Privacy Policy

AVYREN (靈豚遠略) (the “Service”; its operator, “we” or “us”). Your birth data, your questions and your life events are private by nature. We handle your personal data under the Personal Data Protection Act (Taiwan) and the Personal Data (Privacy) Ordinance (Cap. 486, Hong Kong), use it only for the purposes listed in this policy, and do not sell it. We do not use it for direct marketing either, apart from the free cast report and the single follow-up email you explicitly opt into. If you do not agree with this policy, do not use the Service.

1. Scope

This policy covers your use of the Service website, placing an order, paying, reading a report, sending feedback and contacting support. The Service currently has no member accounts: you order with an email address, and reports are delivered through a private link.

2. What we collect

We collect only what is needed to provide the service:

• Contact data: email address (to identify your order, deliver reports and answer support requests)
• Astrology service: date of birth, time of birth, city of birth (converted to coordinates and time zone), gender
• Ask a Question service: your question, the method you choose, the time of the cast, the numbers you give. Birth year and gender are optional (used for the Da Liu Ren (大六壬) human board). A summary of earlier casts from the same email address is used for the “one question, one cast” reminder
• Free cast report: your question, the time of the cast or the numbers you give, an anonymous browser identifier and a hashed IP address (used to keep it to one cast per question per 24 hours); optionally your email address and your marketing consent (only if you choose “email it to me”)
• Calibration events (optional): major life events you volunteer (a marriage, a change of job, the year you moved), used to make the timeline in your analysis more accurate
• Transaction data: order, plan, amount, Stripe transaction ID. Card numbers are handled by Stripe; they never pass through us and we never store them
• Feedback: rating and comments (optional); if you tick “I agree to this comment being shown publicly”, your comment may be displayed anonymously on this site, without your email
• Technical data: IP address (security and rate limiting) and strictly necessary cookies (see the Cookie Policy)

We never ask for government ID numbers, full card numbers, medical records, or anything unrelated to the service.

3. Health-related information (special-category personal data)

If your question category or a calibration event involves illness, surgery, hospitalization or other health information, that data is sensitive personal data (Article 6 of the Personal Data Protection Act (Taiwan)). We process it only after you provide it voluntarily and tick the explicit consent box, and only to generate the analysis you bought. You can leave it out entirely; your order works the same.

4. How we use your data

To calculate the charts and generate the analysis you bought; to deliver reports and order-status notices; to process payments, refunds and reconciliation; to answer support and data-rights requests; to prevent fraud, abuse and attacks (including rate limiting); and to meet tax, accounting and legal obligations. Apart from the opt-in case below, we do not use your data for marketing and we do not send newsletters. If you use the free cast report and tick “email it to me”, we send you that report and, within 48 hours, one follow-up email related to that question. You can reply to that email at any time to stop it, and nothing further is sent.

5. Service providers and cross-border transfers

To run the service, the providers below process your data within the scope necessary:

When a report is generated, your birth data, your question, the calculated chart and your calibration events are sent to the AI model provider listed above; under its commercial terms of service, that data is not used to train its models. By using the Service you acknowledge and agree to these cross-border transfers within the scope necessary. Apart from the table above and what the law requires, we disclose your personal data to no third party.

6. Retention

• Orders and transaction records: at least 5 years from the completed transaction (required by tax and accounting rules)
• Reports, casts and calibration events: until you ask us to delete them (so you can re-read them, and so a later add-on can read them back)
• Feedback: until you ask us to delete it
• Technical logs: 12 months at most
• Free cast reports: 30 days if you left no email address; if you left one, 90 days after the follow-up email is sent, or until you ask us to delete it

7. Your rights

Under Article 3 of the Personal Data Protection Act (Taiwan) and sections 18-25 of the Hong Kong PDPO, you may at any time: ask about or review your personal data, request a copy, request that it be supplemented or corrected, request that we stop collecting, processing or using it, or request deletion.

How to do it: send the request through the contact form and write “data rights request” in your message. Because there are no accounts, we verify your identity through the email address you ordered with. Our commitment: 15 days to answer a request to ask about or review data, 30 days to handle any other request (if we need longer we will tell you first; this also meets the 40-day rule in Hong Kong). A deletion request may be limited by statutory retention duties (transaction records kept for tax, for example); if so, we will tell you what stays and for how long.

8. Security

HTTPS everywhere; database access on least privilege with key control (Row Level Security); card numbers never land on our systems (PCI-DSS compliance sits with Stripe); AI output is sanitized before it is displayed. No online service can guarantee absolute security, but we keep narrowing access and watching for anomalies.

9. Breach notification

If personal data is stolen, leaked or otherwise compromised, we will notify the competent authority and the people affected as applicable law requires, and explain what happened and what we have done about it.

10. Minors

The Service is for people aged 18 and over. We do not knowingly collect personal data from minors.

11. Changes to this policy

We may revise this policy. Material changes will be posted on the site and emailed to customers who have ordered, and we will not silently widen the scope of earlier processing after the fact. Continuing to use the Service after a revision means you accept it.

12. Contact us

Data controller: AVYREN
Contact: contact form