Privacy Policy

1 Who We Are

MyLuckySign ("we", "us", "our") is a Western astrology content service that delivers AI-generated daily horoscope readings via email and Telegram. This Privacy Policy explains what personal data we collect when you join our waitlist or use our service, how we use it, and your rights over it.

2 Data We Collect

We collect the minimum data necessary to operate the service:

• Email address — provided by you at signup, used to send your daily reading and service updates.
• Zodiac sign — selected by you at signup, used to personalise your daily reading.
• Country — inferred from your IP address at the time of signup to confirm eligibility (US & Canada launch only). We do not record your precise location, city, street address, or GPS coordinates.
• IP address — used transiently to derive your country at signup. Not stored in our database after country detection is complete.
• Telegram ID — only if you choose Telegram delivery and opt in through the bot. Never collected without your explicit action.

We do not collect your name, phone number, date of birth, payment details, or any sensitive personal data unless you explicitly provide it.

3 How We Store Your Data

Your data is stored securely on Supabase infrastructure with the following protections:

• Encryption at rest — all database records, including your email address, are encrypted at rest using AES-256.
• Encryption in transit — all data transmitted between your device, our servers, and third-party services is protected by TLS 1.2 or higher.
• Access controls — database access is restricted to authorised systems only. No individual has routine access to raw user records.
• No third-party data sales — your email address is never sold, rented, or traded with advertisers, data brokers, or any third parties for commercial purposes.

4 How We Use Your Data

We use the data we collect exclusively for the following purposes:

• Sending you daily Western astrology readings via email or Telegram
• Sending service announcements, launch updates, and early-access notifications
• Personalising content based on your selected zodiac sign
• Confirming launch eligibility (US & Canada only at launch)
• Improving the quality and accuracy of our AI-generated content over time
• Complying with legal obligations where required

We will never use your data for targeted advertising or share it with marketing platforms.

5 Third-Party Services

We use a small number of trusted third-party services to operate MyLuckySign. Each receives only the data strictly necessary for its function:

• Supabase — database and backend infrastructure. Stores your encrypted email and sign selection. Privacy Policy ↗
• Email delivery provider — transports your daily reading to your inbox. Your email address is shared only for delivery purposes. We use providers that comply with CAN-SPAM and CASL.
• Telegram Bot API — used only if you choose Telegram delivery. Your Telegram ID is used solely to send your daily reading. Privacy Policy ↗
• ipapi.co — used once at signup to infer your country from your IP address. Your IP is not stored by us after this lookup. Privacy Policy ↗

We do not use Google Analytics, Facebook Pixel, or any advertising trackers on our platform.

6 Your Rights

Depending on your location, you may have the following rights over your personal data:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request permanent deletion of all your data. We will action this within 30 days and confirm by email.
• Opt-out — click the unsubscribe link in any email to stop receiving communications. Your record will be marked inactive. You may also request full deletion separately.
• Portability — request your data in a portable, machine-readable format.
• California residents — under the CCPA, you have additional rights including the right to know what personal information is collected and the right to non-discrimination for exercising your privacy rights.
• Canadian residents — under PIPEDA, you have the right to access and correct your personal information held by us.

To exercise any of these rights, contact us at hello@myluckysign.com. We will respond within 14 business days.

7 CAN-SPAM & CASL Compliance

All commercial email sent by MyLuckySign complies with the CAN-SPAM Act (US) and Canada's Anti-Spam Legislation (CASL). Every email includes a clear unsubscribe mechanism. We will process unsubscribe requests within 10 business days. We do not send unsolicited commercial email.

8 Data Retention

We retain your email address and sign selection for as long as you are an active MyLuckySign user or waitlist member. If you have not interacted with our service for 24 months, your record may be automatically deleted. You may request deletion at any time regardless of activity.

9 Children's Privacy

MyLuckySign is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

10 Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. For material changes that affect how we use your email address, we will notify you by email before the changes take effect.

11 Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, United States, without regard to its conflict of law provisions. For Canadian users, applicable Canadian federal privacy law (PIPEDA) applies in addition to the above.

12 Contact Us

For any privacy-related questions, data requests, or concerns: