Privacy Notice

Last updated: August 24, 2026

This Privacy Notice explains how InboxSuite Inc., a Delaware corporation doing business as Mystic Owl, collects, uses, discloses, and retains personal information in connection with mysticowl.net and related Mystic Owl services.

1. Scope

This Notice applies to information processed through:

the Mystic Owl website;
accounts;
subscriptions;
quizzes;
reflection and writing tools;
community or story features;
support channels;
accessibility requests;
privacy requests;
marketing communications;
advertising and affiliate interactions; and
related Mystic Owl services that link to this Notice.

Independent advertisers, sponsors, payment services, social platforms, and other third parties have their own privacy practices.

2. Information we collect

The information collected depends on how a user interacts with Mystic Owl.

A. Account and identifier information

This may include:

name;
email address;
telephone number, when an SMS feature is used;
account identifier;
sign-in identifier;
account status;
age or confirmation that the user is at least 18;
authentication records; and
security records.

B. Transaction and subscription information

This may include:

selected product or plan;
price;
currency;
billing interval;
subscription status;
renewal status;
cancellation status;
transaction date;
transaction status;
payment-processor identifier;
receipt information;
refund request;
dispute history; and
billing-support communications.

A payment processor may collect the user's payment-card information directly. Mystic Owl does not need to receive or store a full payment-card number when the transaction is handled by the processor.

C. Quiz, reflection, and submitted content

Depending on the feature, this may include:

quiz answers;
birth date or age information entered for a disclosed quiz function;
nickname;
profile selections;
wishes;
check-ins;
stories;
comments;
reports;
writing entries;
feedback; and
other content the user chooses to submit.

Before a free-text or interactive tool sends content to Mystic Owl or an external provider, the interface will disclose that processing.

Some tools may operate only in the browser and may not send the user's entry to Mystic Owl. Local-only status must not be assumed unless the applicable interface states it.

Do not submit medical records, government identifiers, financial-account credentials, passwords, full payment-card numbers, or other unnecessary sensitive information into a quiz, reflection tool, story, comment, or general support form.

D. Communications and consent records

This may include:

support messages;
accessibility reports;
correction requests;
privacy requests;
appeal records;
email subscription status;
telephone number;
SMS consent record;
consent language and version;
consent timestamp;
source page;
confirmation event;
unsubscribe or STOP status;
suppression status; and
communication preferences.

E. Device, usage, and technical information

This may include:

IP address;
browser type;
operating system;
device characteristics;
approximate location inferred from IP address;
timestamps;
referring page;
pages viewed;
interactions;
button clicks;
quiz completion status;
advertisement impressions;
sponsored-link clicks;
campaign parameters;
cookie identifiers;
local-storage identifiers;
error records;
fraud-prevention signals; and
security logs.

Mystic Owl does not intentionally collect precise geolocation unless the user is separately informed and an appropriate legal basis exists.

F. Local browser information

Some features may save progress, preferences, or entries in browser storage.

Local browser information may remain available to another person using the same browser profile until the user clears it.

3. Sources of information

We may collect information:

directly from the user;
automatically from the user's browser or device;
from a payment processor;
from authentication, hosting, security, analytics, advertising, email, or SMS service providers;
from an advertiser or affiliate concerning a click, conversion, or transaction status;
from an authorized agent;
from public sources; or
from another person when the user has directed or authorized the disclosure.

4. How we use information

We may use personal information to:

provide requested content, tools, accounts, and subscriptions;
authenticate users;
maintain account security;
process payments and subscription status;
provide receipts;
process cancellations and refund requests;
respond to support and accessibility requests;
process privacy requests and appeals;
send transactional communications;
send marketing communications where legally permitted and appropriately consented;
maintain unsubscribe and suppression records;
save user preferences;
provide disclosed quiz or reflection functionality;
moderate submitted content;
prevent spam, fraud, abuse, and unauthorized access;
diagnose errors;
measure performance;
improve content and interfaces;
administer advertising and affiliate relationships;
measure a sponsored-link handoff or conversion;
comply with law;
enforce agreements; and
protect users, Mystic Owl, and others.

