SAGASEAL PRIVACY POLICY

Effective Date: October 18, 2026

Last Updated: November 2, 2026

WHO WE ARE

Ostrel Software LLC, and its parents, subsidiaries, affiliates, agents, representatives, consultants, employees, officers, and directors (collectively, "SagaSeal," "we," "us," or "our"). Ostrel Software LLC is a Washington limited liability company, doing business as SagaSeal, that provides an AI-assisted book creation service through the SagaSeal.com website and associated telephone interview systems (the "Services").

Mailing Address: Ostrel Software LLC Attn: Privacy 522 W Riverside Ave, Ste N Spokane, WA 99201

Email: hello@sagaseal.com

Data Controller: Ostrel Software LLC is the controller of the personal data described in this Policy (the organisation that decides why and how it is processed), under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the other laws described below. Our representatives in the European Union and the United Kingdom will be listed in the section "EU and UK Representative".

A NOTE ON DEEPLY PERSONAL CONTENT

SagaSeal exists to help people put their life stories into books. The material you and your family share with us in that process is, by its nature, deeply personal. Life stories routinely touch on health, faith, family relationships and conflicts, loss, and other intimate subjects. We designed the product and this policy around one commitment: your story material is used to make your book, and for nothing else. We do not sell it. We do not use it for advertising. We do not use one family's story to write another family's book. Access within our company is limited to the people and systems needed to produce your book and support you.

We do advertise SagaSeal, and our website uses Google's, Microsoft's, and Meta's measurement tools to tell us whether those ads work. Those tools see visits to our website and purchases, and, to match a purchase to an ad, the purchaser's email address in scrambled (hashed) form. Google also uses visits to our public marketing pages to show our ads to past visitors on other websites (remarketing). On our public pages and our gift order form, Microsoft Clarity also records how each page is used (clicks, taps, and scrolling) so that we can make those pages easier to use; we set it to hide all the words on the page and everything you type. None of these tools ever receives your story material. The section "Advertising Measurement" below sets out exactly what they receive and how to stop it.

The product itself also gives the storyteller control: at every stage, the storyteller can skip a question or decline a topic, and after the deep interview stage the product surfaces an opportunity to identify anything the storyteller would rather leave out of the book.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. If we do, we will let you know about any material changes, either by notifying you on the Site or by sending you an email. New versions of this Policy will never apply retroactively, and we will tell you the exact date they go into effect. If you keep using SagaSeal after a change, that means you accept the updated Privacy Policy.

HOW THIS POLICY APPLIES

This Privacy Policy describes the information we collect, how we use it, our legal basis for doing so, whether and how it may be shared, and your rights and choices. It applies to:

Customers who purchase and use the Services;
Gift recipients (the storytellers) who participate in interviews after someone purchases a gift for them;
Family contributors who submit written memories through a contribution link without creating an account;
Visitors to the Site.

If you see a capitalized word that is not defined here, it is defined in our Terms of Service.

By using the Services offered by SagaSeal, you acknowledge that you have agreed to our Terms of Service and that you have read and understood this Privacy Policy.

DATA YOU PROVIDE TO US

Account and Contact Information

Account Creation: When you create an account, we collect your name, email address, and password, and any other information you choose to provide.
Shipping Information: For physical goods (printed books, gift boxes, certificates, mailed proofs), we collect the recipient name and postal address you provide. Address entry may be assisted by an address autocomplete service (see the processor list below).
Telephone Number: If you use telephone interview features, the Memory Line, call-backs, or consultation calls, we collect the telephone number involved.
Gift Setup Information: When you purchase a gift, we collect the recipient's name and contact details you provide so that we can deliver the invitation, and any personal message you include.

Story Material

This is the heart of the Services, and the most sensitive category of data we hold:

Interview Answers: Written answers you or the storyteller provide in the guided interview stages, including the intake brief, chapter pillars, and deep follow-up questions.
Call Recordings and Transcripts: Recordings of interview-related telephone calls (the AI interviewing voice, human interviewer calls, Memory Line calls, call-backs, and consultation calls) and the transcripts generated from them. All interview-related calls are recorded and transcribed with consent, as described below.
Voice Dictation: Audio you dictate in the application and its transcription.
Web Interview Recordings (Original Recordings): Audio of every answer the storyteller speaks in the web interview (Talk), and video of those answers if the storyteller chooses to turn the camera on, together with playback copies, a still frame for each video, word timings, and the records of the storyteller's recording choices (see the dedicated section below).
Photographs: Photographs you upload for inclusion in the book, together with descriptions of them generated by a vision model so they can be placed and captioned.
Uploaded Documents: Existing material you upload or paste (letters, journals, manuscripts, notes) to be digested into the creation process.
Family Contributions: Written memories submitted by family and friends through contribution links, together with each contributor's name and email address.
Creative Content: Blueprints, outlines, style selections, edits, and other creative inputs you make while shaping the book.
Voice Samples for Custom Narration: If you choose the custom audiobook voice feature, the voice recording you submit for creating a custom narration voice (see the dedicated section below).

Transaction Information

Purchase Information: Purchase type, tier, date, amount, currency, coupon usage, installment schedule (for Pay in Three), and subscription status.
Payment Details: Payments are processed by Stripe. Card numbers are handled by Stripe and are not stored on SagaSeal's systems. We receive payment metadata such as the payment method type, last four digits, and transaction status.
Refund Requests: Information provided in connection with refund requests.

Technical and Usage Information

We automatically collect certain information when you use our Services:

Usage Data: Pages viewed, features used, time spent, navigation paths, and interaction with specific features.
Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
Location Information: IP address, which may be used to infer general geographic location (city or region level) and timezone.
Log Data: Server logs recording access times, pages requested, errors, and referring URLs.
Call Metadata: For telephone features, call times, durations, and the numbers involved.
Cookie and Tracking Data: Information collected through cookies and similar technologies, including the analytics and advertising measurement tools described in "Advertising Measurement" below. See also the Cookies section below.
Session Recordings and Heatmaps: On our public marketing pages and our gift order form only, a recording of how the page was used (mouse movements, clicks, taps, scrolling, and screen size), made with Microsoft Clarity, with all page text and everything you type hidden. See "Microsoft Clarity" under "Advertising Measurement" below.
Ad Click Identifiers: If you arrive by clicking one of our ads, the identifier the ad platform adds to the link (for example Google's "gclid", Microsoft's "msclkid", or Meta's "fbclid"), and, if you buy, the link between that click and your order.

Information About Other People

The nature of the Services means you may provide information about people other than yourself:

A gift buyer provides the recipient's name and contact details.
A storyteller tells stories that mention family members, friends, and others.
A contributor writes memories about the storyteller and may mention others.
Photographs may depict people other than the uploader.
Recordings may capture the voice (and, with the camera on, the image) of someone else in the room with the storyteller. The storyteller is asked to tell anyone present that they may be heard.

If you provide information about another person, you are responsible for doing so lawfully, and for informing them where appropriate. We use such information only to create the book and operate the Services.

HOW WE COLLECT INFORMATION

We collect information when you:

Create an account, make a purchase, or set up a gift;
Answer interviews in the application or by telephone, including when the web interview records the storyteller's voice and, if chosen, video;
Call the Memory Line or receive a call-back;
Upload photographs, documents, or voice recordings;
Submit a contribution through a contribution link;
Contact support or communicate with us;
Browse the Site (automatic collection through cookies, logs, and similar technologies, including the analytics and advertising measurement tools described below);
Complete a purchase (the purchase reports sent to Google, Microsoft, and Meta, described in "Advertising Measurement").

ROYALTY PARTNERS AND INTRODUCTIONS

This section covers our Royalty Partners program and the people our partners introduce to us. If you are not a partner and nobody has introduced you to us, it does not apply to you.

