Privacy Policy
Last updated: 23 August 2026.
OSSEA is a menopause wellbeing company based in Australia. This policy covers every OSSEA website, programme, and micro-app we run now or later, including ossea.au, 3amsleep.ossea.au, 3am.ossea.au, and any other OSSEA site or app we add.
We handle personal information under the Australian Privacy Principles in the Privacy Act 1988 (Cth). This is how we collect, use, and look after it.
Who we are
OSSEA. Enquiries: hello@ossea.au. Support: the address on your emails (usually hello@ossea.au).
What we collect
We collect only what we need to run the product you use.
When you buy or join a programme we may collect:
- your email address
- your name if you give it at checkout
- that you paid, the product, the amount, and the payment reference (we do not store your card number; Stripe handles the card)
- the password you set, stored only as a one-way hash (we cannot read it back)
- sign-in sessions (these expire after about 30 days of inactivity)
- programme progress (for example days started or completed, and checklist ticks)
- activity needed to run the programme (for example that you opened a day, used Rescue, or signed in)
- first-party page views on our sales sites, with a small anonymous cookie we set ourselves (not Google Analytics)
Some programmes may let you write a short note in the product. Those notes stay in the product database so you can see them again. We do not use them for advertising. We do not put identifiable health notes in shared staff workspaces.
We do not ask for Medicare numbers, and we do not collect payment card numbers on our servers.
If you choose to write something about your sleep or health in a note field, treat that as information you volunteered. We still look after it with care.
Why we collect it
We use this information to:
- take your order and send access
- let you sign in on another phone
- keep your progress
- send transactional email (access, password, support replies)
- count our own traffic so we can see what pages are used
- keep the service secure (for example failed sign-in attempts)
- meet the law (for example tax records of a sale)
We do not sell your personal information. We do not use it to build an advertising profile. We do not send marketing email unless you have asked for it (for example an open-list). Transactional email about a product you bought is not marketing.
Who we share it with
We use a small number of companies to run the service. They only get what they need to do their job:
- Stripe, for payment
- Resend, for email delivery
- Vercel, to host the websites and apps
- Neon, to store the product database (our current database is in Sydney)
We may share information if the law requires it, or to protect someone from serious harm.
If OSSEA is sold or restructured, this information may transfer with the business, still under this policy or a notice we will send.
Overseas disclosure
Some of those companies store or process data outside Australia (for example Stripe and hosting). Where that happens, we take steps that are reasonable in the circumstances to keep the information protected. Our programme database is in Australia (Sydney) at the time this policy was written.
Security
We use HTTPS, hashed passwords, and access limits on founder tools. No system is perfect. If a breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner as the law requires.
How long we keep it
We keep account and progress data while you use the programme and for a reasonable time after, so you can come back and so we can resolve support or payment questions. We keep sale records as long as tax and consumer law require. We delete or de-identify information when we no longer need it, unless the law says we must keep it.
Access, correction, and deletion
You can ask what we hold, ask us to fix it, or ask us to close your account and delete what we do not need to keep. Write to hello@ossea.au from the email you used with us. We will respond within a reasonable time. We may need to keep a sale record.
Cookies
Sales pages may set a first-party cookie so we can count visits. The apps use a sign-in cookie so you stay signed in. You can block cookies in your browser; the site may then count you less accurately, and you may need to sign in more often.
Children
OSSEA is for adults. We do not knowingly collect information from children.
Complaints
Write to hello@ossea.au first. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
We may update this policy when we add a product or the law changes. The current version will always live at https://3amsleep.ossea.au/privacy and on each OSSEA app that links here. The date at the top is the last update.
Last updated: 23 August 2026.
OSSEA 3AM Sleep Program is educational. It is not medical care and it does not treat insomnia or other conditions. If you are worried about your health, speak with your doctor.