Mystic Owl does not use symbolic quiz results to make legal or similarly significant decisions.

5. Legal bases where required

Where applicable law requires a legal basis, processing may rely on:

performance of a contract;
steps requested before entering a contract;
consent;
compliance with a legal obligation;
protection of legal rights;
protection of vital interests in an emergency where legally permitted; or
legitimate interests in operating, securing, measuring, and improving the service, balanced against individual rights.

Consent may be withdrawn for future processing. Withdrawal does not make earlier lawful processing unlawful.

6. How information is disclosed

A. Service providers

We may disclose information to service providers supporting:

hosting;
content delivery;
security;
authentication;
analytics;
communications;
customer support;
payment processing;
consent records;
fraud prevention;
accessibility support; and
other requested service functions.

Service providers may process information on our behalf under applicable contracts and instructions.

B. Advertising and analytics providers

We may disclose identifiers, device information, internet activity, campaign information, and advertising-interaction data to analytics or advertising providers.

Depending on applicable law and how a technology is configured, this activity may be treated as:

sale;
sharing;
targeted advertising; or
cross-context behavioral advertising.

Users may exercise applicable opt-out rights through Your Privacy Choices and legally recognized browser opt-out signals.

C. Sponsors and affiliate destinations

When a user opens a sponsored or affiliate link, we may transmit ordinary information necessary to process and measure the handoff, such as:

campaign identifier;
offer identifier;
click identifier;
timestamp;
general device information; and
referring-domain information.

Unless clearly disclosed before the interaction, Mystic Owl does not send a user's quiz answer, reflective answer, free-text entry, email address, or telephone number to a sponsor merely because the user opens a sponsored link.

The destination website collects information under its own privacy notice.

D. Payment processors

A payment processor may receive transaction, account, device, and payment information necessary to complete a purchase, prevent fraud, manage recurring billing, or process a refund.

E. Legal, safety, and corporate disclosures

Information may be disclosed:

to comply with law or legal process;
to respond to a lawful government request;
to establish, exercise, or defend legal claims;
to investigate fraud, abuse, security incidents, or threats;
to protect rights, safety, property, or service integrity;
as part of a merger, acquisition, financing, restructuring, bankruptcy, sale, or transfer of assets; or
with the user's direction or consent.

7. Sale, sharing, and targeted advertising

Mystic Owl does not sell email addresses or telephone numbers for another party's independent direct marketing.

Mystic Owl does not sell or share mobile telephone numbers, SMS consent records, or SMS opt-in data with third parties or affiliates for their own marketing or promotional purposes.

Mystic Owl may provide this information to service providers acting on Mystic Owl's behalf when necessary to deliver SMS messages, operate infrastructure, provide customer support, perform fraud or security functions, or comply with law. Those providers may process the information only for the applicable service and not for their own independent marketing purposes.

Mystic Owl does not sell personal information for money.

Some advertising and analytics disclosures may nevertheless be legally defined as sale, sharing, or targeted advertising.

Where applicable, users may opt out through:

Your Privacy Choices;
the Data Rights Center;
legal@mysticowl.net; or
a legally recognized Global Privacy Control or similar opt-out preference signal.

We will not require a user to create a new account solely to exercise an applicable opt-out right.

8. Cookies and similar technologies

Mystic Owl and its providers may use:

cookies;
local storage;
pixels;
tags;
software development kits;
device identifiers; and
similar technologies.

These technologies may support:

essential functionality;
authentication;
security;
preferences;
analytics;
advertising;
campaign measurement; and
fraud prevention.

Where required, optional analytics or advertising technologies will be used according to the consent choice presented.

Users can review available choices through the Cookie Settings or Your Privacy Choices controls.

Blocking or deleting essential technologies may affect account, security, preference, or subscription functionality.

Declining optional advertising technologies does not necessarily remove contextual advertising.

