Privacy Policy

YOUR-VERITAS is operated by YOUR-VERITAS sp. z o.o., a company registered in Poland.

YOUR-VERITAS sp. z o.o. is the data controller responsible for the personal data described in this Privacy Policy.

For full company registration details and contact information, please see Section 20 — Contact.

Some external service providers may independently control certain processing activities according to their own legal obligations and privacy policies.

The information we collect depends on how you interact with YOUR-VERITAS and which services you choose.

Information used to generate reports

Depending on the selected report, we may collect:

• Name or other name supplied by the customer.
• Date of birth.
• Time of birth.
• Place of birth.
• Email address.
• Selected report and language.
• Other information specifically requested in the relevant form.

The information required may differ between products.

Information about partners and family members

For relationship, compatibility, and family-related reports, customers may provide information about another person.

This may include their name, date of birth, time of birth, and place of birth. Birth time is required for certain two-person reports and may be optional for other products.

We do not require every person included in a report to create an individual YOUR-VERITAS account or provide an email address.

Generated reports and related information

We may retain the resulting report, derived interpretations, structured analysis data, processing status, and technical information needed to maintain access or resolve a problem.

Generated reports may contain personal information or interpretations relating to the individuals included in them.

Account information

If you create or use an account, we may process your email address, account identifiers, profile information, authentication records, and information associated with your report collection.

Purchases and payments

When purchasing a service, we may receive your name, email address, billing address, country, business details where provided, tax identification details where applicable, purchased products, transaction amount, currency, payment status, and payment identifiers.

Communications

When contacting customer support, we may receive your email address, message, report reference, private report link, and any information you choose to share.

Technical information

We may process browser and device information, technical timestamps, approximate geographic information, website requests, security information, diagnostic events, and identifiers required for the service's operation.

Marketing information

If you subscribe to optional communications, we may record your email address, subscription preferences, consent information, and the source and date of your subscription.

We do not require you to subscribe to marketing communications in order to purchase reports.

We use information to provide and maintain YOUR-VERITAS and to fulfil legitimate operational and legal requirements.

These purposes include:

• Generating personalized reports requested by customers.
• Performing calculations and preparing report interpretations.
• Delivering reports through private online links.
• Providing access to purchased or generated reports.
• Maintaining customer accounts and report collections.
• Processing purchases and payment confirmations.
• Issuing or preparing relevant accounting and sales records.
• Responding to questions, complaints, and support requests.
• Verifying whether a report meets its product description.
• Diagnosing failed or incomplete report generations.
• Maintaining service security and preventing fraud or abuse.
• Improving technical reliability and product functionality.
• Sending optional communications where permitted.
• Analysing public website usage where optional analytics has been enabled with the required consent.
• Complying with applicable legal obligations.
• Establishing, exercising, or defending legal claims.

We do not sell personal information.

We do not use customers' birth information or generated report interpretations for cross-site behavioural advertising.

We do not provide private customer reports to advertising networks for behavioural profiling.

Where GDPR applies, YOUR-VERITAS processes personal information according to the legal basis appropriate to the relevant activity.

Performance of a contract — Article 6(1)(b)

We process information necessary to provide services ordered by customers, including preparing and delivering reports, processing purchases, and maintaining contractual access.

Legal obligations — Article 6(1)(c)

We process certain billing, accounting, tax, and other records where required by applicable law.

Legitimate interests — Article 6(1)(f)

We may rely on legitimate interests for activities such as:

• Preventing fraud and misuse.
• Protecting the security of our services.
• Investigating technical failures.
• Maintaining reliable operations.
• Handling complaints and disputes.
• Verifying report quality.
• Protecting our legal rights.

Where a customer supplies limited information about another person for a private relationship or family analysis, processing may be based on legitimate interests in providing the requested comparison, provided the applicable necessity and balancing requirements are satisfied.

The interests and rights of the individual concerned must be taken into account. A customer's request does not automatically establish a valid legal basis for processing someone else's information.

Consent — Article 6(1)(a)

We rely on consent for optional analytics and optional marketing communications where consent is required.

Consent can be withdrawn at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.

Where processing involves information covered by special protections under Article 9 GDPR, an applicable additional legal condition is required.

YOUR-VERITAS generates personalized digital reports from information submitted through its forms.

