Privacy Policy

The service is operated by the individual operator of TopBaziAI.

Privacy contact: admin@topbaziai.com

No Data Protection Officer has been appointed; privacy requests are received and handled through the address above.

(a) Information you provide

• Account information: when you sign in with Google, Google provides your email address, name, and profile picture
• Birth information: date of birth, hour of birth, gender, and any name or label you give a saved chart
• Compatibility information: if you use the couple compatibility feature, the other person’s birth details
• Win-story submissions: bet date, bet time, bet type, amount won (optional), a short written comment (optional), a bet screenshot, and whether you consent to public display

(b) Information collected automatically

• Page views: which pages you visit and when, recorded by our own PageTracker
• Approximate location: country and city, added automatically by Vercel at the server layer. We do not record your full IP address
• Aggregate traffic data from Vercel Analytics, which is statistical and not tied to an individual

(c) Payment information

• Payments are processed by Stripe. Our servers never receive or store your full card number or security code
• We retain only the transaction reference, amount, status, and timestamp, for reconciliation and support

• To compute your Four Pillars chart and generate your reports
• To store your charts and reports in your account so you can return to them
• To process payments, issue promo codes, and verify win stories
• To answer your enquiries and resolve technical problems
• To understand which pages are useful and improve the site’s content and structure
• To detect and prevent abuse, fraud, and security incidents

We do not use your birth data or report content for ad targeting, and we do not sell or rent this data to any third party.

The cookies and local storage we use are limited to what the service needs to function:

• Session cookie: set by Supabase to keep you signed in
• Browser sessionStorage: temporarily holds the report type you selected and your payment reference, then discards it
• Analytics: our own page-view counter, plus aggregate figures from Vercel Analytics

We do not use third-party advertising cookies and we are not part of any ad network.

To deliver the service, parts of your data are processed by the providers below. They may process it only on our instructions and not for their own purposes:

• Supabase: database, authentication, and file storage (including bet screenshots you upload)
• Vercel: site hosting, server-side rendering, and aggregate traffic analytics
• Railway: the backend server that computes charts and generates reports
• Stripe: payment processing
• Anthropic (Claude): generation of the report text. Your chart data and the relevant Bazi reference passages are sent at generation time
• OpenAI: text embeddings for the knowledge base. This step processes only our own reference material and does not involve your personal data
• Google: authentication, if you choose to sign in with Google

Beyond the above, we disclose your data only where required by law, or where necessary to protect the service and its users.

All traffic is encrypted with HTTPS. The database enforces row-level security so that you can access only your own charts and reports, and the admin dashboard is restricted to a designated administrator address.

To be straightforward about it, though: no system can promise absolute security. If a significant incident affects your personal data, we will notify affected users as promptly as is practicable.

Your account, charts, and reports are retained until you ask us to delete them — that is what lets you return to an old report at any time.

To delete your account, email admin@topbaziai.com with "Delete account" in the subject line. We will delete your account, saved charts, reports, win-story submissions, and the associated screenshots.

Exceptions: transaction records we are required to retain for legal, tax, or accounting purposes, and anonymised statistics that can no longer be traced back to you.

Wherever you are located, you may ask us to:

• Access the personal data we hold about you
• Correct inaccurate data
• Provide a copy of your data
• Delete your account and associated data
• Object to or restrict certain processing

To exercise these, email admin@topbaziai.com with "Data request" in the subject line. We aim to respond within 30 days. To protect your account, we may ask that the request be sent from your registered email address so we can verify it is you.

The service is used worldwide, and the providers listed above may hold data on servers outside Hong Kong, including in the United States and Europe. By using the service you understand and accept that your data may be processed outside your own jurisdiction.

The service is for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we discover that a minor has registered, we will delete the account and its data.

The site may link to third-party websites and social platforms such as Instagram. Those sites have their own privacy policies; we do not control and are not responsible for how they handle data.

This policy may be updated from time to time. Material changes are reflected in the "Last updated" date on this page, and where the impact is significant we will give notice prominently on the site or by email.

For any question about this policy, or to exercise the rights above, email: admin@topbaziai.com