Privacy Policy

AVYREN (靈豚遠略) (the “Service”; its operator, “we” or “us”). Your birth data, your questions and your life events are private by nature. We handle your personal data under the Personal Data Protection Act (Taiwan) and the Personal Data (Privacy) Ordinance (Cap. 486, Hong Kong), use it only for the purposes listed in this policy, and do not sell it. We do not use it for direct marketing either, apart from the free cast report and the single follow-up email you explicitly opt into. If you do not agree with this policy, do not use the Service.

1. Scope

This policy covers your use of the Service website, placing an order, paying, reading a report, sending feedback and contacting support. The Service currently has no member accounts: you order with an email address, and reports are delivered through a private link.

2. What we collect

We collect only what is needed to provide the service:

• Contact data: email address (to identify your order, deliver reports and answer support requests)
• Email verification codes: if you choose to read your past records, we send a 6-digit code to your email to confirm the address is yours. We store only a hash of the code (it cannot be turned back into the code); it expires after 10 minutes and works once
• Who the question is about, and names: the category you pick (you, partner, parent, child, someone else) and the name you give that person (such as “Stepdad”), used to keep each person’s records together. You choose the name; please do not enter the person’s real full name
• Astrology service: date of birth, time of birth, city of birth (converted to coordinates and time zone), gender
• Ask a Question service: your question, the method you choose, the time of the cast, the numbers you give. Birth year and gender are optional (used for the Da Liu Ren (大六壬) human board). A summary of earlier casts from the same email address is used for the “one question, one cast” reminder. Optionally, the actual outcome you record on the report page
• Free cast report: your question, the time of the cast or the numbers you give, an anonymous browser identifier and a hashed IP address (used to keep it to one cast per question per 24 hours); optionally your email address and your marketing consent (only if you choose “email it to me”)
• Free birth-chart preview: date, time and city of birth (converted to coordinates and a time zone); optionally your email address and your consent (only if you tick “send me this chart”). Nothing is kept if you leave no email address
• Calibration events (optional): major life events you volunteer (a marriage, a change of job, the year you moved), used to make the timeline in your analysis more accurate
• Transaction data: order, plan, amount, Stripe transaction ID. Card numbers are handled by Stripe; they never pass through us and we never store them
• Feedback: rating and comments (optional); if you tick “I agree to this comment being shown publicly”, your comment may be displayed anonymously on this site, without your email
• Technical data: IP address (security and rate limiting) and strictly necessary cookies (see the Cookie Policy)

We never ask for government ID numbers, full card numbers, medical records, or anything unrelated to the service.

3. Health-related information (special-category personal data)

If your question category or a calibration event involves illness, surgery, hospitalization or other health information, that data is sensitive personal data (Article 6 of the Personal Data Protection Act (Taiwan)). We process it only after you provide it voluntarily and tick the explicit consent box, and only to generate the analysis you bought. You can leave it out entirely; your order works the same.

4. How we use your data

To calculate the charts and generate the analysis you bought; to deliver reports and order-status notices; to process payments, refunds and reconciliation; to answer support and data-rights requests; to prevent fraud, abuse and attacks (including rate limiting); and to meet tax, accounting and legal obligations. Apart from the opt-in case below, we do not use your data for marketing and we do not send newsletters. If you use the free cast report and tick “email it to me”, we send you that report and, within 48 hours, one follow-up email related to that question. You can reply to that email at any time to stop it, and nothing further is sent. The same applies to the free birth-chart preview: if you tick “send me this chart”, we email you that chart (with a PDF) and, within 48 hours, one follow-up email about it. Reply to stop it.

Records for the same person are shared across readings: if you verify your email when you order and pick the same person, Avyren reads that person’s earlier records under your email before writing: the facts and life events you recorded, the questions you asked before, and the outcomes you recorded. This works across astrology and divination. Records for different people are never read across; without email verification we read none of the existing records under that email and do not show which names are saved there. Divination reads facts only, never the conclusions of an astrology report.

Thank-you email after a paid divination reading: about 48 hours after a paid divination report is completed, we send one thank-you email about that question, with links to leave a rating and record the outcome. It is a service message about your order and contains no marketing; reply to it and we will not send another.

5. Service providers and cross-border transfers

To run the service, the providers below process your data within the scope necessary:

When a report is generated, your birth data, your question, the calculated chart and your calibration events are sent to the AI model provider listed above; under its commercial terms of service, that data is not used to train its models. By using the Service you acknowledge and agree to these cross-border transfers within the scope necessary. Apart from the table above and what the law requires, we disclose your personal data to no third party.

6. Retention

• Orders and transaction records: at least 5 years from the completed transaction (required by tax and accounting rules)
• Reports, casts, calibration events, recorded outcomes and names: until you ask us to delete them (so you can re-read them, and so a later add-on can read them back)
• Email verification codes: only a hash is stored, expiring after 10 minutes; the record is kept for 12 months at most
• Feedback: until you ask us to delete it
• Technical logs: 12 months at most
• Free cast reports: 30 days if you left no email address; if you left one, 90 days after the follow-up email is sent, or until you ask us to delete it
• Free birth-chart previews: nothing kept without an email address; with one, 90 days after the follow-up email is sent (90 days from submission if you did not tick the box), or until you ask us to delete it

7. Your rights

Under Article 3 of the Personal Data Protection Act (Taiwan) and sections 18-25 of the Hong Kong PDPO, you may at any time: ask about or review your personal data, request a copy, request that it be supplemented or corrected, request that we stop collecting, processing or using it, or request deletion.

How to do it: send the request through the contact form and write “data rights request” in your message. Because there are no accounts, we verify your identity through the email address you ordered with. Our commitment: 15 days to answer a request to ask about or review data, 30 days to handle any other request (if we need longer we will tell you first; this also meets the 40-day rule in Hong Kong). A deletion request may be limited by statutory retention duties (transaction records kept for tax, for example); if so, we will tell you what stays and for how long.

8. Security

HTTPS everywhere; database access on least privilege with key control (Row Level Security); card numbers never land on our systems (PCI-DSS compliance sits with Stripe); AI output is sanitized before it is displayed. No online service can guarantee absolute security, but we keep narrowing access and watching for anomalies.

9. Breach notification

If personal data is stolen, leaked or otherwise compromised, we will notify the competent authority and the people affected as applicable law requires, and explain what happened and what we have done about it.

10. Minors

The Service is for people aged 18 and over. We do not knowingly collect personal data from minors.

11. Changes to this policy

We may revise this policy. Material changes will be posted on the site and emailed to customers who have ordered, and we will not silently widen the scope of earlier processing after the fact. Continuing to use the Service after a revision means you accept it.

12. Contact us

Data controller: AVYREN
Contact: contact form