Privacy Policy

Last updated: February 2026

Fortune Synthesis (“we”, “our”, “the Company”) is committed to protecting your personal information. This Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Personal Information We Collect

• Account data: Email address and display name (from OAuth provider — Google or GitHub via Supabase Auth).
• Analysis input: Birth date, birth time (optional), birth place / coordinates (optional), full name, and the question you submit for analysis.
• Usage data: Analysis results, AI conversation history, and payment records.
• Technical data: IP address, browser type, and access logs (retained for up to 3 months for security and stability purposes).

2. How We Use Your Data

• Generate fortune analysis results using AI interpretation.
• Power the AI conversation feature tied to your analysis.
• Process payments via PayPal.
• Maintain service security, stability, and fraud prevention.
• Improve the Service through anonymized usage analysis.
• Comply with applicable legal obligations.

3. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) hosted on secure cloud infrastructure. Row Level Security (RLS) ensures only you can access your own data. All data is encrypted in transit via HTTPS/TLS and encrypted at rest. We apply access minimization — only the systems that need your data can access it.

4. Third-Party Services

• Anthropic (Claude AI): Your birth data and questions are sent to Anthropic's API for AI-generated interpretation. See Anthropic's Privacy Policy.
• PayPal: Payment processing. We do not store card data. See PayPal's Privacy Policy.
• Supabase: Database, authentication, and storage provider. See Supabase's Privacy Policy.
• Google Analytics: Anonymous, aggregated usage statistics via anonymized IP addresses.

5. Your Rights (GDPR & Korean Personal Information Protection Act)

• Access: View all your stored data via your Account page.
• Export: Download your data as JSON from Account settings.
• Delete: Permanently delete your account and all associated data via Account settings. Deletion is irreversible.
• Rectification: Update your profile information at any time.
• Objection: Contact us to object to specific data processing activities.

6. Data Retention

• Free users: Only your most recent analysis is retained. Older analyses are automatically removed.
• Paid analyses: Stored indefinitely until you delete your account.
• Conversation history: Retained while the associated analysis exists.
• Payment records: Retained for up to 5 years as required by law.
• Access logs: Retained for up to 3 months.

7. Cookies

We use essential cookies for authentication (Supabase session token). We use Google Analytics cookies for anonymized usage statistics. We do not use advertising or tracking cookies.

8. Children's Privacy

The Service is not directed at children under 14. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us for immediate deletion.

9. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via in-service notices. Continued use after changes constitutes acceptance of the updated Policy.

10. Contact

For privacy-related inquiries, data access requests, or deletion requests, please use our Contact page.