9. Marketing communications

Marketing consent is not a condition of purchasing or using Mystic Owl's services.

Users may unsubscribe from marketing email through the unsubscribe link in the message.

If a user enrolls in Mystic Owl's SMS program, Mystic Owl may collect the user's mobile telephone number, consent records, opt-in and opt-out history, message interaction information, and related technical records needed to operate and document the program.

Mystic Owl uses this information to deliver the messages the user requested, maintain consent and suppression records, provide customer support, protect the service, and comply with applicable requirements.

Users enrolled in the Mystic Owl SMS program may reply STOP to cancel SMS messages. Message and data rates may apply.

Transactional, security, billing, privacy-request, and account-service communications may still be sent where permitted after marketing opt-out.

10. Retention

Mystic Owl retains personal information only for the period reasonably necessary for the disclosed purpose, subject to legal, accounting, fraud-prevention, security, dispute, and enforcement requirements.

Our general retention schedule is:

Account and profile information: while the account is active and generally for up to 24 months after closure.
Transaction, tax, and accounting records: generally for up to 7 years after the transaction or longer where law requires.
Subscription-consent and renewal records: generally for up to 6 years after the relevant subscription ends.
Email and SMS consent, unsubscribe, and suppression records: generally for up to 6 years after the last relevant communication. A minimal suppression record may be retained longer when needed to honor an opt-out.
Support, accessibility, correction, and privacy-request records: generally for up to 3 years after the matter is closed.
Security and fraud-prevention logs: generally for up to 12 months, and longer when connected to an investigation, dispute, or security incident.
Analytics and advertising identifiers controlled by Mystic Owl: generally for up to 14 months unless deleted or de-identified sooner.
Affiliate and campaign measurement records: generally for up to 24 months.
Submitted content: until the user deletes it, the account is closed, the feature is discontinued, or a longer period is reasonably necessary for moderation, permissions, disputes, or law.
Backup copies: generally overwritten through a rolling cycle of up to 90 days.
Local browser information: until the user clears it or the browser removes it.

We may de-identify information and retain the de-identified form where permitted, provided it is not used to re-identify a person.

11. Security

Mystic Owl uses administrative, technical, and organizational measures designed to protect personal information.

No method of transmission, storage, or security is completely reliable. We cannot guarantee absolute security.

If you believe an account, transaction, or communication has been compromised, contact legal@mysticowl.net or mirror@mysticowl.net.

12. International processing

Mystic Owl is operated from the United States.

Information may be processed in the United States and in other countries where service providers operate.

Those countries may have privacy laws different from the user's home jurisdiction.

Where required, Mystic Owl will use a legally recognized transfer mechanism or another lawful basis for international processing.

13. Adults only

Mystic Owl accounts, purchases, subscriptions, content submissions, and age-restricted features are intended only for people who are at least 18 years old.

Mystic Owl is not directed to children.

We do not knowingly collect personal information from a person under 18 through an account, purchase, subscription, or content-submission feature.

If we learn that a person under 18 submitted personal information through such a feature, we may close the account, remove the content, and delete the information as reasonably appropriate, subject to legal and security obligations.

Contact legal@mysticowl.net if you believe a minor has submitted personal information.

14. Rights and choices

Depending on applicable law, users may have rights described in the Data Rights Notice, including:

access;
correction;
deletion;
portability;
withdrawal of consent;
opt-out of sale, sharing, or targeted advertising;
appeal; and
use of an authorized agent.

Submit requests through the Data Rights Center or legal@mysticowl.net.

15. Changes to this Notice

We may update this Notice to reflect changes in services, providers, technology, or law.

The date at the top will change when the Notice is materially revised.

Additional notice will be provided when required by law.

16. Contact

InboxSuite Inc. DBA Mystic Owl 1520 Belle View Blvd Ste 4005 Alexandria, VA 22307 United States

Privacy and data rights: legal@mysticowl.net General support: mirror@mysticowl.net Phone: 1-833-545-4520