If you are a Royalty Partner

When you apply to and take part in the program, we collect and use: your name and contact details; the type of practice or channel you run and how people come to you; the website or channel address you give us; your referral links, codes, and introductions; the identity and payout information our payment partner requires in order to send you money, including tax identification and any Form W-9 or Form W-8BEN you provide; records of the royalties you earn and the payments we make; and, if you switch to cash compensation as a licensed professional, the exact text of the attestation you agreed to together with the time you agreed to it.

We use this to run the program, to pay you, to meet our tax and anti-fraud obligations, and to keep a record of the agreement between us. We keep acceptance records for the Royalty Partner Agreement, including the version, a copy and cryptographic hash of the text shown to you, the time, your IP address, and your browser user agent, for at least seven years after the agreement ends, because they are the record of what you signed.

If a partner has introduced you to us

Our partners can create a personal introduction for someone they know. When they do, the only information they give us is a first name, and optionally a fixed category describing how they know you. Our systems refuse an email address, a telephone number, or any other contact detail at that point. The partner sends you the introduction page themselves, from their own email or on their own letterhead. We do not send you anything.

The introduction page you receive tells you who asked us to prepare it and whether that person is paid if you go on to commission a memoir. We hold no way to contact you unless you provide it yourself on that page. If you do provide an email address, we use it to write to you about the memoir product, no more than twice, plus anything your own activity with us generates. Every message has a link that stops us, and we stop immediately and permanently. You can also stop us from the introduction page itself without giving us anything.

An introduction expires twelve months after it is created. We keep a record of it so we can credit the right partner if you decide to buy, and so we can honour a request to stop.

What the partner sees. The partner who introduced you sees your first name and the status of the introduction, for example whether the page was opened or whether a memoir was commissioned. They never see your email address, your telephone number, your postal address, or anything you tell us. That is a term of our agreement with them, not only a setting.

Two things we deliberately do not do

We do not place advertising or analytics trackers belonging to other companies on an introduction page. We do not ask partners for, and will not accept, information about anyone's health, care, finances, or circumstances.

CALL RECORDINGS AND TRANSCRIPTS

Telephone interviews are a core feature of the Services, and we want their data handling to be completely clear:

What Is Recorded: Interview-related calls are recorded. This includes calls with the AI interviewing voice, calls with human interviewers, Memory Line calls, call-backs that resume an interview, and editorial consultation calls.
Consent: Washington law, and the law of several other states, requires the consent of all parties to record a conversation. Consent is obtained in the call flow at or near the start of the call, and by participating in scheduled or initiated interview calls under our Terms of Service. If you do not consent, do not remain on the call; typed interview options exist.
Purpose: Recordings and their transcripts are used for the sole purpose of composing, editing, and producing the book and operating the Services (including quality assurance of our interview process and support). They are not sold and are not used for third-party advertising.
How Transcription Works: Recordings are transcribed by automated speech-to-text systems (Whisper). Transcripts feed the editorial pipeline that composes the book.
Who Processes Them: Telephony is carried by SignalWire; recordings and transcripts are stored on our infrastructure providers and processed by the AI systems listed in the processor section below, solely to produce the book.
Retention: Recordings and transcripts are kept while the storyteller's account exists, or until the storyteller (or their successor, as described in the next section) asks us to delete them, and are deleted within 30 days of a verified request, as described in the Data Retention section below.

WEB INTERVIEW RECORDINGS, VIDEO, AND CHAPTER CODES

When the storyteller answers in the web interview (Talk), we record what they say, so that the book keeps their own words and the family can hear them tell it.

What Is Recorded: Audio of every spoken answer in Talk. Video only if the storyteller says yes to the camera. A visible indicator shows whenever recording is taking place. Recordings are saved on the storyteller's device first and then uploaded to our storage, so an interrupted connection does not lose them.
Consent: Before the first session the storyteller sees a notice that their talks are recorded, and the interviewer asks aloud whether that is all right; the spoken answer is recorded. The camera is a separate, neutral choice ("Yes, use my camera" or "Just my voice", nothing selected in advance), and the camera stays off unless the storyteller chooses it. Only the storyteller consents; a gift buyer cannot consent for them. We keep a record of each consent: what was agreed, the wording shown, the version of our terms, and when.
Who Owns Them: The recordings belong to the storyteller. The buyer and the family can listen, watch, and download a copy for private family use only as the storyteller's choices allow, and the storyteller can withdraw that permission.
Chapter Codes (Sharing): A printed book can carry a small code at the start of each chapter. Scanning it plays the recordings of the answers that went into that chapter to anyone holding the book. This is sharing, and it needs its own yes: the storyteller is asked separately before printing, can turn the code off for any chapter at any time, and the buyer cannot override that choice. A code that is turned off plays nothing.
No Recognition, No Training: We do not use recordings for face recognition, voice recognition, voiceprints, or any other identification of a person, and we do not use them, or let our service providers use them, to train artificial intelligence models. Recordings are transcribed and given word timings by automated speech-to-text services solely to make the book and play the right passage for each chapter.
Retention: We keep the recordings while the storyteller's account exists, or until the storyteller (or, after their death or incapacity, the person described in item 8) asks us to delete them. We delete them within 30 days of a verified request; copies in backup systems are then overwritten in the ordinary backup cycle.
If We Ever Stop: If we stop offering recording playback or close the Services, we will give at least 90 days' notice by email and make a full download of the recordings available before playback ends.
After the Storyteller's Death or Incapacity: The storyteller can name a successor through the Story Keeper role in the family room. After the storyteller's death or incapacity, the Story Keeper (or, if there is none, the storyteller's legal representative, on proof of authority) can manage playback, chapter codes, downloads, and deletion, within the choices the storyteller made.
Changing Your Mind: Withdrawing consent is as easy as giving it. The storyteller can turn the camera off from the More menu in Talk, turn a chapter code off in the Studio, or email hello@sagaseal.com to have any recording deleted. Withdrawing consent stops future recording or sharing; it does not affect what was lawfully done before.

VOICE SAMPLES AND CUSTOM NARRATION VOICES

If you choose to create a custom audiobook narration voice:

What We Collect: A voice recording you submit for the purpose of creating a synthetic narration voice, and the resulting voice model.
Explicit Consent: We create a custom voice only from a sample submitted for that purpose, with the explicit consent of the person whose voice it is. Do not submit anyone else's voice without their express, informed consent.
Purpose and Scope: The voice sample and resulting voice are used solely to narrate the audiobooks of your own books created through the Services. We do not use them to identify anyone, do not use them for any other customer, do not use them for marketing without separate consent, and do not sell or share them, except with the service providers who process them on our behalf to render your audiobook.
Biometric-Adjacent Treatment: Some jurisdictions (for example, Illinois, Texas, and Washington) regulate voiceprints and similar identifiers under biometric or health data statutes. We treat voice samples with the care those statutes contemplate: collection only with informed consent, a written disclosure of purpose (this section), no sale, no disclosure except to processors, and defined retention and deletion.
Retention and Deletion: Voice samples and custom voice models are retained while your account has an active use for them and are deleted upon your verified request, subject to a reasonable period to complete deletion from production and backup systems. Audiobook files already rendered and delivered to you are unaffected by deletion of the voice model.

