Privacy Policy

Account information: When you register a FATEREAD account, we collect the email address you provide, the public profile information returned by your third-party login provider (Clerk), and optional items such as your avatar and display name.

Birth data: To generate BaZi (Four Pillars) charts, Zi Wei Dou Shu (Purple Star Astrology) readings, and other interpretations, you provide your birth date (solar calendar), time of birth, place of birth, and gender. This information is used solely to generate the reading you request and is never used for marketing.

Conversations and reading content: The questions, follow-ups, and feedback you enter in chat, as well as the chart reports, compatibility analyses, and other outputs we generate for you.

Usage and device information: When you access the site, we automatically collect basic logs including IP address, device type, browser, time of visit, and time spent on pages. This is used for security and service stability.

Payment information: When you purchase a membership, payment is processed by our third-party payment provider Creem. We only receive a de-identified order ID, subscription status, and validity period — never your card number or payment credentials.

Providing core services: Generating BaZi (Four Pillars) charts, Zi Wei Dou Shu charts, compatibility analyses, and other AI readings based on the birth data you provide.

Improving model quality: Analyzing de-identified conversation samples to identify common question patterns and assess interpretation quality, so we can keep improving our prompts and user experience.

Account and security: Identity verification, fraud prevention, protecting against account takeover, and detecting abnormal logins or abuse.

Customer service: Responding to your inquiries, solving technical problems, and sending essential service notices (such as subscription renewal reminders).

We never use your personal information for targeted advertising, and we never sell it to any third party. Ever.

To power AI readings, we encrypt and transmit the necessary metaphysical information (birth data, question content) to our LLM service providers (primarily DeepSeek; Anthropic, Google, and others may be used as fallbacks). These providers process data only for the contracted service purpose and are bound by strict confidentiality and security terms.

Web hosting, database, and authentication are provided by Vercel, Supabase, and Clerk respectively. Payments are handled by Creem.

Regarding payments: Creem is the Merchant of Record (MoR) for our subscription services — Creem acts as the legal seller of record between you and us, responsible for collecting payments, issuing invoices, remitting taxes (including global VAT/GST), processing refunds, and handling disputes. We have signed a Data Processing Agreement (DPA) with Creem requiring it to meet privacy standards equal to or stricter than this policy. The card number, billing name, and billing address you provide on the payment page are handled directly by Creem; we do not access this raw payment data.

We do not share your metaphysical data with advertising platforms or social media analytics providers. The site may use a small amount of self-hosted traffic analytics (Vercel Analytics), which does not involve personal profiling.

We use strictly necessary cookies to maintain your login session and remember your language preference.

We do not use cross-site tracking cookies, third-party advertising cookies, or social media pixels.

You can disable cookies in your browser, but doing so may break certain features (such as staying logged in or remembering your language).

Your data is stored in a Supabase-managed PostgreSQL database, located in overseas cloud regions.

Data in transit is protected by HTTPS / TLS 1.2+ encryption. Sensitive fields (such as birth time) are encrypted a second time before being written to disk.

We conduct regular security audits and permission reviews. Only the minimum number of engineers required may access production data, all under least-privilege controls, with full audit trails.

Although we make commercially reasonable efforts to protect your data, no system is 100% secure. In the event of a data breach, we will notify you within 72 hours.

Access: You can review your birth data, conversation history, and subscription status at any time in your Profile center.

Correction: Entered the wrong birth data? Edit it any time on your profile page.

Export: With one click in Account Settings, you can export all of your conversation history and chart reports (JSON / PDF).

Deletion: You can request deletion of your account and all associated data at any time. We will complete deletion within 30 days, with data in backup systems fully purged within 90 days.

Withdraw consent: If you no longer consent to a particular processing activity described in this policy, contact us via the channel below and we will respond within 15 business days.

FATEREAD is not intended for users under 18 years of age.

We do not knowingly collect personal information from minors. If an account has been created for a minor by mistake, please contact heshaoz1990@gmail.com immediately and we will permanently delete the relevant data within 7 business days.

We may revise this policy in response to business changes or legal requirements.

Material changes (such as adding new data categories or changing third-party providers) will be communicated prominently via in-app message and email at least 7 calendar days in advance.

Continued use of the service after such changes constitutes your acceptance of the revised policy. If you disagree, please stop using the service and request account deletion.

If you have any questions, complaints, or rights requests about this policy or our handling of personal information, please contact us via:

Email: heshaoz1990@gmail.com

We will respond within 15 business days. If your legitimate rights and interests are not addressed, you have the right to file a complaint with the appropriate data protection authority in your jurisdiction.