Privacy Policy

Who we are

Fufos LLC is the controller of the information described in this policy. The English version of this site serves customers in the United States, Canada, the United Kingdom, Ireland, Australia and New Zealand; we also sell in Spanish and Portuguese to Latin America, Spain and Brazil.

What we collect

What you give us to prepare your book

• Your name, as you want it to appear in the book.
• Your date of birth.
• Your time of birth, if you know it. If you do not, you can tell us to use an approximate time.
• Your city and country of birth.
• The gender you identify with.

Your order details

• Your email address, where your book is delivered.
• Your first name, last name and country, for billing.

We do not ask for a street address, a city of residence, a ZIP code or a phone number. Your book arrives by email and there is nothing to ship, so we have no reason to ask.

Payment information

Payments are processed by Stripe. Your card number never reaches our servers: we do not see it and we do not store it. We receive confirmation that the payment succeeded, the amount, the currency, and the billing name and country.

What is collected automatically

• Our own analytics: the pages you visit, where you came from, campaign parameters, which step of the process you are on, and whether you buy. This is tied to a random identifier stored in a cookie (asa_aid), not to your name. Our analytics do not record your IP address. Purchase events do include your email address, so that we can connect an order to the visit that produced it.
• Server logs kept by our hosting provider, which do include IP addresses, for security and abuse prevention.
• Session recording and heatmaps through Microsoft Clarity, which reconstructs how people move through the site.
• Advertising measurement through the Meta pixel and Meta's Conversions API. It gets a whole section below, because it is the part people want to know about and the part that is usually hidden.
• Your IP address and browser are stored with your order, because Meta requires them for advertising measurement.

What you write to us

The messages you send us by email or through a form, and anything you tell us about your experience.

Your birth data, and why we handle it with care

A date, an exact time and a city of birth are not, on their own, what most privacy laws call sensitive information: they are not health, biometric or genetic data.

But the three together identify you almost uniquely, and the fact that you bought this book says something about your interests. So we treat them with more care than their strict classification requires: they are used to prepare your book and for nothing else. We do not share them with advertisers, we do not build advertising audiences with them, and we do not send them to Meta or to any advertising platform.

The gender you tell us is used to write your book with the right forms of address. In some places it is treated as sensitive; the same limit applies.

If you buy a Couple's Synastry

The Couple's Synastry needs the birth details of two people. That means you give us information about someone who did not buy and who probably has not read this policy.

• The second person's details are used only to calculate and write the book you ordered. No profile is created for them, no email is sent to them, and they are not added to any list.
• By giving us their details, you confirm that you have their permission or are otherwise entitled to provide them.
• If that person writes to us asking that we delete their details, we do, and we let you know.

How we use your information

• To prepare your book from your date, time and place of birth.
• To deliver it to the email address you gave us.
• To talk with you about your order, your questions or your requests.
• To take payment and meet our accounting and tax obligations.
• To understand what works on the site and improve it.
• To measure our advertising, as explained below.
• To prevent fraud and keep the site secure.
• To send you marketing email, if you agreed to receive it.

Legal basis

Where the law where you live asks us to name a legal basis, these are ours:

• Performance of a contract: everything needed to prepare and deliver the book you bought.
• Consent: marketing email.
• Legitimate interests: security, fraud prevention, advertising measurement and improving the service.
• Legal obligation: keeping transaction records for the periods tax law requires.

Frameworks that may apply to you: the state privacy laws of the United States; the UK GDPR and the Data Protection Act 2018 in the United Kingdom; the EU General Data Protection Regulation in Ireland; PIPEDA in Canada; the Privacy Act 1988 in Australia; and the Privacy Act 2020 in New Zealand.

Cookies, analytics and advertising

We use cookies and similar technologies for three things: to keep the store and cart working, to understand how the site is used, and to measure advertising.

• Necessary. Cart and store session, and the language and currency for your country. The site does not work without them.
• Analytics. Our asa_aid (a random identifier, 365 days) and asa_utm, plus Microsoft Clarity.
• Advertising. Meta's _fbp and _fbc cookies.

We do not currently show a cookie banner, and these technologies load when you arrive. We would rather tell you that plainly than describe a consent mechanism we have not built. You can control them:

• By blocking or deleting cookies in your browser, including third-party cookies.
• By turning off Clarity at choice.microsoft.com.
• By managing how Meta uses your activity from your account settings, under "Your activity off Meta technologies".
• By writing to [email protected] so that we stop sharing your information for advertising.

What we send to Meta, exactly

When you buy, and at some steps before that, we send information to Meta to measure which advertising works. It happens from your browser (the pixel) and from our server (the Conversions API).

With a purchase we send:

• Your email, first name, last name and country, each hashed with SHA-256 before it leaves our server. Hashing means Meta receives a fingerprint instead of the value, and uses it to recognize you if you already have an account. It is not anonymization.
• Your IP address and browser, which go unhashed, because Meta requires them that way.
• The identifiers _fbp and _fbc.
• The amount, the currency, the product and the order number.

We do not send Meta your date, time or place of birth, or anything your chart says. That stays with us.

