Privacy Policy

What this service is

BaziPal is an AI companion that reads tarot, Chinese birth charts, zodiac, and feng shui. Because the product is built around a companion that remembers you, we want to be unusually plain about what "remembers" means for your data.

What we collect

• Birth details you enter: birth date, optional birth time, and gender presentation, used to compute your chart, zodiac, and kua. These are sensitive to you; treat entering them as a deliberate choice.
• Your conversations with the Guardian: every message you send and every reply, stored so the conversation can continue across visits.
• Companion memory derived from conversations: a structured profile (facts you share, such as your job, city, or a pet's name), episodic "moments" the Guardian may ask about later, and a rolling summary of past chats. This is the product working as described, not a hidden byproduct.
• Email address, only if you provide it (results delivery, the optional daily-card email).
• Technical basics: a guest identifier cookie (bp_guest), session cookies if you create an account, IP-derived rate-limiting counters (kept at most 7 days, then purged), server logs (model latency, token counts — not message content in cost logs), and product events such as "Guardian started", "turn completed", "photo analyzed", or "report delivered". Product events contain only the event name, language, small operational attributes, and a one-way truncated hash of the guest identifier — never conversation text, email, birth details, the raw guest identifier, or an IP address.
• Social-share records, only when you choose to share: the card key you publish, a purpose-separated one-way hash of the guest identifier used for ownership and revocation, comparison consent, and any 3/7-day check-in you write. A share never contains your name, birth details, email address, or chat history. Contact details, phone numbers, and URLs in a check-in are automatically redacted before storage. Check-ins are visible to link holders only when you explicitly make them public.

We do not collect payment card numbers ourselves; if paid features are enabled, payment is processed by Stripe and we receive only transaction status.

Photos (free trial and subscribers)

Each user may try one photo reading during beta; active subscribers may use up to ten per day. You may show the Guardian a palm or a living space. To analyze it, BaziPal sends the image in memory through OpenRouter to a selected vision-model provider. BaziPal does not write the image itself to our database or object storage; our application discards the image bytes when that request finishes. The provider's handling of the request is governed by its own data policies. The resulting short text description is stored temporarily: if you send it to your Guardian it becomes part of your conversation memory and is deleted with the rest of your companion data; if you upload it and never send it, it becomes unusable after 90 minutes and is deleted by our daily cleanup, at the latest within 48 hours. Do not share photos that show other people, identity documents, or anything you would not put into the chat as text.

The Home Feng Shui image flow uses this same allowance and provider route for room photos or floor-plan images. Its structured observation report is returned directly to your browser tab; BaziPal does not save that report to Guardian memory. Selecting an image alone does not send it: the Analyze action sends a resized copy with image metadata removed, together with your chosen property type, goal, furniture-mobility setting and optional notes. Do not put addresses or private identity details in those notes. This home context is returned with the report and is not saved to our database or Guardian memory. Reloading or closing the tab loses the home report unless you explicitly download it. Optional browser room-plan saves contain geometry, not the source image, birth data or the image report.

Who processes it

Chat messages, uploaded images used for photo analysis, and the context needed to answer them (including relevant memory and birth-chart facts) are sent through the OpenRouter API to large-language-model providers. Depending on the task this currently includes models operated by DeepSeek, Google, and Anthropic. Emails are sent through Resend. The web application is hosted on Vercel, and persistent application data is stored in Neon Postgres. Card and character artwork was generated with fal.ai at build time (no user data involved).

We do not sell your data, and we do not use your conversations to train our own or anyone else's models.

Retention

Conversations, memory, and birth details are kept while your companion exists so the relationship can continue. Rate-limit counters are purged after at most 7 days. Pseudonymous product events are kept for at most 180 days. Social-share links expire after 180 days, are removed by the next daily cleanup, and can be revoked immediately by their creator; verified companion deletion also removes shares and responses linked to that guest identity. Server cost logs are kept for operational analysis.

Deletion and access

To have your companion, conversations, memory, and birth details deleted — or to receive a copy of them — open a support ticket from your account or email contact@bazipal.app. The service operator is Shenzhen Tuohaiqihang Co., Ltd. We will complete verified requests within 30 days. Unsubscribing from emails is one click from any email we send and never requires contacting us.

Cookies

bp_guest identifies your guest companion. Session cookies handle sign-in. A locale cookie remembers your language. We set no third-party advertising cookies.

Age

BaziPal is for users 18 and older.

Changes

We will update this page and its date when practices change. Material changes to what we collect will be announced in the product.