1. What we collect

To generate your BaZi chart and deliver your report, we collect:

• Name (used to personalise the report and email)
• Email (used to deliver your report and account access)
• Gender, date and time of birth, country and city of birth (used to compute the chart)
• Optional: marketing-email consent
• Technical: IP address, browser, and device data for security and analytics

2. How we use it

We use your data only to:

• Compute your BaZi chart and generate your free / paid report
• Deliver your report by email and provide account access
• Send (with your consent) follow-up emails about new reports
• Improve site quality and prevent abuse

3. Third-party processors

To provide the service we share the minimum necessary data with trusted processors:

• AI generation — your chart data (and any question you type into a consultation) is sent to our AI provider to generate the written interpretation. It is used only to produce your report.
• Email delivery — your email address is processed by our email provider to send reports and account messages.
• Sign-in — if you use "Sign in with Google", Google provides us your basic profile and email.
• Payments — when you purchase a report, payment is handled by our payment processor; we do not store your full card details.

4. What we do NOT do

• We do not sell your personal data to third parties.
• We do not share your birth data publicly.
• We do not use your report content for marketing without permission.

5. Storage, security & retention

Your data is stored on secured servers with access restricted to authorized administrators. Passwords are stored as bcrypt hashes — never plaintext. Birth data is treated as sensitive personal information. We retain your account and report data for as long as your account is active; you can request deletion at any time (see below), after which we remove your personal data except where we are legally required to keep transaction records.

6. Your rights

You can request access, correction, or deletion of your data at any time. Contact hello@bazimap.com with your request.

7. Cookies

We use a small number of first-party cookies only: a session cookie for login, a CSRF token for security, and a language-preference cookie (bz_lang) that remembers whether you chose English or Chinese. Your light/dark theme choice is stored locally in your browser. We do not use third-party advertising or tracking cookies by default.

8. Updates

We may update this policy from time to time. Material changes will be communicated via email if you have an account.