HOW WE USE YOUR INFORMATION

Per applicable law and controls that may be available to you, we use the information we collect to:

Make Your Book and Provide the Services

Conduct the interviews (in-app and by telephone) and collect the story;
Transcribe recordings and dictation;
Keep the storyteller's web interview recordings with the book and, where the storyteller has said yes, play them to people who scan a chapter code in the printed book;
Compose, edit, format, and produce the manuscript, ebook, print files, and audiobook with the assistance of AI systems;
Generate photo descriptions so photographs can be placed as plates;
Print, bind, and ship physical goods on applicable tiers;
Operate gift mechanics: deliver invitations, operate the buyer's progress view (metadata only), and hold the manuscript for the storyteller's first read;
Operate the family contribution feature, including holding contributions sealed from the storyteller until the finished book;
Provide customer support and process refunds.

Purpose limitation on Story Material: Story Material is used only to make the customer's book and operate the Services. It is not sold, is not used for advertising (ours or anyone else's), is never sent to our analytics or advertising providers, and is not used to compose books for other customers.

AI Processing

The interviewer the storyteller speaks with is an AI, not a person, and our AI turns the storyteller's own words from her interviews into the chapters of her book. She approves the book before it is printed, and our team may also check it. Our editorial pipeline uses third-party AI model providers to transcribe audio and compose and edit text. These providers receive Story Material solely to perform that processing for your book. We use contractual terms and provider configurations directed at ensuring that content submitted through our integrations is not used by the providers to train their models and is not retained beyond the processing needed to serve our requests, consistent with each provider's enterprise or API data-use terms.

Website Chat

Our order form and some of our website pages offer a chat. When you write in it, your messages are saved so we can help you. An AI assistant answers first (it runs on Anthropic's models), and a person from our team may read the conversation and join it. With your messages we keep what you had chosen on the order form at the time (for example the edition, extras and country), the approximate region of your connection (a state or province, never a street address), and a one-way scrambled form of your IP address that we use only to limit spam. Please do not share card numbers or health details in the chat.

Live Activity on Our Pages

We show anonymous activity on our pages (for example, "someone in Austin picked The Keepsake"). It never includes names or contact details, only an approximate place. To show it, we note what happened on our pages and order form (for example a page opened, an edition or extra chosen, an order placed), the approximate place of the connection (a city of 50,000 or more people, otherwise the state, region or country), and a random code kept in your browser so you are never shown your own activity. Each item is shown for at most one hour and deleted after seven days.

Communications

Send transactional emails: receipts, installment notices, gift invitations, magic sign-in links, stage and delivery notices, refund confirmations, and security alerts;
Place and receive the service telephone calls described above;
Respond to inquiries and support requests;
Send marketing communications where you have opted in (you can opt out at any time).

Measure Our Advertising

Learn which of our ads bring visitors and customers, so that we can stop paying for ads that do not work;
Count checkouts started and purchases completed, with their value, and report them to the platform that showed the ad.

This uses website and purchase data only, as described in "Advertising Measurement" below. It never uses Story Material.

Improve and Secure the Services

Analyze usage patterns, monitor performance, and fix problems;
Improve the product using usage data and aggregated, de-identified information (not the content of your story);
Detect, investigate, and prevent fraud, abuse, and security incidents;
Comply with legal obligations, enforce our Terms, and resolve disputes.

Aggregated and De-Identified Data

We may aggregate or de-identify information so that it can no longer reasonably be linked to you, and use that information for analytics, service improvement, and business purposes. We do not attempt to re-identify de-identified data.

ADVERTISING MEASUREMENT

We advertise SagaSeal on Google, on Microsoft Bing (Microsoft Advertising), on Meta (Facebook and Instagram), and in sponsored links on news and other websites through Taboola (its advertiser platform is called Realize). To know whether those ads work, and, on Google, to show our ads to people who have visited our public marketing pages, we use the tools those companies provide. We also use Microsoft Clarity to see how visitors use our public pages and our gift order form. Microsoft may use what Clarity collects for its own purposes, including advertising, so we describe it here, under the same limits and with the same way to stop it. This section says exactly what each tool receives and how to stop it.

What they never receive. Your Story Material: interview answers, recordings, transcripts, photographs, uploads, family contributions, manuscripts, and anything else you or the storyteller tell us for the book. We do not send any of it to Google, Microsoft, Meta, or Taboola, we do not use it to choose, target, or measure ads, and we do not build advertising profiles from anyone's story. The tags described below load only on our public marketing pages and on our order, checkout, and payment pages. They do not load on the pages a storyteller, contributor, or family member uses to make the book, on gift, family, introduction, or other private links, or on the pages shown after payment. On the pages where they do load, they receive the page address (without any codes or personal details in it) and the technical information described below. Apart from the purchaser's own contact details, sent in hashed form when a purchase completes as described below, we have not set them up to collect what you type or say, and our code does not send it to them. Microsoft Clarity records that you typed in a field, but not what you typed. Only the purchaser's own details are used this way: a gift recipient's contact details, and the details of anyone else entered for the book, are never used for ad measurement.

Google Analytics and the Google Tag

Our website loads Google's tag (gtag.js) for our Google Analytics 4 property. It records the pages you view, how you arrived (the referring website and any campaign tags in the link), your browser and device type, an approximate location that Google derives from your IP address, and a small set of actions we chose to measure: for example how far you scroll a page, which buttons you click on our sales pages, whether you play a sample film or audio, and the steps of checkout (the edition chosen, its price and currency, any coupon code, and an order or transaction number when a purchase completes). It sets cookies on our domain, such as _ga and _ga_<ID>, to recognize a returning browser.

Google Ads Conversion Measurement

The same Google tag reports to our Google Ads account. When a purchase completes, it tells Google Ads that a conversion happened, with the order's value, currency, and order number, and our Google Analytics property is connected to Google Ads so that the visits, checkouts, and purchases it records can also be counted there. The Google tag sets Google Ads measurement cookies on our domain, such as _gcl_au and _gcl_aw.

Enhanced conversions. So that Google can match a purchase to an ad click even when cookies are missing, the Google tag takes the purchaser's email address entered at checkout (and may also take the purchaser's name and telephone number), normalizes it, and hashes it with SHA-256 in your browser before sending it to Google with the purchase. Google compares the hash with the signed-in Google accounts that clicked our ads; Google's terms for enhanced conversions limit its use of the hash to measuring conversions. A hash is still personal data.

When you arrive by clicking one of our Google ads, the link carries a Google click identifier ("gclid", "wbraid", or "gbraid"). Our own server keeps it in a cookie on our domain, ss_gclick, for up to 90 days. If you buy, we store it with your order so that the purchase can be attributed to the click. We may also send it later from our server to Google Ads, with the order's value, currency, and time, to record the sale (an offline conversion upload).

Microsoft Advertising (UET)

Our website loads Microsoft's Universal Event Tracking tag (UET) for our Microsoft Advertising account. It records the pages you view, how you arrived, your browser and device information, and your IP address, and it reports a purchase to Microsoft Advertising, with its value and currency, when an order completes. It sets cookies on our domain such as _uetsid and _uetvid, and, when you arrive from a Microsoft ad, keeps Microsoft's click identifier ("msclkid", for example in _uetmsclkid); Microsoft may also recognize your browser through its own MUID cookie.

Enhanced conversions. As with Google, when a purchase completes the UET tag takes the purchaser's email address (and may take the purchaser's telephone number), normalizes it, and hashes it with SHA-256 in your browser before sending it to Microsoft, so that Microsoft can match the purchase to a Microsoft account that clicked our ad.

If you arrive by clicking one of our Microsoft ads, we store the msclkid with your order so that the purchase can be attributed to the click, and we may send it later from our server to Microsoft Advertising, with the order's value, currency, and time (an offline conversion upload).

Meta Pixel and Conversions API

Our website loads the Meta Pixel. It sends Meta the address of each page you view, your IP address, your browser and device information, and these events: a page view; the start of a checkout; a "lead" when you move forward in the memoir order form (only the product line, a memoir as a gift or for yourself, not anything you typed); and a purchase or trial start, with its value, currency, and the product and edition bought. It sets cookies on our domain, _fbp and, when you arrive from a Meta ad, _fbc (Meta's standard lifetime for both is 90 days). If you are signed in to Facebook or Instagram in the same browser, Meta may also recognize you through its own cookies.

