Privacy Policy

Last updated: November 24, 2025

This Privacy Policy explains how nftstory ltd. ("we", "us"), based in Quebec, Canada and producer of the PolyAstrology product, collects, uses, and shares information when you use our website and services (the "Services"). nftstory ltd. is the controller of your personal information for the Services. Our mailing address is 184 Rue de Normanville, Montréal QC H2S 2B2, Canada. By using the Services, you agree to the practices described here.

1. Information We Collect

• Account and contact details: email address(es) to deliver your report, provide any audio reading, and communicate with you about your order or the Services.
• Report inputs: first name, date of birth, time of birth (or indication that the birth time is unknown), and place of birth. If you send a gift, we collect the recipient's email address you provide and information about whether the report is a gift.
• Derived data: geographic coordinates and time zone derived from the place of birth, and other derived astrology data needed to generate your report.
• Transactional data: order identifiers, friend-code or coupon usage, purchase status, timestamps, and delivery status of reports and any related audio content. We also keep a record of which report variant or package you selected (for example, whether you purchased a Podcast Reading).
• Usage data and analytics: pages viewed, events (for example, progress through steps in the report flow, button clicks, and friend-code usage), device/browser information, and IP address collected via analytics tools to help us understand usage and improve the product.
• Feedback: any comments or messages you send through in-product forms (such as the feedback widget), including your name, email address, and the URL where feedback was submitted.

We do not intentionally collect sensitive government identifiers (such as social insurance or national ID numbers) or payment card numbers on our own servers. Payment information is handled by third-party payment processors.

2. How We Use Information

We use the information we collect for purposes such as:

• Provide, personalize, and deliver your astrology report and any associated audio reading, including generating astrology data from your inputs.
• Send emails about your order, delivery, or service updates (for example, confirmation emails, links to access your report, and notifications about audio preparation).
• Process payments via third-party payment processors and detect or prevent fraud or abuse.
• Operate, maintain, and improve the Services and user experience, including understanding how users move through the report flow and which features are used.
• Provide customer support and respond to your requests and feedback.
• Communicate with you about important changes to the Services or this Privacy Policy.
• Comply with legal obligations, enforce our Terms of Service, and protect the rights, property, and safety of users, us, or others.

3. Legal Bases (EEA/UK)

Where applicable (for example, if you are in the EEA or UK), we process personal data under the following legal bases:

• Contract performance: to provide the report or audio reading you request and to process your order.
• Legitimate interests: to perform basic analytics, improve the product, keep our Services secure, prevent fraud, and communicate with you about your use of the Services.
• Consent: where required by law, for example, for certain cookies or analytics and for sending marketing communications. You can withdraw consent at any time as described below.

4. Cookies and Analytics

We use cookies and similar technologies to operate the site (for example, to remember your progress in the report flow) and for analytics.

We currently use PostHog for product analytics. PostHog may collect usage events (such as page views and button clicks), device and browser information, and IP address to help us understand how the product is used and to debug issues. PostHog processes this information on our behalf subject to its own terms and privacy practices.

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality. Where required by law, we will obtain your consent before setting non-essential cookies or similar technologies.

5. Sharing of Information

We share personal information in the following ways:

• Service providers: with vendors that help us with hosting, storage and delivery of content (including DigitalOcean Spaces or other cloud storage, CDNs, and email providers), analytics (including PostHog), customer support, and payments. These providers process data on our behalf under appropriate safeguards.
• Gift delivery: if you specify recipient information for a gift, we will deliver the report to the email addresses you indicate and may include information needed for the recipient to access their report.
• Legal and safety: where we believe we are required to do so by law, regulation, legal process, or governmental request, or where we believe it is necessary to protect the rights, safety, and integrity of our Services, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business. Where we do so, we will take steps to ensure any successor respects this Privacy Policy or provides notice of changes.

We do not sell your personal information.

6. Data Retention

We retain personal data for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce agreements.

Report artifacts are kept available for at least 30 days so you can re-access your purchase; we may retain reports and associated metadata for longer where doing so is necessary for our legitimate business purposes (for example, for troubleshooting, fraud prevention, or accounting), consistent with applicable law. Operational logs, analytics data, and backups may persist longer as permitted by law and our internal policies.

You can request deletion of your personal information as described below. When we delete data, we may still retain limited information where required or permitted by law (for example, tax or accounting records).

7. Your Rights and Choices

Depending on your location, you may have certain rights over your personal information, including the right to:

• Access, correct, or delete your personal information, subject to applicable law.
• Object to or restrict certain processing, or request portability of your data (for example, EEA/UK residents, where applicable).
• Withdraw consent where we rely on consent (for example, for certain analytics or marketing).
• Lodge a complaint with a data-protection authority if you believe our processing violates applicable law.

You can exercise these rights by contacting us using the details below. We may need to verify your identity before fulfilling your request.

You can also control cookies through your browser settings and may disable certain analytics via opt-out mechanisms where available.

8. Children's Privacy

The Services are not directed to children under the age where parental consent is required by law (for example, 13 in the U.S. or 16 in parts of the EEA). We do not knowingly collect personal data from such children. If you believe a child has provided personal data, please contact us so we can delete it and take any other appropriate steps.

9. Security

We use reasonable technical and organizational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.

10. International Transfers

We may process and store information in Canada and other countries outside of your state, province, or country, including where our service providers are located. Where required, we implement appropriate safeguards for cross-border transfers, such as contractual protections.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, for example by updating the date at the top of this page, posting a notice within the Services, or sending an email where appropriate. Your continued use of the Services after any changes take effect means you accept the updated Privacy Policy.

12. Contact

If you have questions, concerns, or privacy requests, contact:

nftstory ltd. (controller) 184 Rue de Normanville Montréal QC H2S 2B2 Canada

Privacy inquiries: policy@polyastrology.com General support: support@polyastrology.com