1. Data We Collect

• Account Data: Email address, display name.
• Birth Data: Date of birth, time of birth, city of birth — required for chart generation.
• Conversation Data: Text messages exchanged during DeepTalk AI consultations.
• Payment Data: Transaction IDs and amounts processed through LemonSqueezy. We do NOT store credit card numbers or payment credentials directly.
• Usage Data: Feature usage logs, credit balance history.

2. How We Protect Your Data

• Authentication: Supabase Auth with ES256/HS256 JWT token verification.
• Row-Level Security (RLS): All database tables enforce Supabase RLS policies — users can only access their own data. No cross-user data leakage is possible at the database level.
• Service Key Isolation: Backend uses a separate SERVICE_ROLE key for administrative operations, never exposed to the client.
• Encryption in Transit: All API communication uses HTTPS/TLS.
• Encryption at Rest: Supabase encrypts data at rest using AES-256.

3. How We Use Your Data

• Birth data is used exclusively for generating astrological charts (natal, Bazi, Zi Wei Dou Shu).
• Conversation data is used to provide contextual AI responses and may be stored for session continuity.
• Payment data is used for billing, refund processing, and fraud prevention.
• We do NOT sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

• Supabase: Database and authentication provider (PostgreSQL, hosted in AWS).
• LemonSqueezy: Payment processing. Subject to LemonSqueezy's Privacy Policy.
• Google Gemini API: AI model provider for DeepTalk consultations. Conversation text is sent to Google's API for processing.

5. Data Retention & Deletion

• Account data and charts are retained as long as your account is active.
• You may request complete deletion of your account and all associated data at any time.
• Upon receiving a deletion request, all personal data will be permanently removed within 30 days.
• Payment transaction logs may be retained for up to 7 years for legal/tax compliance.

6. Your Rights

You have the right to access, correct, export, or delete your personal data. To exercise these rights, contact support@darakview.com.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Service after changes constitutes acceptance.

8. Contact

For privacy-related inquiries, contact us at support@darakview.com.