← Back to Daily Saju

Privacy Policy

Last updated: April 2026

1. Information You Provide

When you use Daily Saju, you voluntarily provide the following personal information through our reading form:

• Name: Used to personalize your reading. We do not verify names against external databases.
• Gender: Used in traditional Saju calculation (affects Major Luck Cycle direction and spouse star interpretation).
• Birth date: The core input for calculating your Four Pillars chart.
• Birth time: Used to determine your Hour Pillar. If unknown, we generate a reading based on three pillars only.
• Questions (Ask Saju): If you use the Ask Saju feature, your typed question is sent to our AI for interpretation.

2. Information Collected Automatically

When you visit our site, we automatically collect certain technical information through cookies and similar technologies:

• Device information: Browser type, operating system, screen resolution, device category (mobile/desktop)
• Usage data: Pages viewed, time spent on site, click patterns, referral source
• Location data: Country and general region (city-level), determined from IP address. We do not store your exact IP address.
• Language preference: Your selected reading language

3. How We Use Your Information

Reading Generation

Your birth information (name, gender, date, time) is sent to Anthropic's AI service to generate your personalized Saju reading. This data is transmitted securely via encrypted HTTPS connections. Anthropic processes this data solely for generating your reading and does not retain it for training purposes.

Caching and Access

Your generated reading is cached in our PostgreSQL database (AWS Seoul region) so you can access it again without regenerating. Cached readings are associated with your Telegram account or a unique token derived from your birth data.

Telegram Login

If you sign in with Telegram, we receive your Telegram user ID, username, display name, and profile photo URL. We use this only to identify your account and route bot replies. We never access your Telegram messages, contacts, or chat history.

Subscriptions and Recurring Billing

If you subscribe to a monthly plan, we store your payment method token (card details are held by the PG provider, not us), subscription status, next renewal date, and billing history. This data is used solely to manage your subscription and issue receipts. Billing records are retained for at least 5 years after cancellation as required by Korean commerce and tax law.

Service Improvement

We use anonymized, aggregated analytics data to understand how users interact with our service, which features are most popular, and where we can improve the user experience.

4. Payment Information

Credit/Debit Card Payments & Subscriptions

In-chat payments are processed through Telegram Stars (XTR). Telegram handles the full payment flow; we only receive a successful-payment callback with the Telegram-assigned transaction ID and the package you purchased. We never see, store, or have access to any card number, CVV, or billing address. See Telegram's Privacy Policy.

Cross-Border Transfer

• Recipients: Toss Payments Corp. (Republic of Korea, web card payments — pending onboarding), Telegram FZ-LLC (UAE, for Telegram Stars purchases)
• Purpose: Card and recurring payment processing, fraud detection, tax calculation
• Items transferred: Email, payment method token, amount, country, currency
• Retention: Destroyed without delay after statutory accounting/tax retention periods

Telegram Stars Purchases

If you pay with Telegram Stars inside the Telegram bot, we receive only the successful-payment callback from Telegram (Telegram-assigned transaction ID and the package purchased). We never receive or store your card number, CVV, or billing address. See Telegram's Privacy Policy.

5. Cookies and Tracking Technologies

We use cookies and similar technologies on our site. Here is a detailed breakdown:

Google Consent Mode v2

We implement Google Consent Mode v2 to manage how Google services use cookies on our site. Analytics storage is granted by default so that we can measure aggregate, anonymized site usage and improve the service. Advertising storage (ad personalization, ad measurement) defaults to denied and is only granted after you opt in through our Consent Management Platform (CMP) powered by Google Funding Choices. You can withdraw analytics consent at any time by using your browser's cookie controls or the opt-out tools listed in Section 6.

6. Google AdSense & Advertising

We use Google AdSense to display advertisements on our site. Google AdSense may use cookies and web beacons to serve ads based on your prior visits to our site and other sites on the internet. Google's use of advertising cookies enables it and its partners to serve ads based on your browsing patterns.

You can opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of third-party vendor cookies by visiting aboutads.info.

For more details on how Google uses your data, see How Google uses information from sites that use its services.

7. Third-Party Services

We share data with the following third-party services, each for a specific and limited purpose:

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

8. Data Retention

Your reading data is retained in our cache for as long as the service operates, allowing you to return and access your reading without regenerating it. Payment records (transaction IDs, not full card details) are retained for accounting and dispute resolution purposes. Analytics data is retained according to Google Analytics' default retention period (14 months).

9. Your Rights

Regardless of your location, we provide the following rights to all users:

• Right to Access: View your saved data anytime in the bot via /me and /history, or request a full export via email.
• Right to Deletion (Right to Erasure): Delete your entire account and all associated personal data at any time — use /delete in the Telegram bot, the "Delete account" button on your dashboard, or email us. Deletion is immediate and irreversible.
• Right to Opt Out: Decline tracking cookies via the consent banner or your browser settings. Use the Ask Saju feature without providing real personal information if you prefer.
• Right to Correction: Update your saved Saju chart at any time, or email us for other corrections.
• Right to Data Portability: Request a machine-readable copy of your data via email; we respond within 30 days.

What deletion erases: Your user profile, all saved Saju charts (yours and people you've saved), all generated readings and compatibility reports, point balance, purchase history, session data, and any active subscription is canceled immediately.

Anti-abuse marker: To prevent farming the signup bonus via repeated delete/rejoin cycles, we retain a one-way SHA-256 hash of your Telegram ID after deletion (no other data, and the raw ID cannot be recovered from the hash). This marker is used only to flag previously-deleted accounts and is retained for up to 12 months.

To exercise any of these rights manually, contact us at cs@daily-saju.com. We respond within 30 days.

10. International Users (GDPR & CCPA)

European Union Users (GDPR)

If you are located in the EU/EEA, our legal basis for processing your data is: (a) your consent (for cookies and tracking, managed via our CMP), and (b) legitimate interest (for providing the service you requested). You have additional rights under GDPR including the right to data portability and the right to lodge a complaint with your local data protection authority.

California Users (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information as defined by the CCPA.

11. Children's Privacy

Daily Saju is not intended for children under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a child under 18 has provided us with personal data, we will delete it promptly.

12. Data Security

We implement appropriate technical and organizational measures to protect your data, including: HTTPS/TLS encryption for all data transmission, hardened hosting in AWS Seoul region, environment-variable-based secret management, access controls limiting data access to authorized services only, and PG-side tokenization of payment methods — card numbers are never stored on our servers.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Contact & Business Information

For privacy-related questions, data access or deletion requests, subscription cancellation, or refund inquiries, email the address above. We typically respond within 30 days. For urgent payment issues include "URGENT" in the subject line.