01概要
本政策说明 —（下称"我们"）在你使用 Bazi Oracle（下称"本服务"）时如何处理个人信息。我们遵循最小必要原则：只收集生成命盘与解读所必需的信息，不要求你注册，也不要求你提供真实姓名。
02我们收集哪些信息
| 类别 | 具体内容 | 用途 |
|---|---|---|
| 排盘信息 | 出生日期、出生时间、出生地点（城市/经纬度）、性别；可选填写的称呼 | 换算真太阳时、排四柱与六爻、生成解读 |
| 你提交的内容 | 排卦时填写的事项文本、追问内容 | 生成对应的解读与回答 |
| 账户标识 | Cookie 中的随机标识（bz_uid、bz_uid_client） | 识别同一使用者，使点数与订单归属正确 |
| 设备与技术信息 | IP 地址与 User-Agent 经哈希处理后的设备指纹、浏览器类型、访问时间 | 防止点数被滥用、找回因清除 Cookie 而"失联"的已付订单 |
| 交易信息 | 订单号、所购点数包、支付状态（不含完整卡号） | 入账、对账、退款与客服 |
我们不收集身份证件、精确住址、通讯录、相册或位置轨迹；不进行用户画像投放；不出售个人信息。
03处理目的与法律依据
- 履行合同：生成命盘与解读、完成点数交付与售后（这是提供服务所必需）。
- 正当利益：防欺诈与点数滥用、保障服务安全与稳定、排查故障。
- 法定义务：依法保存交易记录、响应监管或司法要求。
- 同意：在你主动选择开启非必要功能（如语言偏好记忆）时；你可随时撤回。
04Cookie 与本地存储
| 名称 | 类型 | 用途 | 期限 |
|---|---|---|---|
| bz_uid（服务端 HttpOnly） | 必要 | 账户识别与点数归属 | 最长 1 年 |
| bz_uid_client（服务端 Cookie） | 必要 | 跨域/换设备时找回账户 | 最长 1 年 |
| localStorage 中的 uid、语言偏好 | 必要 | 记住账户与界面语言 | 直至你清除 |
| legal-lang、cookie-ack | 必要 | 记住法务页语言与提示已读 | 直至你清除 |
我们不使用第三方广告 Cookie、跨站追踪像素或行为定向工具。因站内仅使用必要 Cookie，我们以站内提示方式告知，而非弹窗征求同意；如你所在的司法辖区要求更严格，可通过浏览器设置拒绝 Cookie（但可能影响点数归属）。
05共享与第三方处理者
- 人工智能模型服务商：为生成解读文本，你提交的排盘信息与问题内容会通过加密接口发送给模型服务商处理。我们要求其仅用于完成本次推理、不得用于训练其模型，并按最短期限留存日志。
- 支付服务商 / 记录商户（—）：处理收款、开票、税费与退款，其隐私实践适用其自身政策。
- 云托管与日志服务商：提供服务器、带宽与错误监控，按我们的指令处理数据。
- 除上述情形，我们不会向第三方提供你的个人信息，除非法律要求或为保护用户与公众安全所必需。
06跨境传输
模型推理与托管服务可能位于你所在国家/地区之外。发生跨境传输时，我们采用合同条款等适当保障措施，并要求接收方提供不低于本政策水平的保护。
07保存期限
- 生成的报告与解读缓存：最长 24 小时（用于同一内容的重复查看，避免重复扣点）。
- 点数账本与交易记录：为对账、退款与法定义务，自交易之日起保存 3 年。
- 设备指纹与访问日志：最长 12 个月。
- 账户标识：在你持续使用期间保存；你可随时请求删除。
08你的权利
你可以请求：访问我们持有的你的个人信息；更正不准确的信息；删除（被遗忘）；获取可携带的副本；限制或反对特定处理；撤回同意。请发送邮件至 —，我们将在 30 日内答复。删除账户标识后，未消耗点数可能无法继续访问，请先确认余额。
若你认为我们处理不当，可向所在地数据保护机构投诉。
服务提供方位于中国内地，我们按《中华人民共和国个人信息保护法》（PIPL）及相关法规处理你的个人信息；你可行使查阅、复制、更正、补充、删除等权利，通过上文邮件方式提出。如你身处欧盟／英国或美国加州，我们亦会按 GDPR／CCPA 的相应规定处理你的请求。
09安全措施
我们采用 HTTPS 传输、服务端点数账本（客户端无法直接改写余额）、支付回调签名校验、访问日志审计等措施。互联网传输无法保证绝对安全，请勿在问题内容中填写身份证号、银行卡号等敏感信息。
10未成年人
本服务不面向 18 周岁以下用户。我们不会在知情情况下收集未成年人的个人信息；如发现此类情况，将尽快删除。
11政策更新
本政策更新时，我们会修改"生效日期"并在站内公告重大变化。继续使用本服务即表示接受更新后的政策。
12联系方式
| 数据控制者 | — |
|---|---|
| 隐私事务联系 | — |
| 电话 | — |
| 地址 | — |
01Summary
This policy explains how — ("we") handles personal data when you use Bazi Oracle (the "Service"). We follow data minimisation: we collect only what is needed to cast charts and produce readings, we do not require registration, and we do not ask for your real name.
