Privacy Policy

This Privacy Policy explains how Stratonyx Inc. collects, uses, discloses, retains, and protects personal information when you visit https://stratonyx.com, create an account, purchase a report, request a consultation, use free tools, contact us, or interact with our content and advertisements.

The Services may include I Ching-rooted Chinese metaphysics content, BaZi/Four Pillars analysis, annual forecasts, relationship or compatibility reports, career and wealth reports, health-related lifestyle reflections, Plum Blossom Divination, Liu Yao, Zi Wei Dou Shu, and related educational materials. The Services are for reflection, entertainment, education, and personal insight, and are not professional legal, medical, financial, psychological, investment, or tax advice.

For purposes of applicable privacy laws, Stratonyx Inc. is generally the data controller for information collected through the Services. Contact: privacy@stratonyx.com. Mailing address: 1942 Broadway Suite 314C, Boulder, CO 80302-5233, United States.

If we appoint an EU or UK representative, Data Protection Officer, payment processor contact, or other required privacy contact, we will publish those details in this Policy or in a jurisdiction-specific notice.

3.1 Information you provide - Account information, such as name, email address, login credentials, language preference, country or region,

and customer support communications. - Order and billing information, such as product selected, price, currency, billing status, invoice identifiers,

refund requests, and limited payment metadata. Full card numbers are processed by payment providers and are not intentionally stored by Stratonyx. - Birth and analysis inputs that you choose to submit, such as date of birth, time of birth, birth location, gender

or relationship role if applicable, partner details for compatibility analysis, questions submitted for divination, and other information needed to generate reports. - User content, such as messages, prompts, consultation notes, testimonials, reviews, and feedback. - Marketing preferences, such as consent status, opt-in records, unsubscribe records, and campaign

interactions.

3.2 Information collected automatically - Device, browser, and network information, such as IP address, approximate location derived from IP address,

user agent, operating system, device identifiers, language settings, referring URLs, pages viewed, clicks, and timestamps. - Cookies, pixels, local storage, and similar technologies used for authentication, security, analytics,

preferences, fraud prevention, and advertising measurement. - Usage data, such as feature usage, error logs, performance data, generation history, report access, and

service events.

3.3 Information from third parties - Payment processors, fraud-prevention providers, analytics providers, advertising platforms, customer support

tools, email delivery providers, hosting providers, and social platforms may provide information needed to operate, secure, measure, and improve the Services. - We may receive information when you sign in through a third-party identity provider, follow our pages, click

our ads, or interact with our content on social media.

Some birth-chart, relationship, spiritual, metaphysical, or health-adjacent inputs may be considered sensitive under certain laws depending on context. We do not require you to submit information about religion, medical conditions, precise identity documents, or other highly sensitive details unless a specific feature clearly asks for it and you choose to provide it. We do not use metaphysical inputs to make legally or similarly significant automated decisions about you.

Where consent is required for processing sensitive information, cookies, marketing, or cross-context advertising, we will request consent or provide legally required choices.

We process personal information for the purposes below. For users in the European Economic Area, United Kingdom, or Switzerland, our legal bases may include contract performance, legitimate interests, consent, and compliance with legal obligations.

Purpose Examples GDPR legal basis where applicable

Provide the Services Create accounts, generate reports, deliver paid products, manage consultations, provide customer support.

Contract performance; legitimate interests Payments and fraud prevention Process orders, taxes, chargebacks, refunds, security checks, abuse prevention.

Contract performance; legal obligation; legitimate interests Improve and secure the Services Debugging, analytics, feature testing, security monitoring, abuse prevention.

Legitimate interests; consent where required Personalization Remember language, region, previous purchases, and service preferences.

Contract performance; legitimate interests; consent where required Marketing Email newsletters, promotions, audience measurement, ad performance.

Consent where required; legitimate interests where permitted Legal compliance Tax, accounting, consumer protection, regulatory requests, dispute handling.

Legal obligation; legitimate interests

We may use cookies, pixels, SDKs, local storage, and similar technologies. Essential technologies are used for login, security, fraud prevention, payment flow, language settings, and service delivery. Analytics and advertising technologies may be used only where permitted by law or with consent where required.

Where legally required, we will provide a cookie banner or preference tool that allows you to accept, reject, or customize non-essential cookies. Some browsers and jurisdictions support opt-out preference signals such as Global Privacy Control; we will honor such signals where legally required and technically feasible.

We do not sell personal information for money. We may share information in the following limited circumstances: - Service providers and processors that help with hosting, storage, analytics, payments, email, customer

support, security, fraud prevention, tax, and professional services. - Payment processors and financial institutions to process payments, refunds, disputes, chargebacks, and

compliance checks. - Advertising and analytics partners, subject to applicable consent and opt-out rights. - Legal and safety recipients when required to comply with law, enforce our agreements, protect rights and

safety, or respond to lawful requests. - Business transfers, such as a merger, acquisition, financing, reorganization, or sale of assets, subject to

appropriate protections. - With your direction or consent, such as when you request that we share a report or consultation result with

another person.

We may process and store information in the United States and other countries where our service providers operate. If personal data is transferred from the EEA, UK, or Switzerland to countries that have not been recognized as providing adequate protection, we will use safeguards such as Standard Contractual Clauses, transfer risk assessments, or other lawful mechanisms where required.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain records, comply with tax and accounting obligations, resolve disputes, prevent fraud, enforce agreements, and satisfy legal requirements. Birth-chart inputs, reports, and customer content may be retained in your account so you can access prior reports unless you delete them or request deletion, subject to legal exceptions.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted transmission where appropriate, limited access, logging, monitoring, and vendor due diligence. No online service can guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent, receive a portable copy, appeal a decision, or opt out of certain processing, sales, sharing, targeted advertising, or profiling. To exercise rights, contact us at privacy@stratonyx.com. We may need to verify your identity before responding.

11.1 EEA, UK, and Swiss users You may have rights under the GDPR, UK GDPR, and similar laws. You may also have the right to lodge a complaint with your local data protection authority. Withdrawing consent does not affect processing that occurred before withdrawal.

11.2 California and other U.S. state users If applicable, California and certain other U.S. state privacy laws may provide rights to know, access, correct, delete, opt out of sale or sharing, opt out of targeted advertising, limit use of sensitive personal information, and non-discrimination for exercising privacy rights. If we provide a “Do Not Sell or Share My Personal Information” or similar link, you may use it to submit applicable opt-out requests.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. In the EEA, UK, or other jurisdictions with higher digital-consent ages, we do not knowingly collect information from children below the applicable age without required parental consent. If you believe a child has provided information to us, contact us so we can take appropriate action.

We may use rule-based, algorithmic, or AI-assisted systems to generate metaphysical reports from the inputs you provide. These outputs are interpretive and informational. We do not use these systems to make employment, credit, housing, insurance, medical, legal, or similarly significant decisions about you.

We may update this Policy from time to time. If changes are material, we will provide notice by posting the updated Policy, changing the effective date, emailing users, or using other legally required methods.

Privacy questions and requests: privacy@stratonyx.com. General support: support@stratonyx.com. Mailing address: 1942 Broadway Suite 314C, Boulder, CO 80302-5233, United States.