Birth details and readings can contain personal information about you or others. Submit only what is needed and obtain other people's permission first. On shared devices, check saved birth details and clear website data before leaving.
Scope and operator
bazitao is responsible for information processing on this website (referred to as “we” or “us”). Our public contact email appears at the end of this page. This policy covers our features; external services reached through links have their own policies.
We process information to provide services you actively request, fulfil necessary obligations and act on consent obtained where required. Processing that requires separate consent must be separately explained and authorized. Visiting the site or reading this policy is not consent to all optional processing.
Information we process
The information processed depends on the features you use. We do not require identity documents, financial information or health information unrelated to those features.
- Account details: email, display name and sign-in method. Password accounts store a one-way password hash. If you choose Google sign-in, we process the account identifier, email, name and profile image provided through that authorization.
- Charts and profiles: names or labels, sex, birth date and time, calendar, birthplace, calculation settings and resulting charts. Compatibility readings process both people's corresponding details.
- Oracle lots and readings: selected reading category, lot number and text, generation tasks, reports, requested translations and records you choose to save.
- Order details: only when you use an enabled purchase feature, we process order references, the chosen service, amounts, currencies, payment and refund status, and necessary reconciliation records. Complete card details are processed by the third-party checkout service and are not received or stored by this site.
- Membership and reminder details: selected plan, paid term and expiry, purchase confirmations and refund requests. When you opt into daily in-app reminders, we store your selected personal profile, timezone, reminder time, on/off setting, daily insight content and read status.
- Sessions and security: login sessions, browser or device type, request times and necessary network request information. Servers may process IP addresses and error logs for security, rate limiting and troubleshooting.
- Browser preferences and local information: interface language, last sign-in method and email, remembered birth details and temporary results in the current tab.
- Correspondence: questions, requests and information necessary to verify account ownership when you contact our public email.
Purposes and legal bases
We use necessary information to calculate charts, show oracle texts, generate requested readings and translations, maintain sign-in, save and retrieve records, and respond to account and privacy requests. If you make a purchase, order information supports payment verification, delivery, refunds and transaction disputes. Necessary technical information helps secure the service, limit abuse and diagnose problems.
We do not sell personal information, including a sale as defined by the CCPA where applicable, or share it for cross-context behavioural advertising. Private profiles and reports are not published as educational content. We do not use your inputs to train AI models without your explicit consent.
Membership records verify access and show its duration. Optional daily in-app reminders are generated at your selected time only after you enable them; disabling stops future reminders. Daily reminder content uses this site's chart and date rules without an external AI call. AI readings you actively request remain subject to their separate processing confirmation.
- Registration, sign-in, charts, saved profiles, requested reports and translations: performance of the requested service contract. Separate consent is obtained where required for AI processing or another person’s data.
- Payment verification, delivery, refunds and support: performance of a contract. Legally required tax and transaction records or regulatory disclosures: legal obligations.
- Account security, fraud prevention and troubleshooting: legitimate interests in protecting users and services where permitted, balanced against individual rights; otherwise the legal basis required by applicable law.
- Necessary billing, security and policy notices: contract, legal obligations or legitimate interests where applicable. Optional marketing and non-essential tracking require separate consent; reading this policy does not provide that consent.
External AI and third-party processing
When you request an AI reading or report translation, we send the information required for that task to the enabled external model service. This may include birth details, chart facts, oracle text, report text or other relevant inputs. Different features may use different providers. Browsing educational content or viewing saved reports does not itself generate another AI reading.
Google participates in authentication only if you select that sign-in method. Hosting and technical infrastructure services may process necessary information to operate the website. We may also disclose information as necessary to fulfil legal obligations, respond to lawful requests or protect users and service security.
Entering an enabled purchase flow sends the necessary order reference, product, currency and interface language to Waffo Pancake for hosted checkout. We receive payment, refund and reconciliation status. Payment card details are handled by the PCI-DSS compliant payment processor Waffo Pancake; full card numbers and security codes do not pass through or remain on our servers. Purchase pages identify test mode.
External services may process information outside your country or region, with retention governed by their relevant agreements and policies. Any cross-border notices, separate consent or other procedures required by applicable law must be completed before that processing; this policy does not replace them. You can choose not to use the relevant AI, payment or third-party sign-in features, and contact us about specific recipients and processing locations.
Data supplied to technical providers is limited to what the relevant service needs. If a merger, acquisition or business transfer involves personal information, we will explain the recipient and impact and require continued protection. Changed purposes or other consent requirements will be addressed before processing. Third parties have their own policies; we remain responsible for our own legal obligations.
Cookies, remembered details and temporary data
Strictly necessary storage: sign-in cookies last up to 30 days and become invalid on sign-out or revocation. Google sign-in verification cookies last up to 10 minutes. Blocking cookies in your browser may prevent sign-in. Functional storage: the language cookie lasts up to 365 days; locally saved language, last sign-in method and email remain until site data is cleared or the values are updated. They are not used for advertising profiles.
After a successful BaZi calculation, the site remembers entered birth details in the current browser to prefill a later visit. This local copy expires after 30 days and is cleared when next read. Separately, confirmed chart details and temporary results remain in memory and sessionStorage in the current tab for 30 minutes after confirmation. Background tabs may clear expired data when it is next read.
