1. The short version
- The free reading is calculated in your browser. The free poster is made in your browser too. The birth date you type there is not sent to our server, to an AI, or to analytics. The same goes for the pair check: its link carries only two day-pillar numbers, never birthdays or names.
- When you continue to the payment screen for a reading, your birth details, the concern and answers you picked, and any email address you provide are sent to our server and saved with your order, even if payment is not completed. After payment, we use them to write and show your reading.
- We never need your name for a reading. The free poster maker lets you type one; it is drawn on your device and never sent to us. We don’t sell your data.
- Optional usage analytics (PostHog), ad pixels and ad measurement run only if you accept them, and even then ad platforms never get your birth details or answers. Separately, we may use cookie-free Cloudflare Web Analytics to measure public-page visits and loading speed. Outside the EEA, the UK and Switzerland, anonymous daily step counts and the campaign tags saved with an order also run without asking (see section 2).
- You can delete your birth details and reading at any time from the reading page.
2. What we collect and why
| Reading data (checkout and delivery) | Birth date; optional birth time; birthplace time zone; optional longitude (for solar-time correction); calculation settings such as the day boundary; the concern, answer and motive you picked; your language; and the chapters generated after payment. Purpose: to create your order, calculate your chart, and write and show your reading. |
|---|---|
| Email address (optional) | If you enter it at checkout: to send your reading link and receipt information, and, only if you tap “Tell me when it opens” on your reading page, one email when the pair reading opens. If you ask for your free result by email: we store your email, language, chosen concern and your day-pillar type (a number from 1 to 60, not your birth date) to send the result link, and, only if you also tick the separate box for notes from Horan, a short series of notes about your chart and the paid reading (at most four more emails over about two weeks, then we stop). Every email has a one-click unsubscribe link; you can also reply “unsubscribe” or write to us. Unsubscribing stops the emails at once; we keep your address with the record of your consent and your unsubscribe (also so we never write again) for 31 days, then delete it. |
| Checkout reminder (only if the box for news and offers on the payment page is checked) | Stripe’s payment page may show a box for news and offers (mainly to customers in the US). Depending on where you are, it may already be checked; you can uncheck it. Only if it is checked when you leave without paying does Stripe give us the email address you entered there, and we send one reminder email the day after with a link back to the same checkout: no discount, at most one reminder per checkout, and none to the same address within 61 days. It mentions your day pillar and the concern you picked, never your birth details. It has a one-click unsubscribe link like our other emails. It isn’t sent if you have unsubscribed from our emails, deleted your reading or paid in the meantime. The link may still take a payment after we have deleted the order; if you pay through it then, we refund the full payment automatically. We keep the address with the record of that reminder for 61 days (so we don’t send another in that time, and so the unsubscribe link keeps working), then delete it; if you unsubscribe, we keep it as the record of that request for 31 days after you unsubscribe. |
| Payment record | Order number, amount, currency, date, payment status and the campaign tags of the link you arrived from, if any. Stripe keeps the card and billing details you enter at checkout; we never receive your full card number. Purpose: to process the order, handle refunds, prevent fraud and meet tax and accounting duties. |
| Technical data | IP address, browser type and request times in server logs. Purpose: to deliver the site and keep it secure. |
| Public-page visits and performance (Cloudflare Web Analytics) | When enabled, this measures public-page visits, page paths, referrers, country, browser and device categories, and loading times to improve the site’s usability and speed. It is not used for advertising and operates separately from the analytics and advertising consent banner. It does not run for visits from the EEA, the UK or Switzerland, or when the visitor’s country cannot be determined. It uses no cookies or local storage and does not fingerprint visitors to identify them over time. URL query strings, entered birth details, email addresses and answers are not included in these measurements. Private reading pages, question and answer pages, and APIs are excluded. |
| Analytics (only with your consent) | Page views and actions such as “checkout started”, the campaign tags of the link you arrived from, and the kind of site that sent you (for example “google” or “chatgpt”, worked out in your browser; never the address itself). Never your birth details, email or answers. If you allow after you’ve already looked around, the events of that visit so far (held only in the page’s memory until you chose) are sent too. |
| Step counts (anonymous) and the campaign tags of your order | When you reach a step of the free reading (for example “chart shown” or “payment page opened”), your browser tells our server the step, the page language and the source tag of the link you arrived from (such as “tiktok”). We only add 1 to a daily total for that combination. We store no IP address, browser details, cookie or ID with it, and nothing on your device. If you continue to payment, the source, campaign and term tags of that link (never anything else from the address) are saved with your order and sent to Stripe with it, and stay with the payment record. In the EEA, the UK and Switzerland we count your steps, and keep and send your order’s tags, only if you accepted analytics. Purpose: to see where visitors stop and which channels lead to purchases. Elsewhere, this rests on our legitimate interest in running the shop. |
| Ad measurement (only with your advertising permission) | When enabled, the Meta Pixel reports public-page visits and addresses, requests for a result link, and checkout starts. Our server reports checkouts and purchases to Meta and, only when enabled, TikTok to measure which ads lead to visits and orders. This can include event and order IDs, time, product, amount and currency, IP address, browser type, ad click and browser IDs (such as _fbp, _fbc, fbclid, ttclid, _ttp), and a SHA-256 hash of your email for account matching. We never send your email in plain text, birth details, concern, answers or reading. A hashed email is not anonymous data. We do not start ad measurement without your advertising permission or when a Global Privacy Control signal is present. |
Legal bases under the EU and UK GDPR: reading data and payment records, to perform our contract with you; tax records, legal obligation; technical data, our legitimate interest in running a secure site; free-result emails, the checkout reminder, optional usage analytics, ad measurement, step counts and the campaign tags of an order, your consent (in the EEA, the UK and Switzerland we collect step counts and order tags only with it).
