Saju · privacy policy
Privacy Policy
This page says what we collect, why, who touches it, and how you get it back or delete it. It is written to be read, not to be scrolled past.
1. What we collect
Before you sign in: nothing leaves your device. The free screens compute your chart in your browser. We do not receive your birth date or your chart unless you choose to sign in.
When you sign in: your email address, and the birth date, time and place you entered (so your reading can be written and reopened). Gender, if you chose one, is used only for the direction of the ten-year cycles.
When you buy: your name and card details go to Stripe (web) or Apple/Google (apps). We receive a payment confirmation, the plan, and Stripe's customer id. We never see your card number.
Read Anyone: the other person's birth date, time and place. The name you call them is kept only in your browser and is never sent to us.
Readings: the text composed for a chart, stored so it can be reopened without being rewritten.
Technical: our host keeps standard server logs (IP address, time, page) for security, for up to 30 days. We use one cookie, saju_session, to keep you signed in for 90 days. No advertising or tracking cookies, no analytics that follow you across sites.
2. How we use it
- To compute your chart and write your readings.
- To sign you in, deliver what you paid for, and send receipts and renewal notices (7 days before an annual renewal).
- To answer support email and process refunds.
- To improve the corpus: practitioners review a small sample of readings for tone. They see the chart and the text, never your email or name.
We do not sell personal information, do not share it for advertising, and do not build profiles across services.
3. Who processes it for us
- Vercel (hosting, United States) — serves the site and runs our code.
- Supabase (database, US East) — stores accounts, birth details, plans and readings.
- Stripe — payments, receipts, subscription management.
- Anthropic — the language model that composes readings receives the chart (pillars, elements, roles) and reviewed corpus passages. It does not receive your email or name. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
- Resend — sends sign-in links and notices by email.
- Apple / Google — billing and receipts for purchases made in their apps.
Each processor acts on our instructions under a written agreement. Data is stored in the United States; if you use the Service from elsewhere, your data is transferred there.
4. How long we keep it
Your account data stays until you delete the account. Readings are keyed by chart, not by person; when you delete your account they are deleted too unless another user shares the same chart. Payment records are kept for 7 years as tax law requires. Server logs are kept up to 30 days. Sign-in links expire after 30 minutes.
5. Your rights and how to use them
See and download everything: My account → "Download my data". It is a JSON file with your email, birth details, plan and readings.
Delete everything: My account → "Delete my account". It happens immediately; there is no waiting period and no one to call.
Correct something: go through the first screens again and sign in; the new birth details replace the old ones. Or email us.
Opt out of sale or sharing: we do not sell or share personal information, so there is nothing to opt out of; the right still exists and we honour it.
These rights apply to everyone. Residents of California have them under the CCPA/CPRA, and residents of the UK and EU under the UK GDPR and GDPR, including the right to complain to your data protection authority. We will not treat you differently for using them. Requests by email are answered within 30 days; we may ask you to confirm the request from the email on the account.
6. Children
The Service is for adults 18 and over. We do not knowingly collect data from anyone under 18; if you believe we have, email us and we will delete it.
7. Security
Data travels over HTTPS and is stored encrypted at rest by our providers. Sign-in tokens and session cookies are stored only as hashes. Our model provider and payment processor never receive your email together with your chart. No system is perfectly secure; if we learn of a breach affecting you, we tell you by email without undue delay.
8. Changes
If we change this policy in a way that matters, we email account holders at least 14 days before it takes effect and show the new date at the top of this page.
9. Contact
US All Global LLC, 1515 Colby Ave. Apt. 216, Los Angeles, CA 90025, USA · usallgloballlc@gmail.com