Clearing this site's cookies and website data removes these local records but does not automatically delete profiles or reports stored on our servers. Clear website data on shared computers. Blocking storage may affect sign-in, remembered preferences or temporary results after a refresh. Advertising tracking cookies are not currently integrated.
The site currently has no third-party behavioural analytics or marketing tracking pixels. Browser settings let you clear or restrict functional storage; private browsing can reduce local retention. Restricting necessary sign-in storage affects features that depend on it. Before introducing non-essential analytics or marketing tracking, we will identify tools, purposes, retention and controls and obtain consent where required.
Server storage and retention
Profiles, oracle records and reports you choose to save are linked to your account for access across devices. Submitting a reading task also stores its necessary inputs, status and results on the server to complete generation, show progress, retrieve reports and avoid duplicate requests.
Account information and saved records are retained while needed for these features, until you delete the relevant records or close your account. Other task records, logs and backups are retained only as necessary for their purposes or legal obligations. Order, payment and refund records may remain after account links are removed for necessary reconciliation, disputes or legal obligations. If deletion involves an active task, backups or information that must legally be retained, we will explain the scope and handling. Restricted retained information will not be used for new unrelated purposes.
Daily reminder preferences and generated content are kept until the linked profile or account is deleted. Disabling reminders stops new content without deleting existing records; membership expiry pauses new reminders. The workbench displays recent reminders. Membership purchases, refunds and reconciliation facts follow the transaction retention rules.
Information security
Account passwords are stored as salted one-way hashes, and session tokens are stored as hashes in the database. Production communication should use HTTPS, with appropriate sign-in cookie protections. Access to private account information and account operations requires authentication.
No storage or communication system can guarantee absolute security. Use a unique password, protect your email and devices, and do not share verification codes or session information. Contact us promptly about a suspected breach or account misuse. We will communicate security incidents and take remedial measures as required by applicable law.
If a personal data incident occurs, we will investigate, contain it and take remedial action. Where the GDPR applies and notification is required, we will notify the relevant authority within 72 hours of awareness and notify affected people without undue delay where there is a likely high risk. Other jurisdictions follow their applicable notification rules. Notices explain the impact, measures taken and contact channel.
Your data rights and requests
Your account lets you view saved information, change your display name, manage profiles and reports, and delete records. The security page lets you revoke sessions or close your account. Closing an account deletes it and its associated charts, readings, oracle records and other linked records; save anything you need first.
Email us to request access or copies of other personal information, correct details you cannot change yourself, request deletion or processing restrictions, withdraw consent-based processing or exercise other applicable rights. We will perform necessary and proportionate identity verification and respond according to law. Do not send passwords or verification codes.
Withdrawing consent does not affect lawful processing that took place before withdrawal and may prevent features dependent on that information from operating. Deleting site records may not immediately remove information already lawfully sent to a third party. We will assist under applicable rules and explain the situation.
Email our public address with “Privacy request”, the right you wish to exercise and the associated account. We respond within 30 calendar days of receipt, or sooner if law requires. If a lawful extension is necessary, we explain the reason and new deadline within the initial period. Requests are normally free; if we cannot fulfil one lawfully, we explain why and how to challenge the decision. Verification is proportionate and never requires passwords or verification codes.
- Information and access: understand processing and obtain a copy of your personal information.
- Correction and deletion: correct inaccurate information or request deletion where legal conditions apply.
- Restriction and objection: restrict processing or object to legitimate-interest processing where applicable, and object to direct marketing at any time.
- Portability: receive data in a structured, commonly used, machine-readable format, or request feasible direct transfer where applicable.
- Withdrawal: withdraw consent at any time without affecting lawful processing before withdrawal.
- Complaints and non-discrimination: complain to a data protection authority in your habitual residence, place of work or location of an alleged infringement. We will not discriminate against you for lawfully exercising your rights.
Marketing communications and opt-out
There is currently no marketing subscription feature. Registering, buying or submitting birth information does not automatically subscribe you to marketing. If optional marketing emails are introduced, we will obtain the required consent and provide an unsubscribe method in each email. You may also email us to stop marketing. Opting out does not stop necessary billing, security or material policy notices.
Other people's information and minors
This service is intended for users aged 18 or older. Do not register accounts for minors or submit information about minors. Before submitting another adult's information, ensure that person understands and permits the relevant processing, particularly compatibility and AI readings.
Contact our public email if you believe we have processed unauthorized information about another person or a minor. Once verified, we will take appropriate action, such as deletion or restriction of processing.
Updates and contact
This page identifies its version and last update date. Material changes to purposes, information types, recipients or important rights will be announced on the site or to your registered email at least 15 calendar days before their stated effective date. Where renewed consent is necessary, it will be obtained before the new processing starts; continued visits alone do not replace it.
For questions about this policy, third-party processing or personal information rights, email us below with the request type and only the information needed for verification.
Contact bazitao
- Service brand
- bazitao
- Support / privacy
- xingwu2006@gmail.com
Use this email for account, billing, refund, security and privacy requests. Include the request type and necessary account or order reference, but never passwords, verification codes or complete card details.