Under some U.S. state laws, sharing information this way counts as "sharing for targeted advertising" or even as a "sale", whether or not money changes hands. We are not going to argue about the label. If you do not want it to happen, write to us and we stop doing it with your information.

Who else receives your information

We do not sell your information. We work with these providers, and each one receives only what it needs:

• Stripe — payment processing. Privacy policy
• Klaviyo — order, delivery and marketing email. Receives your email address, your name and what you bought.
• Meta Platforms — advertising measurement, as explained above.
• Microsoft — session recording and heatmaps (Clarity).
• Cloudflare — content delivery, DNS and security.
• Our hosting provider — the servers where the site, your order and your book live.
• Google — Workspace, which hosts the mailbox we answer you from.
• Editorial production tools — the software we use to calculate your chart, write and typeset your book processes the birth details you gave us.

We may also disclose information where the law requires it, to enforce our terms, to investigate fraud, or in connection with a sale or reorganization of the business.

International transfers

Fufos LLC is in the United States, and so are several of our providers. If you are in the United Kingdom, Ireland, Canada, Australia or New Zealand, that means your information leaves your country.

For customers in the United Kingdom and the European Union, those transfers rely on the Standard Contractual Clauses approved by the European Commission, and the UK Addendum where it applies, with the providers that have signed them. You can ask us for a copy of the applicable safeguards by writing to us.

How long we keep it

We would rather be exact here than quote periods we do not enforce.

• Your order and the birth details attached to it are kept for as long as the business is active and for the periods tax and accounting rules require. They are not deleted on a schedule.
• Your book stays available at its private link so that you can download it again. If you would rather we removed it, tell us.
• Analytics records are kept, for now, with no automatic deletion.
• Support emails stay in our mailbox.
• Your marketing contact in Klaviyo, until you unsubscribe.

If you ask us to delete your information, we do, keeping only the minimum needed to evidence the transaction and meet our tax obligations.

Your rights

You can ask us, at any time and at no charge:

• To tell you what information we hold about you, and to give you a copy of it.
• To correct anything that is wrong.
• To delete your information.
• To object to a use of it, or to limit that use.
• To hand it over in a machine-readable format.
• To withdraw your consent where consent is the basis, without affecting what was done before.
• To stop sharing your information for advertising.

Write to [email protected] from the email address you bought with. We answer within the time the law where you live allows and, in any case, within 30 days. We may ask you a question to confirm it is really you; that protects you, not us.

We do not make automated decisions about you that have legal or similarly significant effects.

Your U.S. state privacy rights

Several states — California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana and others — give their residents rights over their personal information. Some of those laws do not apply to a business our size. Rather than work out which ones technically bind us, we extend the following to every customer in the United States:

• The right to know what we hold about you and where it came from.
• The right to a copy of it.
• The right to correct anything inaccurate.
• The right to delete it, subject to the records we must keep.
• The right to opt out of sharing for targeted advertising.
• The right not to be treated differently for exercising any of the above. Your book, your price and our service do not change.

To exercise any of these, email [email protected] with the word PRIVACY in the subject line. There is no account to create and no form to fill in first.

Sensitive information. Your birth details and the gender you tell us are used to prepare your book and for nothing else. We do not sell or share them for advertising, ever, and we do not use them to build advertising audiences. That is a firm limit, not a preference.

We do not knowingly process the personal information of anyone under 16 for targeted advertising.

Authorized agents. You may use an authorized agent to make a request on your behalf; we will ask for proof of the authorization.

If you are outside the United States

United Kingdom and Ireland

You have the rights listed above under the UK GDPR or the EU GDPR, and you can complain to the Information Commissioner's Office (ico.org.uk) in the United Kingdom or to the Data Protection Commission (dataprotection.ie) in Ireland. We would rather you wrote to us first, and we say so without any intention of standing between you and your regulator.

Canada

PIPEDA gives you the right to access and correct the personal information we hold about you, and to challenge our compliance. Our contact for privacy matters is [email protected]. You may also contact the Office of the Privacy Commissioner of Canada.

Australia

We handle your information in line with the Australian Privacy Principles. You can ask us for access or correction at [email protected]; if you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner.

New Zealand

Under the Privacy Act 2020 you can ask us for access to, and correction of, your personal information. If we cannot resolve a concern, you can contact the Office of the Privacy Commissioner.

Security

The site is served over HTTPS, payment is handled entirely by Stripe and never reaches us, access to the administration is restricted, and your book sits behind a long random link that is not listed and not guessable.

We are not going to promise more than that. No system is perfectly secure, and a policy that promises military-grade anything says more about whoever wrote it than about the system. If we ever detect a breach affecting your information, we will tell you and the relevant authorities as the law requires.

Children

Our books are meant for adults, and we do not sell to anyone under 18. We do not knowingly collect information from minors. If you believe a minor has given us their details, write to [email protected] and we delete them.

Changes to this policy

If we change this policy, we update the date and version at the top. If a change materially affects how we use information we already hold about you, we tell you by email before it takes effect.

Contact

Questions, requests, or anything that reads wrong to you: [email protected].

Fufos LLC, 30 North Gould Street, Ste N, Sheridan, WY 82801, United States.