3. Who processes data for us
| Stripe, Inc. (US) | Payments and fraud prevention. Stripe is also an independent controller for some data under its own privacy policy. |
|---|---|
| Anthropic, PBC (US) | Generates the chapter text through the Claude API. We send the calculated chart (including your birth date and time where needed to explain the calculation), the concern and answers you picked, and your language. We don’t send your email. Under Anthropic’s commercial terms, API inputs and outputs are not used to train its models. |
| Resend, Inc. (US) | Sends emails such as your reading link. |
| Cloudflare, Inc. (US) | Hosting, database, content delivery, security and request logs. When enabled, Cloudflare Web Analytics measures public-page visits and loading speed. When we render a share card or the PDF keepsake, Cloudflare Browser Rendering opens your private reading page on our behalf. |
| Google LLC (US) | Google Fonts: the reading page, Ask Horan and the legend page load their web fonts from Google’s servers, which receive your IP address and browser details. No reading content is sent. |
| PostHog, Inc. (US) | Usage analytics, only if we have turned it on and you have accepted analytics. |
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd. | Ad measurement (Meta Pixel and Conversions API), only if we have turned it on and you have allowed ad measurement. Meta may also use this data under its own terms as an independent controller. |
| TikTok (TikTok Inc. and its affiliates) | Ad measurement (Events API), only if we have turned it on and you have allowed ad measurement. TikTok may also use this data under its own terms as an independent controller. |
We don’t sell personal data. We share it with anyone else only when the law requires it.
4. International transfers
We are a US company and most of our providers process data in the United States. For transfers from the EU and UK we rely on the EU-US Data Privacy Framework where a provider is certified, or on Standard Contractual Clauses.
For customers in Japan (APPI): data is transferred to the United States, which has no comprehensive federal privacy law but has state laws (such as California’s CCPA) and sector-specific laws. Our contracts with providers require protections in line with the APPI.
5. How long we keep it
- Reading data (birth details, answers, email, generated text): until you delete it, or 365 days after purchase, whichever comes first.
- Unfinished checkouts: if payment never completes, we delete the birth details and answers within 7 days.
- Payment records (including any campaign tags saved with the order): as long as tax and accounting laws require (typically up to 7 years), even after you delete your reading.
- Free-result email addresses: 180 days after you signed up, or 31 days after you unsubscribe, whichever comes first.
- Checkout reminders (the address a reminder went to): 61 days after the reminder; if you unsubscribe from it, also 31 days after you unsubscribe, as the record of that request.
- Ad measurement data kept with an order (IP address, browser type, ad IDs): deleted after we attempt to report the purchase, or when your advertising withdrawal reaches our server, and in any case with the order’s other details.
- Server logs: a few days.
- Our providers may keep data for the periods set in their own terms.
6. Deleting your data
On your reading page, the “Delete this reading and my birth details” button deletes your birth details, answers and generated chapters (the reading itself) immediately. Only the payment record (including any campaign tags of the link you came from) remains.
If you can’t open the page, email support@horansaju.com from the address you used at checkout. We respond within 30 days.
7. Your rights
- Everyone: ask to see, correct, delete or get a copy of the data we hold about you.
- EU and UK (GDPR, UK GDPR): also restrict or object to processing, withdraw consent at any time, and complain to your local data protection authority.
- California (CCPA/CPRA): the rights to know, delete and correct, and to opt out of the sale or sharing of personal information. We don’t sell personal information. Sending ad measurement data to Meta and TikTok can count as “sharing” for advertising; we do it only with your consent and treat a Global Privacy Control signal as an opt-out. We won’t treat you differently for using these rights.