Depending on the selected product, birth information is used to produce structured calculations, derived information, interpretive content, and personalized narratives.

The resulting reports may address personality-related characteristics, relationship dynamics, personal tendencies, potential strengths, challenges, and other reflective subjects.

Birth information is processed for the purpose of providing the requested service and related support.

Reports are intended for personal insight, reflection, information, and entertainment.

They do not constitute medical diagnoses, clinical psychological assessments, psychiatric treatment, financial advice, legal advice, or professional employment assessments.

Information submitted for report generation may remain associated with the resulting report in our internal systems.

Some YOUR-VERITAS products allow a customer to generate a report concerning a relationship, compatibility, or family situation.

These reports may involve information about a second person or several family members.

Information provided

The customer may submit the other person's name, date of birth, time of birth, and place of birth, depending on the selected report.

The customer supplies this information directly to YOUR-VERITAS.

The person concerned does not ordinarily need to register an account or provide contact details to be included in a report.

Purpose and presentation

The information is used to generate the private report requested by the customer.

Generated reports may identify the people concerned by name and contain interpretations about their relationship or individual characteristics.

Birth information may be retained internally even when the final report displays only a person's name and derived interpretations.

Private reports are not intentionally made available as publicly indexed customer profiles.

Customer responsibilities

Customers should provide information about other people only when they have a lawful and appropriate basis for doing so.

They should respect the privacy of the individuals concerned and, where appropriate, make them aware that their information is being submitted for a private interpretive report.

Submitting another person's information does not transfer YOUR-VERITAS's own data-protection responsibilities to the customer.

Information obtained indirectly

Where YOUR-VERITAS receives personal information from a customer rather than directly from the individual concerned, the information originates from that customer.

The relevant categories of information, purposes, recipients, retention principles, and individual rights are described in this Policy.

Applicable law may require information to be provided directly to the individual concerned, subject to the conditions and exceptions established by law.

We do not automatically assume that the absence of an email address removes those obligations.

Privacy requests

A person who believes their information has been included in a YOUR-VERITAS report may contact support@your-veritas.com.

We will consider requests concerning that person's information in accordance with applicable data-protection law.

We may require reasonable verification before disclosing or modifying information and will protect the privacy of other individuals involved.

YOUR-VERITAS generally provides completed reports through private online links.

Report links are intended for access by the relevant customer or another person with whom the customer chooses to share the link.

Certain links may function as access credentials. Anyone obtaining a valid link may be able to view the associated report unless additional access controls apply.

Customers should therefore treat report links as confidential.

Report-access information may be delivered by email through an external email service provider.

Generated reports are ordinarily accessed online rather than delivered as PDF attachments by email.

The fact that a report is private does not mean that it is invisible to authorized operational systems or personnel responsible for maintaining the service.

YOUR-VERITAS retains information for the period reasonably necessary to fulfil the purposes described in this Policy, subject to applicable legal obligations and justified operational requirements.

Different categories of information may have different retention periods.

Reports

Report inputs and generated content may be retained while continued access, customer support, troubleshooting, contractual performance, or legitimate legal purposes require them.

Purchases and accounting

Transaction, invoice, tax, and accounting information may be retained for periods required by applicable law, independently of the continued availability of a customer report.

Operational and security records

Technical events, fraud-prevention information, and relevant security records may be retained where reasonably necessary for security, service integrity, dispute resolution, or legal obligations.

Account deletion

Customers may request deletion of their accounts and associated personal information.

Closing an account or revoking access to a report does not necessarily remove every underlying record at the same moment.

Some underlying report records or related information may require additional review and processing to determine whether they should be deleted, anonymized, or lawfully retained.

Requests are assessed and fulfilled in accordance with applicable legal requirements. Information without a continuing lawful basis must not be retained merely because it remains in a database.

Backups

Information may temporarily remain in backups or recovery systems according to applicable technical retention and recovery procedures.

Authorized access

Authorized YOUR-VERITAS personnel may access reports and relevant information when reasonably necessary to investigate complaints, verify report quality, resolve delivery problems, investigate security incidents, or fulfil legal obligations.

Access is intended for legitimate business purposes rather than unrestricted personal inspection.

YOUR-VERITAS uses Stripe to process payments.

Stripe Checkout may collect payment-card details and other payment information directly from customers.

