Privacy Policy

This Privacy Policy explains how iNatalis, registered at Bigla 25, Sofia, Bulgaria, handles personal data when you use iNatalis. For the data described here, iNatalis acts as the data controller. You can contact us at support@inatalis.com.

*1. Data we collect

• Birth details: name, birth date, birth time, birth place, and optional gender.
• Contact details: email address when you request notification, receive access links, buy a reading, or contact support.
• Order details: payment status, checkout session, report ID, unlock token status, refund status, and basic support records.
• Generated content: chart calculations, report text, forecast text, PDF metadata, and generation logs needed to deliver and troubleshoot the reading.
• Technical data: server logs, device/browser information, approximate request location from IP signals, security diagnostics, and operational metrics.
• Usage analytics: anonymous visitor and session identifiers, page paths, referrer and campaign parameters, and funnel events such as form start, preview view, paywall view, checkout open, and purchase confirmation.

*2. Why we use data

• To resolve the birth place and calculate the astrological chart.
• To generate, display, unlock, email, and download your reading.
• To process payment, prevent fraud, and handle refunds or disputes.
• To send transactional emails such as preview and access links.
• To provide support and recover lost access links.
• To secure, debug, monitor, and improve iNatalis.
• To meet legal, tax, accounting, and dispute-resolution obligations.

*3. Legal bases

Where the GDPR applies, we rely on contract performance to prepare and deliver the reading you request; consent where you choose to provide optional information or ask for email updates; legitimate interests to secure, troubleshoot, and improve the service; and legal obligations for tax, accounting, fraud prevention, and dispute handling.

*4. How we share data

We use trusted service providers to run iNatalis and deliver readings. They receive only the data needed for their role and must process it under appropriate confidentiality, security, and data-protection commitments.

• Payment and fraud prevention: checkout, payment processing, refunds, disputes, and fraud checks.
• Hosting and security: website, backend, database, operational logs, monitoring, and infrastructure protection.
• Email delivery: transactional emails such as preview links, unlock links, and support messages.
• Location lookup: birth-place lookup, geocoding, timezone resolution, and related diagnostics.
• Reading generation and operations: chart interpretation, written reading generation, PDF creation, error handling, and service improvement.

We do not sell personal data.

*5. International transfers

Some providers may process data outside your country or outside the EU/EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent recognised mechanisms.

*6. Retention

We keep report and order records for as long as needed to deliver the reading, provide support, recover access, handle disputes, and meet legal obligations. Generated PDF files may be removed after 90 days. Accounting and payment records may be retained for the period required by law.

You may ask us to delete personal data that is no longer needed, subject to legal, accounting, fraud-prevention, and dispute-resolution requirements.

*7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also withdraw consent where processing is based on consent and complain to your data protection authority.

To make a privacy request, email support@inatalis.com. We may need to verify your identity before acting on a request.

*8. Cookies and analytics

We use technologies needed to operate the service, remember essential state, secure requests, process checkout, and understand the anonymous conversion funnel. Our first-party analytics use browser storage to keep a visitor ID and session ID so we can see how people move from landing page to preview, paywall, checkout, and unlock. We do not use advertising cookies or marketing pixels unless we add a consent flow and update this policy.

*9. Children

iNatalis is intended for people who can lawfully request or receive the service in their country. We do not knowingly collect personal data from children who cannot use the service without parental or guardian permission. If you believe a child has provided data without appropriate permission, contact us and we will review and delete it where appropriate.

*10. Security

We use reasonable technical and organisational measures to protect the data entrusted to us, including hosted infrastructure, access controls, payment tokenisation, HTTPS, operational logging, and monitoring. No online service can be perfectly secure, but we work to reduce risk.

*11. Updates

We may update this policy as iNatalis changes. The date above shows when this version was last revised.