- Japan (APPI): request disclosure, correction, suspension of use or deletion of your retained personal data, and disclosure of records of provision to third parties.
To make a request, email support@horansaju.com. To confirm it’s you, we may ask for your reading link or the email you used at checkout.
9. Children
The service is not meant for anyone under 16, and readings can be bought only by people 18 or older. If you think a child has given us data, contact us and we will delete it.
10. Security
We protect data with encryption in transit (HTTPS), private hard-to-guess links, restricted access, and by storing as little as we can. No method is perfect; if something goes wrong, we will tell you promptly as the law requires.
11. Changes to this policy
If we change this policy, we will post the new version here with a new date, and flag important changes on the site.
12. Contact
- AboutUsAgency, Inc.
- 131 Continental Dr, Suite 305, Newark, DE 19713, USA
- Email: support@horansaju.com
Addendum: data for Ask Horan
- What we collect: your question text, your email address, what your chart is calculated from (your paid file, or for a free chart your birth date and optional birth time and zone), and a consent record (time and country only; no IP address is stored). Birth details from a free chart are sent to our server and saved with your order when you continue to the payment screen, even if payment is not completed.
- Your question and chart details are sent to Anthropic (United States) to write the answer, and stored with your order.
- The 3-a-night and 10-a-month limits are counted with a keyed hash (HMAC) derived from your email address, not the address itself.
- We do not store the text of a note that Kachi bounces (we log only the kind of bounce, the language and the time).
- How long: paid orders keep the question, answer, birth details and email for 365 days after purchase; unpaid checkouts for 7 days. The payment record stays.
- You can delete the question and the answer at any time from the answer page (“Delete my note text”).
- The note included with a Red-Pen File uses the email address and chart of that file; its question and answer are kept and deleted with the file’s other records as above.
Addendum: what stays in your browser; cards and the PDF
- An optional free-poster name stays only in this page’s memory and is drawn into the image. We do not send it to our servers, an AI or analytics, or write it to browser storage. If you save or share the poster, the image you choose includes that name.
- The birthday you type into the Doorstep Check, the animal you pick for wonjin and the letters of the name-in-red demo are worked out in your browser only. They are never sent to us, stored or logged.
- Paid-file share-card images and the PDF keepsake are made with the browser-rendering service of Cloudflare, Inc. (United States), our host. Cards carry the file number, Door Type and lines from your file only, never your name, birthday or question. The PDF prints your file’s private page as a whole. Rendered images and PDFs of your file are cached for up to 30 days and stop being served as soon as the reading is deleted.
The 2027 Season File
- We use your birth details, focus, display time zone and optional email to calculate, write, show and deliver your Season File. If you buy from your reading page, we copy the birth details already saved with that order on our server; nothing is sent again through a link.
- Chart and month calculations are code. Month notes are pre-written lines drafted with AI help and edited by us, selected by code for your chart. The two episodes are written from the calculated chart and selected focus by AI (Claude). A ready 2027 episode from an earlier matching reading may be reused.
- Each Season File is kept for 365 days from its own payment; unpaid orders for 7 days. Deleting a source reading also clears the birth details and content of the Season Files made from it. Each new order has its own deletion control on its private page.
The Pair File
The free pair check runs only in your browser; its public link carries two day-pillar numbers. The paid Pair File is a separate product. Continuing to its payment screen sends both birth dates, optional birth times, time zones and calculation settings, relationship context, language, optional buyer email and consent record to our server, even if checkout remains unpaid. We collect no name, email or contact details for the other person. You must have their permission to use their birth details.
After payment, Anthropic receives both calculated charts to write three episodes. Its Pair File input does not require the other person’s raw birth date or time. Once all three episodes are complete, we remove the other person’s raw birth details from our server and keep the calculated chart needed for display and retries. Birth data is excluded from URLs, analytics and Stripe metadata.
We keep the order, derived charts and text until deletion or 365 days after purchase. Birth details in unpaid orders are cleared within 7 days. Deleting a source Red-Pen File also deletes add-ons that copied its birth details; the source file’s earlier retention deadline also applies. Payment records remain.
Gift information
We store the gift buyer’s email, payment references, gift status and random identifiers for private links. We do not collect a recipient’s name, message, email or birthday when the gift is bought. The recipient supplies their own data in a separate ordinary reading order. The buyer learns only the date the gift was opened. A gift code is held temporarily in sessionStorage, never sent to analytics or advertising. The buyer’s email is cleared after the last required transactional email and refund window; payment records are retained as legally required.