YOUR-VERITAS receives information necessary to identify a transaction, confirm payment, fulfil an order, reconcile accounting records, and handle refunds or disputes.

This may include transaction identifiers, customer and billing information, amount, currency, date, payment status, and payment-method category.

YOUR-VERITAS does not receive or store full payment-card numbers, card security codes, or raw card credentials.

Stripe may act as a processor for certain activities and as an independent controller for other activities according to its services and legal obligations.

For further information, see: https://stripe.com/privacy

YOUR-VERITAS relies on third-party services for the operation of its website and products.

Depending on the service or processing activity, these may include:

• Vercel — website hosting, server infrastructure, technical execution, and operational logs.
• Supabase — database services, authentication, and storage.
• Stripe — payment processing and related transaction services.
• Resend — transactional email, support correspondence, and permitted email communications.
• Upstash QStash — background task delivery and processing coordination.
• OpenCage — geographic location resolution from place information.
• Anthropic, OpenAI, and Google Gemini — AI-assisted processing and report-generation tasks.
• fal.ai — image-generation tasks where relevant to the selected product.
• Google Analytics and Google Tag Manager — optional website measurement when enabled.

Different providers receive different categories of information according to their functions.

For example, an AI service may receive derived report facts, structured interpretive data, relevant names, and report-related instructions or content needed for a particular generation stage.

A geocoding service may receive a place name to resolve geographic information.

Hosting, database, support, and email providers may process information required to perform their respective services.

We seek to limit disclosures to information reasonably necessary for the relevant purpose.

Certain providers process information on our behalf, while others may act as independent controllers for specific activities.

Provider-specific handling, retention, and international transfers depend on the relevant service arrangements and applicable law.

YOUR-VERITAS uses technical information to maintain a secure and reliable service.

This may include:

• Technical request information.
• Browser and device characteristics.
• Selected language.
• Approximate geographical information.
• Timestamps.
• Service errors.
• Report-generation status.
• Security and abuse-prevention events.
• Operational identifiers.
• Relevant diagnostic information.

Certain technical records may be linked to a report or customer transaction when necessary for troubleshooting, support, or fraud prevention.

Optional website analytics

When enabled with the required consent, Google Analytics 4 helps us understand how visitors interact with public website content.

Measurement may include page visits, navigation between public pages, scrolling activity, interactions with external links, and video engagement where applicable.

The analytics integration is designed to exclude private customer report pages and to avoid sending report-access tokens, birth information, private report content, or customer email addresses as analytics event information.

Technical operational processing and optional website analytics are separate activities and may rely on different legal bases.

YOUR-VERITAS may offer limited free reports, including Animals Within.

We use technical measures to prevent repeated unauthorized claims, automated abuse, and excessive use of free-report services.

These measures may include email verification, usage quotas, rate limits, and internal security records.

Where applicable, YOUR-VERITAS may create and retain cryptographic hashes derived from normalized email addresses or IP addresses.

Such hashes help enforce fair usage and prevent abuse without requiring the original value to be stored in every security record.

Cryptographic hashes are not necessarily anonymous information and may remain subject to applicable data-protection rules.

Some fraud-prevention records may be retained separately from individual report records where justified.

For paid reports, we may also retain relevant checkout acknowledgments and records concerning the immediate delivery of digital content where needed for contractual or legal purposes.

YOUR-VERITAS uses cookies and related browser technologies for essential website functionality, user preferences, account security, and optional analytics.

Essential cookies and storage

These technologies may be used to maintain authentication, remember language preferences, manage security, support report navigation, and record cookie-consent preferences.

Depending on the feature used, they may include:

• veritas_consent — records cookie-consent preferences, with a configured duration of 180 days.
• veritas_locale and NEXT_LOCALE — where used, remember language or locale preferences.
• Supabase authentication-related cookies — maintain authenticated sessions where applicable.
• Other short-lived functional storage needed for report navigation or website operation.

Stripe and other external providers may use additional technologies in their own service environments, such as hosted payment pages.

Optional Google Analytics 4

When activated and permitted by the visitor's consent, YOUR-VERITAS uses Google Analytics 4 through Google Tag Manager to understand website usage.

GA4 may use first-party cookies such as:

Actual cookie lifetime can differ because of browser restrictions or configuration settings.