02What we collect
| Category | Details | Purpose |
|---|---|---|
| Chart data | Date, time and place of birth (city/coordinates), gender; optional display name | True-solar-time correction, Four Pillars and Liu Yao casting, generating readings |
| Content you submit | Text of your question, follow-up messages | Producing the corresponding reading or answer |
| Account identifier | Random identifier in cookies (bz_uid, bz_uid_client) | Recognising the same user so credits and orders stay attached |
| Device and technical data | Device fingerprint derived by hashing IP and User-Agent, browser type, timestamps | Preventing credit abuse; recovering paid orders after cookies are cleared |
| Transaction data | Order number, package purchased, payment status (no full card number) | Crediting, reconciliation, refunds and support |
We do not collect identity documents, precise home address, contacts, photo library or location history; we do not run advertising profiles; we do not sell personal data.
03Purposes and legal bases
- Contract: casting charts, generating readings, delivering credits and providing support.
- Legitimate interests: fraud and abuse prevention, service security and stability, debugging.
- Legal obligation: retaining transaction records and responding to lawful requests.
- Consent: for optional features such as remembering your language preference; withdrawable at any time.
04Cookies and local storage
| Name | Type | Purpose | Retention |
|---|---|---|---|
| bz_uid (server-side, HttpOnly) | Essential | Account identification and credit ownership | Up to 1 year |
| bz_uid_client (server-set cookie) | Essential | Recovering the account on another device | Up to 1 year |
| localStorage: uid, language | Essential | Remembering your account and UI language | Until cleared |
| legal-lang, cookie-ack | Essential | Remembering legal-page language and notice acknowledgement | Until cleared |
We use no third-party advertising cookies, cross-site pixels or behavioural targeting. Because only essential cookies are used, we inform you via an on-site notice rather than a consent wall; you may still block cookies in your browser, though credit ownership may be affected.
05Sharing and processors
- AI model provider: to generate readings, your chart data and question text are sent over an encrypted API. The provider is required to use it only to serve that request, not to train models, and to keep logs only as long as necessary.
- Payment provider / Merchant of Record (—): handles payment, invoicing, tax and refunds under its own privacy policy.
- Hosting and logging providers: servers, bandwidth and error monitoring, acting on our instructions.
- Otherwise we do not disclose personal data unless required by law or necessary to protect users and the public.
06International transfers
Inference and hosting may take place outside your country. Where data is transferred internationally we rely on appropriate safeguards such as contractual clauses and require recipients to maintain protection no lower than this policy.
07Retention
- Report and reading cache: up to 24 hours (so re-opening the same content does not re-charge credits).
- Credit ledger and transaction records: 3 years from the transaction, for reconciliation, refunds and legal obligations.
- Device fingerprints and access logs: up to 12 months.
- Account identifier: while you use the Service; you may request deletion at any time.
08Your rights
You may request access to the personal data we hold, correction of inaccurate data, erasure, a portable copy, restriction of or objection to processing, and withdrawal of consent. Email — and we will respond within 30 days. Deleting your account identifier may make unused credits inaccessible, so check your balance first.
You may also lodge a complaint with your local data-protection authority.
The Service is provided from Mainland China, and we handle personal data in accordance with the Personal Information Protection Law of the PRC (PIPL) and related regulations. You may exercise your rights of access, copying, correction, supplementation and deletion through the requests described above. If you are located in the EU/UK or in California, we also handle your request in line with GDPR and CCPA requirements.
09Security
We use HTTPS in transit, a server-side credit ledger that clients cannot rewrite, signed payment webhooks and access-log auditing. No transmission over the internet is absolutely secure; please do not put ID numbers, card numbers or other sensitive data into question text.
10Children
The Service is not directed to anyone under 18. We do not knowingly collect children's personal data and will delete it if discovered.
11Changes
When this policy changes we update the effective date and announce material changes on the site. Continued use constitutes acceptance.
12Contact
| Data controller | — |
|---|---|
| Privacy contact | — |
| Phone | — |
| Address | — |