When a purchase, trial, or subscription completes, our server also reports it directly to Meta (Meta's Conversions API), so that it is counted once even if your browser blocked the pixel. That report contains the value, currency, and product; the _fbp and _fbc values; the IP address and browser user agent used for the purchase; and the purchaser's email address in hashed form (SHA-256), never in readable form. Meta uses the hash to match the purchase to a Meta account that saw our ad. A hashed email address is still personal data, because Meta can compare it with email addresses it already holds.

Taboola (Realize) Pixel

Since November 1, 2026, our public marketing pages (including the SagaSeal Journal articles that our sponsored links lead to) and our order forms load the Taboola Pixel for our Taboola advertising account. It sends Taboola the address of each page you view, how you arrived (the referring website and any campaign tags in the link, including the identifier Taboola adds to its own ad links), your IP address, your browser and device information, and these events: a page view; the start of a checkout; a "lead" when you move forward in the memoir order form (only the product line, not anything you typed); adding payment details; and a purchase, with its value and currency. It does not receive your name, your email address, or anything you typed. Taboola may set or read its own cookies (for example t_gid) to recognize your browser and to match a purchase to a click on one of our sponsored links.

The Taboola Pixel follows the same limits as our other tags: it is not loaded for visitors in the European Economic Area (including Hungary), the United Kingdom, or Switzerland, or where we cannot determine the visitor's country; not on the pages a storyteller, contributor, or family member uses, on private links, or on pages you use while signed in; and not when your browser sends a Global Privacy Control signal or you have opted out on our "Do Not Sell or Share My Personal Information" page.

Links to Amazon

Some SagaSeal Journal articles recommend products sold on Amazon and link to them. As an Amazon Associate, SagaSeal earns from qualifying purchases. We do not load any Amazon tag on our pages and we send Amazon nothing about you. If you click one of those links, you leave our website, and Amazon and its partners may set or read cookies on Amazon's website, under Amazon's privacy notice, to credit the sale to SagaSeal.

Microsoft Clarity (Session Recordings and Heatmaps)

Since October 21, 2026, our public marketing pages and our gift order form use Microsoft Clarity, a tool that records how a page is used so that we can see what confuses visitors and fix it. It runs only for visitors in the United States. It records mouse movements, clicks, taps, and scrolling; your screen size, browser, and device type; the address of the page (its path and any campaign tags, including advertising click identifiers such as Google's gclid and Meta's fbclid, nothing else); the website you came from; and your IP address. From these recordings Clarity also builds heatmaps: pictures of where visitors click and how far they scroll, combined across many visits.

We set Clarity to hide every word on the page and everything you type, in your browser, before anything is sent to Microsoft. A recording shows that you typed in a field, but not what you typed: not your name, not the name of the person the gift is for, not the questions you write for them, and not your email address. Card details are entered in Stripe's own secure frame, which Clarity cannot see. Clarity stops recording when you press the button to pay. It never runs on the pages shown after payment, on pages you use while signed in, on gift, family, introduction, or other private links, or anywhere a storyteller records, writes, or reads their story.

Clarity sets two cookies on our domain: _clck, which recognizes a returning browser for up to one year, and _clsk, which joins the pages of one visit into a single recording and lasts one day. We tell Clarity not to use advertising storage. We do not connect Clarity to our Microsoft Advertising or Google Analytics accounts, and we do not give Clarity your name, email address, or any other detail that identifies you. Microsoft keeps recordings for 30 days; a small random sample, and any recording we choose to keep, for up to nine months. Only our own team watches the recordings, and only to improve our pages.

How Google, Microsoft, Meta, and Taboola Use This Data

Google, Microsoft, Meta, and Taboola process this data partly to provide measurement to us and partly for their own purposes under their own terms, including measuring and improving how they deliver ads. These tools also make it possible to show our ads to people who have visited our website (called remarketing or retargeting). We do this with Google, as described in "Remarketing on Google" below. If we ever do it with Microsoft or Meta, it will likewise be based only on the visits and events described above, never on Story Material. For visitors in the European Economic Area, the United Kingdom, and Switzerland, SagaSeal and Meta are joint controllers for collecting this data on our website and sending it to Meta, under Meta's Controller Addendum; Meta alone is responsible for what it does with the data after it receives it. Google explains its use at policies.google.com/technologies/partner-sites, Microsoft at privacy.microsoft.com/privacystatement, and Meta at facebook.com/privacy/policy.

Microsoft Clarity works the same way. Under Microsoft's terms for Clarity, Microsoft is not our service provider: it may use what Clarity collects for its own purposes under the Microsoft Privacy Statement, including improving its products and building profiles used for advertising. Microsoft collects or receives personal data from our website, through Clarity and our Microsoft Advertising tag, in part to provide Microsoft Advertising. For that reason we treat Clarity like our advertising tags: the same opt-out stops it, and California law may treat it as "sharing" or a "sale" (see "California Privacy Rights" below). Microsoft's privacy statement is at https://privacy.microsoft.com/en-us/privacystatement.

We do not use any other advertising or tracking tags on our website (for example, TikTok, Reddit, or LinkedIn tags). If we add one, we will update this section before it goes live.

Remarketing on Google

We use Google's remarketing, a form of personalized advertising: Google may show our banner ads on other websites and apps that display Google ads to people who have visited our website before.

How it works. When you visit one of our public marketing pages (our home page and the pages that describe and sell SagaSeal), the Google tag and Google Analytics record the visit, as described above. We use those records to place your browser on an audience list in Google Ads or Google Analytics (for example, "visited the memoir gift page"). Google may then show our ads to browsers on that list. To do this, Google uses the cookies on our domain described above together with its own advertising cookies on its own domains (such as the IDE cookie on doubleclick.net). If you are signed in to a Google account that allows personalized ads, Google may also connect the list to your account and show our ads on your other devices.
What our lists are built from, and what they leave out. We build these lists only from visits to our public marketing pages. We never build them from Story Material, and we never send Story Material to Google. We do not build them from the pages a storyteller, contributor, or family member uses, from gift, family, introduction, or other private links, or from pages you use while signed in. We exclude browsers that have completed a purchase with us, so a customer is not followed by ads for something already bought. We do not build lists based on health or any other sensitive category, and we do not upload customer email lists to Google for remarketing.
Where we do not do it. Our website loads none of these tags for visitors in the European Economic Area (including Hungary), the United Kingdom, or Switzerland, or where we cannot determine the visitor's country, so those visitors are never placed on our lists.
How long. A browser stays on a list for the period we set in Google's settings (Google allows at most 540 days), measured from its most recent qualifying visit.

How to stop remarketing. Any one of these works:

Our privacy choices page: press "Do not sell or share my personal information" at sagaseal.com/privacy-choices. From then on, that browser loads none of our advertising or analytics tags on our website, so it is not added to our lists, and we send no reports of your purchases to Google, Microsoft, or Meta. The choice is saved in that browser only, so repeat it on each browser and device you use.
Global Privacy Control: if your browser sends the Global Privacy Control signal, we treat it exactly as if you had pressed that button.
Google's settings: turn off personalized ads in Google's My Ad Center (myadcenter.google.com), also reachable from Google's ads settings page (adssettings.google.com). Google then stops showing you ads based on your visits to other websites, including ours.
Industry opt-out: opt out of interest-based ads from participating companies, including Google, at optout.aboutads.info.

