

Your browser keeps your name, email and answers in its local storage while you take a test. The Sephirot and Malkuth tests also set one cookie (NEXT_LOCALE, one year) to remember your language, and count visits with Vercel Web Analytics, which sets no cookies and is not linked to your answers.

Answers describe your inner life and may reveal information about mental health. We treat all of it, in every test, as special category data.

Emails and copies

Results emails go to the address you gave and contain your results and a PDF. Our email provider, Resend, keeps the content and delivery details of every email we send, including the attached PDF, for 30 days and then deletes them.

The institute also receives a copy. For the Inner System Map it is an English copy with your name, language, pattern and PDF (and your WhatsApp number if you gave one). For the Sephirot and Malkuth tests a copy may be sent to the practitioner who runs the test. These copies stay in the institute's mailbox until you ask us to delete them; when you do, we delete them there as well as from the database.

The email in your own mailbox is yours to keep or delete; we cannot delete it for you.

What we do not collect

No date of birth. The Inner System Map has no analytics cookies and keeps no IP addresses in its database. The Sephirot and Malkuth tests do not store or log IP addresses either. To stop abuse, every test counts requests per IP address in short-lived memory, for at most a day. Logs record job outcomes only, never answers or email addresses.

Retention

Inner System Map: public results 6 months, then deleted automatically. Cohort data: 12 months after the cohort end date unless the school sets otherwise, then deleted automatically. Account deletion removes everything immediately.

Sephirot and Malkuth tests: results are kept until you ask us to delete them; they are not deleted automatically.

Copies in the institute's mailbox: until you ask us to delete them. Email content at Resend: 30 days.

Records of which administrator opened which result, export or conversation (the audit log) are kept 12 months and then deleted automatically.

Where your data is

Inner System Map: all data is stored and processed in the European Union. Sub-processors: Vercel (hosting, Frankfurt), Neon (database and sign-in, Frankfurt), Resend (transactional email, EU), Upstash (rate limiting, EU), Meta Platforms (WhatsApp Cloud API, only if you use WhatsApp with us). Exception: when you use WhatsApp with us (results delivery or messages), Meta may process those messages, and any PDF, outside the EU.

Sephirot and Malkuth tests: the database is hosted in the United States (Neon on AWS, us-east-1), so if you are in Europe your answers are transferred outside the EU. Sub-processors for these tests: Vercel (hosting and cookie-free analytics), Neon (database) and Resend (email).

Who can see your data

Only authorised administrators of the institute can open individual results. For the Inner System Map, every time they open one is recorded. For the Sephirot and Malkuth tests, administrators use an internal dashboard protected by a password, which lists the names, emails and answers of both tests and can export them to a spreadsheet.

Your rights

Access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Write to info@transcendentinstitute.com. For the Inner System Map you can also use the deletion link in your results email and the self-service export and deletion in the app. Whatever the test, deletion covers the database record, the copies in the institute's mailbox and any WhatsApp conversation. You may complain to your data protection authority.

Age

The Inner System Map is for adults: you confirm you are 18 or older before starting. The Sephirot and Malkuth tests are also for adults but do not check your age.

Campaign source and partner links

DRAFT, pending legal review.

If you arrive through a link that names a campaign or a partner (for example a link with ?utm_source= or ?ref= in it), we keep its campaign source, medium, campaign name and partner code in your browser for up to 30 days once you start the map, and store them with your results if you ask us to email them. They are also included in the copy of your results sent to Transcendent Institute, so the school can see where your request came from; a partner code is included only if it belongs to a registered partner. We use them only to count which channels and partners bring people to the map and to know where a request came from. The copy stored with your results is deleted together with them; the copy in the institute's inbox is not removed by the deletion link, but you can ask the institute to delete it. They never contain your answers or your results.

We count visits to the public pages of the map (landing page, start, questions, results and privacy pages) and a few steps of the map (landing page viewed, map started, halfway through the statements, map completed, results emailed, program or live-session link clicked) with Vercel Web Analytics, which sets no cookies. A visit records the page address, keeping only the campaign parameters of the link, plus the referring site and general information such as country, browser, operating system and device type. To tell visits apart within a day, Vercel derives an identifier from the request that is discarded after 24 hours. Each step records the language of the page; a link click also records which link it was. Partner codes are not sent to Vercel; they are counted only in our own database (see below). None of it records your name, your email address, your answers or your results. Pages for program participants, facilitators and administrators are not counted.

We also keep, in our own database, a daily count of how many maps were started and completed for each partner code; maps started without a partner code are counted together. These counts contain no information about any person.

Each result also records which edition of the map (country and language) it came from, so the institute can see where the map is used.