Privacy Policy
Effective Date: 01/11/2025
This Privacy Policy outlines how Polystate, operated by Amagi Labs LLC (“Polystate”, “we”, “us”, or “our”), collects, uses, stores, and protects your personal data when you access or use our digital platforms, including the website www.polystate.io, web applications, and all related services (the “Platform”). This Policy is designed to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and relevant international privacy standards, with transparency and accountability at its core.
Polystate applies EU/EEA data protection principles to its processing activities. We serve a global clientele seeking second residencies, digital visas, offshore structuring, tax planning, and international relocation without providing legal, tax, or financial advice. As such, we strive to uphold internationally recognized data protection principles regardless of user location.
1. Data Controller
Amagi Labs LLC
Address: 30 N Gould St, Ste R, Sheridan, WY 82801, United States
Email: [email protected]
Amagi Labs LLC is the data controller for all personal data collected via our Platform. We determine the purposes and means of data processing in accordance with applicable laws.
2. Who This Policy Applies To
This Privacy Policy applies to:
- Individuals using our website, app, or contacting us via forms
- Clients receiving consultation, communication, or onboarding
- Users creating or managing a personal or business account
- All persons interacting with our digital products or services globally
3. What Data We Collect
We may collect the following categories of data, either directly from you, automatically, or via third-party processors operating on our behalf:
a) Data You Provide Directly
- Full name, email address, phone number
- Company name, professional identifiers (e.g., Legal ID, registration documents)
- Location preferences and residency interests
- Information submitted in forms, inquiries, chat messages, or service requests
- Passwords, account settings, and profile preferences
b) Automatically Collected Data
- IP address, browser metadata, device identifiers, and operating system
- Session logs, login timestamps, user actions, and interaction history
- Technical diagnostics and security logs
c) Communication and Engagement Data
- Email opens, replies, and unsubscribe actions
- Contact through marketing or onboarding sequences
- Customer service records
We do not knowingly collect personal data from children under 16 years of age. If we become aware of such a collection, we will delete the information without undue delay.
4. Legal Basis and Purposes of Processing
All data processing activities are based on at least one of the legal grounds under Article 6 of the GDPR:
| Purpose | Legal Basis |
|---|---|
| Account registration and identity management | Contract performance (Art. 6(1)(b)) |
| Provision of digital consultation and services | Contract performance / Legitimate interest |
| Communication and client support | Legitimate interest (Art. 6(1)(f)) |
| Delivery of marketing content and newsletters | Consent (Art. 6(1)(a)) |
| Website functionality, diagnostics, and technical logs | Legitimate interest (platform security and usability) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
You have the right to withdraw your consent at any time, without affecting the lawfulness of prior processing.
5. Use of Cookies and Tracking Technologies
Our Platform uses cookies and similar technologies to support functionality, security, personalization, and analytics. These include:
a) Essential Cookies
- Enable login, account persistence, navigation, and secure access.
- Cannot be disabled and do not require prior consent.
b) Functional and Preference Cookies
- Remember user preferences and account settings.
c) Analytics Cookies
- Collect anonymized or pseudonymized usage data to optimize service performance and understand user behavior.
- We may use privacy-respecting analytics tools or third-party platforms.
d) Marketing Cookies
- May be used in the future for retargeting or advertising via trusted partners (e.g., Meta, Google).
- These require explicit opt-in consent.
Cookie usage complies with the ePrivacy Directive and GDPR. You may manage your preferences through browser settings or via the cookie management banner.
6. Data Sharing and International Transfers
We do not sell your data. However, your data may be disclosed to carefully selected third parties, including:
- Cloud hosting and infrastructure providers
- Email, communication, and CRM service vendors
- Payment processors (if applicable)
- Legal, tax, or immigration professionals working under confidentiality
- Supervisory or enforcement authorities, where required by law
Some of these recipients may be located outside the EU/EEA. Where applicable, we ensure lawful transfers through:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Supplementary technical and contractual safeguards
7. Data Retention
We retain personal data for no longer than necessary:
- Client accounts: as long as your account remains active
- Communication history: for up to 5 years for legal and business continuity purposes
- Marketing preferences: until withdrawal of consent
- Legal records: as required under applicable laws (e.g., tax and accounting laws)
Data is securely deleted or anonymized once retention obligations expire.
8. Data Security Measures
We apply a combination of security measures, including:
- HTTPS encryption and TLS-secured communication
- Role-based access controls and data minimization
- Two-factor authentication (2FA) for administrative access
- Logging and monitoring of unusual behavior
- Routine audits and internal data access policies
While we implement best practices, no digital infrastructure can be guaranteed to be 100% secure. Users are responsible for maintaining the confidentiality of their credentials.
9. Your Rights
Under the GDPR and where applicable under other international frameworks, you may:
- Request access to your data (Art. 15 GDPR)
- Request rectification of inaccurate or outdated information (Art. 16)
- Request erasure of personal data (“right to be forgotten”) (Art. 17)
- Restrict or object to processing (Art. 18, 21)
- Receive your data in a structured, portable format (Art. 20)
- Withdraw consent at any time (Art. 7(3))
To exercise your rights, contact: [email protected]. We may request identity verification to prevent unauthorized disclosures.
If you reside in the European Union, you have the right to lodge a complaint with your local supervisory authority. You may also contact us directly at [email protected] for clarification or resolution.
10. External Links and Third-Party Services
Our Platform may link to third-party websites or services. We are not responsible for the privacy practices of those third parties. We recommend reviewing their privacy policies before engaging with external services.
11. Changes to This Privacy Policy
We may amend this Privacy Policy to reflect legal, technical, or operational updates. The latest version will always be available at www.polystate.io/privacy-policy. Where changes are material, we will provide notification through the Platform or by email.
Contact Details
Amagi Labs LLC
Address: 30 N Gould St, Ste R, Sheridan, WY 82801, United States
Email: [email protected]
We are committed to upholding your privacy and supporting your freedom to pursue global opportunity securely and transparently.