Our privacy choices page and the Global Privacy Control stop new additions from that browser. A browser already on a list leaves it when its membership period ends; to stop our ads at once, also turn off personalized ads in Google's My Ad Center. Opting out does not stop ads altogether: you may still see ads, including ours, that are not based on your visits to our website.

Legal Basis in Europe

Where the law requires your consent before non-essential cookies are placed or read on your device, as it does in the European Economic Area (including Hungary), the United Kingdom, and Switzerland, consent is the legal basis we rely on for the analytics and advertising measurement described in this section, including enhanced conversions (the hashed contact details) and the purchase reports and click uploads sent from our server. You may refuse or withdraw consent at any time, as easily as you gave it, using the routes below, and refusing never limits your use of the Services.

How to Opt Out

On our website: press "Do not sell or share my personal information" at sagaseal.com/privacy-choices, or turn on the Global Privacy Control in your browser, which we treat the same way. Either one stops that browser loading our advertising and analytics tags on our website, including Microsoft Clarity, removes Clarity's cookies from that browser, and means we send no purchase reports, hashed contact details, or click identifiers to Google, Microsoft, or Meta for an order placed from it.
In your browser: block or delete cookies, block third-party cookies, or use a private window. Blocking these cookies does not affect your use of the Services.
Google: turn off ad personalization at myadcenter.google.com, and install Google's opt-out add-on for Google Analytics at tools.google.com/dlpage/gaoptout.
Microsoft: turn off personalized ads at account.microsoft.com/privacy/ad-settings. To stop Microsoft Clarity on every website that uses it, not only ours, choose Microsoft at optout.aboutads.info; Clarity also honors the Global Privacy Control.
Meta: use the ad preferences and "Your activity off Meta technologies" settings in your Facebook or Instagram Accounts Center to disconnect activity that websites share with Meta.
Ask us: email hello@sagaseal.com with the subject line "Do Not Share". We will stop sending purchase reports and click uploads about you from our servers to Google, Microsoft, and Meta, and we will confirm when it is done. To stop the tags in your own browser as well, use our privacy choices page or the browser route above.

HOW INFORMATION IS SHARED

The Gift Structure: Who Sees What

The Services are deliberately built so that the storyteller controls their story:

The buyer of a gift sees progress metadata only (for example, that a call happened, its duration, and the current project stage). The buyer does not see interview answers, recordings, transcripts, or manuscript content before the storyteller releases the book.
The storyteller is the first reader. No one, including the buyer, is shown the manuscript until the storyteller indicates it is ready, except as required by law.
Family contributions are sealed from the storyteller until the finished book, and each contributor's name appears with their story in the book. Contributors should assume the storyteller, the buyer, and the family will read their contribution in print.
Contributor identity: We collect a contributor's name and email to attribute their story and communicate about the project. We do not sell contributor information or use it for unrelated marketing.

Tokenized Links

Certain surfaces (gift invitations, contribution links, family dashboards, reader and preview links, share pages, and the chapter codes printed in a book) are accessed by possessing a link or code rather than a password. Anyone holding such a link can view what it unlocks, and shared preview pages may include public share cards. Safeguard links sent to you and forward them only to intended people. If a link is compromised, contact us and we will disable it where feasible.

Service Providers (Processors)

We share information with service providers who process it on our behalf, under contracts that limit their use of the data to providing services to us. In short, the categories are: AI model providers (writing and editing the book, and the AI interviewer), speech-to-text providers (turning recordings into text), printing and shipping (Lulu), payments (Stripe), telephony, email delivery, and hosting, storage, and databases. Our current categories and principal providers are:

Payments: Stripe (payment processing, subscription billing, installment charges, and Stripe Connect payouts to referral partners). Stripe handles card data; we do not store card numbers.
Telephony: SignalWire (carrying interview calls, the Memory Line, call-backs, and call recording).
Transcription: OpenAI Whisper, AssemblyAI, and Deepgram (speech-to-text and word timings for recordings and dictation), under terms that do not let them train their models on the audio.
AI Composition: Multiple AI model providers accessed via OpenRouter, Anthropic, Google, and other providers (composing and editing text, generating photo descriptions and narration), solely to produce your book as described above. Some of this processing (the interviewer's planning and return-visit questions, the list of people and places in your story, the follow-up questions drawn from a written chapter, and the check of our clean-up of spoken answers) uses OpenAI models served through Microsoft Azure, and DeepSeek models run by US-based hosting providers (Fireworks AI, Together AI, and DeepInfra), never on DeepSeek's own servers. We reach these models through OpenRouter only on zero-data-retention routes, so the providers do not keep your content after processing it.
Email Delivery: Zoho ZeptoMail (transactional email).
Hosting and Infrastructure: Cloudflare Workers and Vercel (application hosting), Cloudflare R2 (storage of recordings and files), Hetzner (compute, including preparing playback copies of recordings), and Neon/Postgres (database).
Address Autocomplete: LocationIQ (assisting address entry at checkout; receives the address text you type).
Printing and Shipping: Lulu Press, Inc. (printing, binding, and shipping of books), and the carriers it uses. Lulu receives the print files, which contain the full text and photographs of the book, and the recipient name and shipping address needed to produce and deliver the order. Lulu prints in the United States and in other countries (including the United Kingdom, France, Canada, Australia, and India), usually at the facility nearest to the delivery address. Gift boxes and other physical items are shipped by our packaging and fulfilment suppliers, who receive only the name and address needed to deliver them.
Analytics: Google Analytics 4 (Google LLC; Google Ireland Limited for users in Europe), for usage analytics on the Site, as described in "Advertising Measurement".

We require service providers to use your information only for the purposes we have authorized, to protect it with appropriate security, to comply with applicable data protection laws, and not to sell it.

Advertising Partners

These companies receive the limited website and purchase data described in "Advertising Measurement" and use it partly for their own purposes under their own terms. They never receive Story Material.

Google (Google LLC; Google Ireland Limited for users in Europe): Google Ads conversion measurement through the Google tag, enhanced conversions (hashed purchaser contact details), conversions imported from Google Analytics, and uploads of the ad click identifier stored with an order.
Microsoft (Microsoft Corporation; Microsoft Ireland Operations Limited for users in Europe): the Microsoft Advertising UET tag, its enhanced conversions (hashed purchaser contact details), uploads of the msclkid stored with an order, and Microsoft Clarity session recordings and heatmaps of our public pages and gift order form.
Meta (Meta Platforms, Inc.; Meta Platforms Ireland Limited for users in Europe): the Meta Pixel on the Site and the Conversions API reports sent from our server when a purchase, trial, or subscription completes.

What We Do Not Do

We do not sell Story Material, and no one pays us for personal information. (California treats the advertising measurement above as "sharing"; see the California section.)
We do not share Story Material with advertisers, advertising platforms, or data brokers.
We do not publish your book or send it to any retail platform; if you publish, you do that yourself.

Legal Compliance and Protection

We reserve the right to access, preserve, and disclose your information when we believe, in good faith, that doing so is reasonably necessary to:

Comply with applicable laws, regulations, legal process, or governmental requests;
Respond to valid requests from law enforcement or government authorities;
Enforce our Terms of Service, investigate potential violations, or protect our rights and property;
Protect the safety, security, rights, or property of SagaSeal, our users, or the public;
Detect, prevent, or address fraud, security, or technical issues;
Complete a corporate transaction such as a merger, acquisition, reorganization, or sale of assets (in which case we will require the recipient to honor this Privacy Policy).

We will use reasonable efforts to notify you of such disclosures unless prohibited by law or court order.

Links to Other Websites

Our Site may include links to other websites or services whose privacy practices differ from ours. When you use a link to an external site or service, that site's privacy policy governs. We are not responsible for the privacy practices of third-party websites.