Google Analytics data-retention settings are separate from the expiration of browser cookies.

Consent

Optional analytics is intended to operate only after the necessary consent has been given.

Visitors may reject optional analytics while continuing to use the ordinary website functionality.

Analytics consent may be changed or withdrawn through the website's Cookie Settings interface.

Withdrawal stops subsequent optional analytics measurement according to the implemented consent controls. It does not automatically erase previously collected information from all external systems.

Google Tag Manager

Google Tag Manager manages the deployment of approved website tags. Its presence does not, by itself, authorize unrestricted tracking.

Advertising

YOUR-VERITAS does not currently use Meta Pixel or Google Ads remarketing as part of this analytics setup.

We do not use these technologies for cross-site behavioural advertising.

If additional optional tracking tools are introduced, the relevant disclosures and consent requirements will be reviewed before activation.

YOUR-VERITAS operates from Poland and provides services internationally.

Some technology providers may process or store information in countries outside Poland or the European Economic Area.

Where personal data is transferred internationally, applicable data-protection rules and transfer safeguards must be observed.

Depending on the provider and circumstances, recognized transfer mechanisms may include adequacy decisions, standard contractual clauses, or other lawful safeguards.

A provider's participation in an international transfer framework, where relevant, depends on its verified status and the applicable processing activity.

Information about the relevant safeguards may be requested using the contact details in this Policy.

YOUR-VERITAS is available to customers from different countries.

The selected website or report language does not determine a customer's place of residence or legal status.

Users may choose English, Polish, German, Dutch, French, Spanish, or Italian regardless of their country of residence.

Additional privacy rights may apply under the laws of particular jurisdictions.

Where applicable, we assess such rights according to the relevant legal requirements.

YOUR-VERITAS uses automated systems, structured calculations, and AI-assisted processing to produce personalized digital reports.

Depending on the selected product, information may be processed through multiple generation stages, including calculations, structured interpretation, narrative creation, quality checks, and image generation.

Some stages may use third-party AI services.

Generated text may contain interpretations or inferences about the people included in a report.

We do not use these reports to make decisions that produce legal effects or similarly significant consequences concerning employment, credit, insurance, healthcare, legal status, or eligibility for essential services.

The reports are provided for personal reflection and informational purposes rather than as binding professional determinations.

Depending on applicable law, individuals may have the right to:

• Access personal information concerning them.
• Request correction of inaccurate data.
• Request deletion of personal information.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Receive certain information in a portable format.
• Withdraw consent where processing depends on consent.
• Lodge a complaint with the relevant data-protection authority.

These rights are subject to the conditions and limitations established by applicable law.

Where we rely on legitimate interests, individuals may object on grounds relating to their particular situation.

Individuals may object to processing of their personal data for direct marketing at any time.

Requests may be sent to: support@your-veritas.com

We may request proportionate verification of identity where necessary to protect information against unauthorized disclosure or alteration.

We normally respond within the periods required by applicable law.

European Economic Area

Individuals may lodge a complaint with their competent data-protection supervisory authority.

In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Other jurisdictions

Individuals located elsewhere may have additional privacy rights under their applicable local laws, including certain United States state privacy laws where those laws apply.

YOUR-VERITAS is not directed at children under the age of 16 and is not intended for independent use by individuals below that age.

Certain family-related reports may include information about children or other family members where submitted by a customer.

Such information must be handled lawfully and with appropriate consideration for the rights and interests of the individuals concerned.

If you believe that information about a child has been submitted or processed improperly, please contact: support@your-veritas.com

We will assess the matter under applicable law.

We may update this Privacy Policy to reflect changes in our services, technology, processing activities, or applicable legal requirements.

When changes are made, the Last updated date will be revised.

Where appropriate or legally required, we may provide additional notice.

Changes requiring consent or another legal basis will not become authorized merely because the text of this Policy has changed.

The current version is made available on the YOUR-VERITAS website.

For questions about this Privacy Policy, personal information, generated reports, account deletion, cookies, or privacy rights, please contact:

YOUR-VERITAS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ ul. Doliny Miętusiej 26/3 43-316 Bielsko-Biała Poland KRS: 0001262185 NIP: 5472262170 Email: support@your-veritas.com Website: https://www.your-veritas.com

We will review privacy-related enquiries and requests in accordance with applicable data-protection legislation.