SENSITIVE INFORMATION IN A LIFE STORY

What it is. A life story often includes information that the law treats as especially sensitive: health and illness, religious or philosophical beliefs, family relationships and conflicts, sex life, ethnic origin, political opinions, and trade union membership ("special categories" of data under Article 9 of the GDPR and the UK GDPR, and "sensitive personal information" under other laws).

Why we process it, and on what basis. We process this information only because the storyteller chose to tell it for their book, and only to make that book. In the European Economic Area, the United Kingdom, and Switzerland, our legal basis is the storyteller's explicit consent (GDPR and UK GDPR Article 9(2)(a)). The storyteller gives that consent personally, in their own interview, by choosing what to tell. The storyteller can skip any question, decline any topic, ask us to leave anything out of the book, and withdraw consent at any time by writing to hello@sagaseal.com. Withdrawing does not affect what was done before, but it may mean that we cannot finish the book.

Only the storyteller can consent for their own story. A gift buyer, a family member, or a contributor cannot give this consent on the storyteller's behalf. Buying a gift does not give the buyer any right to see the storyteller's answers or recordings (see "The Gift Structure: Who Sees What").

What we do not do with it. We never use sensitive information for advertising, never send it to our analytics or advertising providers, never sell it, and never use it to make decisions about the storyteller. Our AI and speech-to-text providers receive it only to write and produce the book, as described in "AI Processing".

PEOPLE NAMED IN A STORY

A life story names other people: a husband, children, neighbours, friends. Some of what is said about them may be sensitive. Here is how we handle it:

Why we hold it. We process what the storyteller says about other people only to make the storyteller's book, which is a private family book unless the customer decides otherwise. In the European Economic Area and the United Kingdom, our legal basis for this is our legitimate interest, and the storyteller's, in recording their own life story (GDPR Article 6(1)(f)), together with the protection national law gives to personal and artistic expression. We keep it to what the story needs, and we never use it for any other purpose.
The storyteller decides. Before printing, the storyteller reads the whole book and can remove any person, change a name, or describe someone without naming them. Our product also asks, after the deep interview stage, whether there is anything the storyteller would rather leave out.
If you are named in a story. You can write to hello@sagaseal.com with the subject line "A story that names me". Tell us your name and, if you know it, whose book it is. If the book has not been printed, we will tell the storyteller (or, on a gift, the storyteller and not the buyer) and ask the storyteller to remove you or change your name, and where the law gives you the right to have your data erased, restricted, or not processed, we will do that. If the book has already been printed, we cannot recall copies that belong to the family, but we will remove or pseudonymise you in our own copy and in any reprint. We do not disclose to you the rest of the storyteller's story.
Contributors. A family member who sends a memory through a contribution link controls their own contribution and can ask us to remove it before printing.

DATA RETENTION

Active Accounts and Projects: We retain your information as long as your account is active and as necessary to provide the Services, including supporting reprints, corrections, and re-downloads of your files.

Story Material: Interview answers, recordings (including web interview audio and video), transcripts, photographs, uploads, and contributions are kept while the storyteller's account exists, so that the book, its chapter codes, reprints, and downloads keep working, or until the storyteller (or, after the storyteller's death or incapacity, their Story Keeper or legal representative) asks us to delete them. We delete material we are asked to delete within 30 days of a verified request, after which backup copies are overwritten in the ordinary backup cycle. If we ever stop offering playback of recordings or close the Services, we will give at least 90 days' notice and make a full download available first. Audiobook files are subject to a stated retention window after generation, with recovery paths, as described in the product.

Voice Samples and Custom Voices: Retained as described in the Voice Samples section above and deleted on verified request.

Website Recordings: Microsoft keeps Clarity session recordings for 30 days, and a small random sample, and any recording we choose to keep, for up to nine months. Clarity does not let us delete a single recording before then. The recordings hide all page text and typing, and we do not link them to your name or email address.

Unfinished Orders: If you give us your name and email on the order form and do not finish the order, we may send you one email with a link back to that order, and never another about it; every such email has an unsubscribe link. We delete the name, email, and saved order from an order that was never paid 90 days after you last worked on it.

Deleted Accounts: When you delete your account through settings or by verified request, we delete or de-identify your personal information within 90 days, except as described below.

Legal and Business Purposes: We retain information as necessary to comply with legal obligations (for example, tax and payment records), resolve disputes, enforce agreements, prevent fraud, and maintain required business records.

Backups: Information may persist in backup systems for a limited period after deletion for disaster recovery purposes, after which it is overwritten in the ordinary course.

DATA TRANSFERS

Ostrel Software LLC is a United States company. Your information will be collected, processed, and stored in the United States, and with infrastructure providers that may process data in other countries (for example, European hosting locations used by our compute provider). Google, Microsoft, and Meta, which receive the advertising measurement data described above, process it in the United States and other countries.

United States Data Protection: The rules that protect personal information under United States law may differ from those in your home country.

European Economic Area, United Kingdom, and Switzerland: If you are located in these regions, you give your personal data to us, a United States company, and we process it in the United States. When we pass it on to our service providers, it may be processed in the United States and in the other countries where they operate (for example, Lulu may print in the United Kingdom, France, Canada, Australia, or India). For those onward transfers we rely on the EU-US Data Privacy Framework, its UK Extension, and the Swiss-US Data Privacy Framework where the provider is certified under them, and otherwise on the European Commission's Standard Contractual Clauses (with the UK Addendum and the Swiss amendments where they apply), together with the additional safeguards described in "Security" and "AI Processing". You can ask us for a copy of the relevant safeguards by writing to hello@sagaseal.com.

Canada, Australia, and New Zealand: If you are located in these countries, your personal information will be processed in the United States and in the other countries where our service providers operate, as listed in "Service Providers (Processors)". The laws of those countries may differ from yours. We remain responsible for your information when our providers process it for us, and we require them by contract to protect it to a standard comparable to the law of your country.

YOUR RIGHTS

Rights for All Users

Regardless of location, all SagaSeal users can:

Access and Export Your Data: Use the export feature in account settings to receive a copy of your data, or contact us for assistance;
Update Information: Correct your account and shipping information in settings;
Delete Your Account: Use the delete account flow in settings, or send a verified request; deletion emails are sent to confirm the request;
Opt Out of Marketing: Unsubscribe from marketing emails at any time;
Control Cookies and Ad Measurement: Manage cookies through your browser, and opt out of advertising measurement and remarketing at sagaseal.com/privacy-choices, with the Global Privacy Control, or through the other routes in "Advertising Measurement";
Contact Us: Reach out with questions or concerns at hello@sagaseal.com.

European and UK Data Protection Rights (GDPR and UK GDPR)

If you are in the European Economic Area, you have these rights under the GDPR. If you are in the United Kingdom, you have the same rights under the UK GDPR and the Data Protection Act 2018. You have the right to:

Access: Request a copy of the personal data we hold about you;
Rectification: Correct inaccurate or incomplete personal data;
Erasure: Request deletion of your personal data;
Restriction: Request restriction of processing;
Portability: Receive your personal data in a structured, commonly used, machine-readable format;
Object: Object to processing based on legitimate interests;
Withdraw Consent: Withdraw consent at any time for processing based on consent (such as call recording going forward, web interview recording, video, chapter code playback, custom voice creation, or marketing), without affecting processing already carried out. Withdrawing is as easy as giving consent: use the same screens where you said yes, or send one email to hello@sagaseal.com;
Complain: Lodge a complaint with the data protection authority of the country where you live or work, or where you think the problem happened. For customers in Hungary, that authority is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH); in Ireland, the Data Protection Commission; in the United Kingdom, the Information Commissioner's Office (ICO).

Legal Bases: We process personal data on the following bases: performance of our contract with you (making your book, delivering goods, billing); consent (call recording, web interview audio recording, optional video, chapter code playback, voice samples, marketing, optional cookies, analytics and advertising measurement as described in "Advertising Measurement", and the sensitive categories described below); legitimate interests (service security, fraud prevention, and product analytics from our own server logs), balanced against your rights; and legal obligation (tax, accounting, and compliance records).

Special Categories: See "Sensitive Information in a Life Story" below.

Data Controller: For EEA and UK users, Ostrel Software LLC is the data controller. Contact: hello@sagaseal.com. See also "EU and UK Representative".

Switzerland

If you are in Switzerland, the Federal Act on Data Protection (FADP) gives you rights to information about, access to, correction of, and deletion of your personal data, the right to object, and the right to receive your data in a usable format. You can exercise them by writing to hello@sagaseal.com. You can complain to the Federal Data Protection and Information Commissioner (FDPIC).

Canada

If you are in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law. You can ask to access and correct your personal information and withdraw your consent, subject to legal and contractual limits. Our privacy officer can be reached at hello@sagaseal.com (subject line "Privacy Officer") or at our mailing address. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, where it applies, your provincial privacy commissioner.

Australia

If you are in Australia, we handle your personal information consistently with the Australian Privacy Principles in the Privacy Act 1988. You can ask to access and correct the personal information we hold about you by writing to hello@sagaseal.com. Your information is disclosed to the overseas recipients described in "Service Providers (Processors)", mainly in the United States. If you have a complaint, write to us first; we answer within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC).

New Zealand

If you are in New Zealand, the Privacy Act 2020 gives you the right to ask for access to, and correction of, the personal information we hold about you. Write to hello@sagaseal.com. We disclose personal information to our overseas service providers only where they are required to protect it in a way that, overall, gives comparable safeguards to those in the Privacy Act 2020. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner.

EU and UK Representative

The GDPR and the UK GDPR ask a company outside Europe that offers its products to people in the European Union or the United Kingdom to name a representative there (Article 27). Our representative in the European Union and our representative in the United Kingdom will be listed here, with their contact details, as soon as they are appointed. Until then, please write to us directly at hello@sagaseal.com or to our mailing address; we answer every request from the European Union and the United Kingdom ourselves, within the time the law allows.

California Privacy Rights (CCPA/CPRA)

This section applies to California residents and supplements the rest of this Policy.

Categories of Personal Information Collected (past 12 months):

Identifiers: Name, email address, postal address, telephone number, IP address, device identifiers, online identifiers (cookie identifiers and ad click identifiers), and a purchaser's hashed email address (and, where used, hashed name and telephone number) used for ad measurement;
Customer Records: Shipping address, payment metadata (via Stripe), purchase and subscription records;
Commercial Information: Purchase history, refund history, installment schedules;
Audio, Electronic, Visual, or Similar Information: Call recordings, web interview audio and (if the storyteller chooses) video recordings, voice dictation, voice samples, photographs;
Internet Activity: Browsing and usage information on our Site, including whether you arrived from one of our ads, and, on our public pages and gift order form, recordings of clicks, taps, and scrolling made with Microsoft Clarity, with all page text and typing hidden;
Geolocation Data: General location derived from IP address;
Sensitive Personal Information: The contents of Story Material may reveal health, religious, or other sensitive information; voice samples may be considered biometric-adjacent. We use sensitive personal information solely to provide the Services you request (making your book), which is a permitted purpose under the CPRA, and we do not use it to infer characteristics about you for other purposes;
Inferences: Limited product-usage inferences (for example, feature preferences). We do not build advertising profiles from Story Material.

Sources: Directly from you, from the storyteller and contributors on your project, and automatically from your devices.

Business Purposes: As described in "How We Use Your Information."

Categories of Third Parties: The service provider categories listed above; the advertising partners listed above (Google, Microsoft, and Meta); government authorities when legally required.

Sale or Sharing: No one pays us for personal information, and we do not sell or share Story Material under any definition. Our advertising measurement is different. Because Google, Microsoft, and Meta may use what their tags and our purchase reports send them for their own advertising purposes, we treat the Google tag (including Google Ads conversion measurement and enhanced conversions), the Microsoft UET tag (including its enhanced conversions), Microsoft Clarity, the Meta Pixel and Conversions API, and our uploads of ad click identifiers as "sharing" of personal information for cross-context behavioral advertising under the CPRA (Cal. Civ. Code § 1798.140(ah)), and, to the extent California law would call any of it a "sale", as a sale as well. This includes our remarketing on Google, which uses visits to our public marketing pages to show our ads to past visitors on other websites (see "Remarketing on Google"). We share these categories, for the purposes of measuring and improving our advertising and, with Google, showing our ads to past visitors:

With Google and Microsoft: identifiers (cookie and click identifiers, IP address, and, for purchasers, a hashed email address and possibly a hashed name and telephone number), commercial information (checkouts and purchases, with value and product), and internet activity (pages viewed and the events described in "Advertising Measurement"; with Google, inclusion in our remarketing lists; and, with Microsoft, Clarity's recordings of clicks, taps, and scrolling on our public pages and gift order form);
With Meta: identifiers (cookie and click identifiers, IP address, and, for purchasers, a hashed email address), commercial information (checkouts started and purchases, with value and product), and internet activity (pages viewed and the events described in "Advertising Measurement").

In the past 12 months, this sharing has been with Meta (since June 2026) and Google; Microsoft Advertising, Microsoft Clarity, and the enhanced conversions described above begin in October 2026.

We do not share sensitive personal information, and we do not knowingly sell or share the personal information of anyone under 16. You have the right to opt out of this sharing. Press "Do not sell or share my personal information" at sagaseal.com/privacy-choices, turn on the Global Privacy Control in your browser (we treat it as a valid request to opt out of sale and sharing for that browser), or use the other routes in "How to Opt Out" under "Advertising Measurement", including the email route (subject line "Do Not Share").

Your Rights: California residents may request to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and not be discriminated against for exercising these rights. To exercise them, email hello@sagaseal.com with the subject line "Privacy Rights Request" or use your account settings. We verify requests, respond within 45 days (extendable by 45 days where permitted), and accept requests from authorized agents with proof of authorization.

Shine the Light: California residents may request information about disclosure of personal information to third parties for their direct marketing purposes; we do not disclose personal information for third parties' direct marketing.

Washington My Health My Data Act

We are a Washington company, and life stories often mention health. Washington's My Health My Data Act protects "consumer health data," which is defined broadly. Our position and practices:

We do not collect health information for its own sake; health details appear in Story Material only because the storyteller chose to include them in their story;
We use such content solely to compose the book requested, with the consent of the person providing it, and we do not sell it or use it for advertising. Our advertising measurement tools receive only the website and purchase events described in "Advertising Measurement"; we do not send them Story Material or any health information;
To the extent any content we hold constitutes consumer health data under the Act, we collect and use it only with consent and only as necessary to provide the product requested, we do not sell it, and Washington consumers may exercise the Act's rights of access, withdrawal of consent, and deletion by contacting hello@sagaseal.com;
Web interview recordings can contain health details in the storyteller's own voice. We ask for consent to collect them (the recording notice before the first session) and, separately, for consent to share them (the chapter code question before printing). Recordings are not shared through chapter codes without that second yes, and the storyteller can withdraw either consent at any time.

Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, obtain a copy of, and opt out of certain processing of their personal data, including rights to consent or opt out regarding sensitive data, and the right to opt out of targeted advertising and of the sale of personal data. Some of these laws may treat the advertising measurement described in "Advertising Measurement" as targeted advertising or a sale; you can opt out of it through the routes listed there. We honor verified requests under these laws. Contact hello@sagaseal.com.

Nevada Residents

Nevada residents have the right to opt out of the sale of certain covered information. SagaSeal does not sell covered information as defined under Nevada law. To submit a request, email hello@sagaseal.com with "Nevada Opt-Out Request" in the subject line.

How to Exercise Your Rights

Account Settings: Use the export and delete flows in your account settings;
Email Request: Send a request to hello@sagaseal.com with the subject line "Privacy Rights Request";
Verification: To protect your privacy, we may need to verify your identity before fulfilling a request. For requests concerning a storyteller's material on a gift project, we verify with the storyteller, consistent with the gift structure described above.

Response Time: We respond to verified requests within the timeframes required by applicable law (typically 30 to 45 days). We do not charge a fee unless a request is excessive, repetitive, or manifestly unfounded.

EMAIL AND TELEPHONE COMMUNICATIONS

Transactional Emails: We send emails necessary to deliver the Services (receipts, installment notices, gift invitations, sign-in links, stage and delivery notices, refund confirmations, security alerts). These cannot be opted out of while you use the Services.

Marketing Emails: You may opt in to marketing communications and can opt out at any time via the unsubscribe link in any marketing email or by contacting hello@sagaseal.com.

Service Telephone Calls: If you use telephone features, we will call and accept calls from your number for interview and service purposes, as described in the Terms of Service. These are service calls, not telemarketing. You may withdraw consent to be called, in which case telephone features may become unavailable.

SECURITY

We implement industry-standard security measures, including:

Encryption: HTTPS/TLS encryption for data in transit and encryption for sensitive data at rest;
Access Controls: Access to Story Material limited to personnel and systems that need it to produce your book and support you;
Authentication: Account credential protections; single-use and expiring characteristics on tokenized links where feasible;
Vendor Security: Vetting of service providers' security practices;
Monitoring and Response: Monitoring for security threats and established incident response procedures.

Security Limitations: No method of transmission or storage is completely secure. While we use commercially reasonable means to protect your personal data, we cannot guarantee absolute security.

Your Responsibility: Keep your credentials confidential, safeguard tokenized links and printed codes sent to you, and notify us promptly of any suspected unauthorized access at hello@sagaseal.com.

COOKIES AND TRACKING TECHNOLOGIES

Types of Cookies We Use

Essential Cookies (required): Authentication, security, session management, access to the site during private testing (sagaseal_beta_access), and fraud prevention. These cannot be disabled.
Functional Cookies (optional): Language preference (sagaseal_locale, English or Hungarian), display preferences, feature settings, your advertising opt-out (ss_optout, set when you use our privacy choices page or your browser sends the Global Privacy Control, so that our tags stay off for that browser), and your country (ss_cc, set by our server for every visitor and kept for 24 hours; it holds only a two-letter country code derived from your IP address, or a placeholder when the country is unknown, and decides which analytics and advertising tags, if any, may load, so that none load in the European Economic Area, the United Kingdom, or Switzerland).
Referral Cookies (optional): If you arrive through a link from one of our Royalty Partners, our server records which partner sent you (ss_via, and ss_via_c for the partner's campaign) for up to 90 days, so that the partner can be credited if you buy. These hold only the partner's public link name.
Analytics Cookies (optional): Google Analytics (_ga, _ga_<ID>), which helps us understand how the Site is used, Microsoft Clarity (_clck, up to one year, and _clsk, one day), set only on our public pages and gift order form for visitors in the United States, which joins the pages of a visit into one recording, and the campaign source tags our server keeps (ss_utm, up to 90 days): when you arrive through a link carrying campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content), it records those tags and the time, and if you buy, we store them with your order so that we know which campaign brought the sale. It is not set for visitors in the European Economic Area, the United Kingdom, or Switzerland.
Advertising Measurement Cookies (optional): The Google Ads click identifier our server keeps (ss_gclick, up to 90 days); the Microsoft Advertising click identifier our server keeps (ss_msclick, up to 90 days), which holds the msclkid and the time you arrived from a Microsoft ad and is stored with your order if you buy (our server sets neither of these two for visitors in the European Economic Area, the United Kingdom, or Switzerland); Google Ads measurement cookies set by the Google tag (such as _gcl_au and _gcl_aw); Microsoft's UET cookies (such as _uetsid, _uetvid, and _uetmsclkid, and Microsoft's own MUID); and the Meta Pixel's cookies (_fbp and _fbc). They tell us whether a visit or purchase came from one of our ads. Google also uses its own advertising cookies on its own domains (such as IDE on doubleclick.net) for our remarketing on Google. See "Advertising Measurement" above.

Managing Cookies

You can control cookies through your browser settings (view, delete, or block cookies, including third-party cookies). The Site does not yet have its own cookie settings panel. For analytics, advertising measurement, and remarketing you can use our privacy choices page (sagaseal.com/privacy-choices), the Global Privacy Control, the Google, Microsoft, and Meta controls, and the "Do Not Share" email route described in "Advertising Measurement". Blocking essential cookies may prevent the Site from functioning; blocking analytics, referral, or advertising measurement cookies does not affect your use of the Services.

Do Not Track and Global Privacy Control

There is currently no industry standard for Do Not Track signals, and we do not respond to them. Our website responds to the Global Privacy Control. If your browser sends it, we treat it as a request to opt out of the sale and sharing of your personal information: that browser loads none of our advertising or analytics tags on our website, including Microsoft Clarity, it is not added to our remarketing lists, and we send no purchase reports, hashed contact details, or click identifiers to Google, Microsoft, or Meta for an order placed from it. We do not recognize other browser-based signals, but you can use the routes in "Advertising Measurement".

Cookie Duration

Session cookies are deleted when you close your browser; persistent cookies remain for a defined period or until you delete them. Our own referral, Google Ads click, Microsoft Advertising click, and campaign source cookies (ss_via, ss_via_c, ss_gclick, ss_msclick, ss_utm) last up to 90 days, our country cookie (ss_cc) 24 hours, and our advertising opt-out cookie (ss_optout) about 400 days, the longest a browser keeps a cookie. Under the providers' standard settings, Google Analytics cookies last up to two years, Google Ads cookies 90 days, Microsoft's UET visitor cookie about 13 months, Microsoft Clarity's _clck cookie one year and its _clsk cookie one day, and the Meta Pixel's cookies 90 days.

CHILDREN'S PRIVACY

Accounts and Purchases: The Services are not directed at children. You must be at least 18 to create an account, make a purchase, or be the storyteller of a project.
Family Contributors: Contribution links may reach family members of different ages. Contributions are not accepted from children under 13. A contributor between 13 and 17 should submit only with the permission of a parent or guardian, and the contribution should be limited to the written memory, name, and email needed to attribute it.
No Knowing Collection: We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has submitted information, contact us immediately at hello@sagaseal.com.
Children in Stories: Life stories and photographs may describe or depict family members who are minors. The customer and storyteller are responsible for including such material appropriately; we use it only to make the book.

CONTACT INFORMATION

For questions about this Privacy Policy or to exercise your privacy rights, please contact us at:

Email: hello@sagaseal.com

Mailing Address: Ostrel Software LLC Attn: Privacy 522 W Riverside Ave, Ste N Spokane, WA 99201

Response Time: We will respond to privacy inquiries within 30 to 45 days, or as required by applicable law.

UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on our Site, updating the "Last Updated" date, and, for material changes, sending an email notification or displaying a notice on the Site. For significant changes that materially affect your rights, we may require you to affirmatively accept the new Privacy Policy before continuing to use the Services.

EFFECTIVE DATE

This Privacy Policy is effective as of the date listed at the top of this document.

BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY.

End of Privacy Policy