Privacy Policy

Last updated: 2026-07-13

DEDAO ("we", "us") is a service operated by an independent individual, providing AI-assisted readings based on classical Chinese chart systems. This policy explains what we collect, why, and the rights you have over your data.

Who we are

DEDAO is operated by an independent individual. For any privacy request or legal notice, contact us at [email protected].

What we collect

Birth details — the date, time and place of birth you enter to cast a chart. We treat this as sensitive data.

Account data — your email address and login, handled by our authentication provider (Clerk). We never receive or store your password.

Questions and context — the question you select and any optional context you choose to add.

Your readings — the readings we generate are stored so you can revisit them.

Payment data — payments are processed entirely by our payment provider (PayPal). We never receive or store your card or bank details; we only receive confirmation that a payment succeeded.

Basic technical data — standard server logs (such as IP and browser type) used for security and reliability.

How we use it, and our legal basis

Your birth details are used to calculate, save and deliver the chart and readings you request, and where necessary to provide support and keep the service secure. We do not sell your data, and we do not use your birth details for advertising.

For users in the EEA or UK, our legal bases are: performance of our contract with you (delivering the reading you asked for), your consent (where you provide optional context), and our legitimate interests (keeping the service secure and preventing abuse).

Service providers we rely on

To run the service we use: Clerk (authentication), an AI processing provider (the computed chart facts and your question are sent to it to generate the interpretation), Neon (database hosting), Railway (application hosting), and PayPal (payments). Each provider receives only what it needs and processes it on our instructions.

International transfers

Some of these providers process data outside your country, including outside the EEA. Where required by law, such transfers rely on appropriate safeguards (for example standard contractual clauses).

Entering someone else's birth details

If you enter another person's birth details, you confirm that you have their permission — or, for a minor, the permission of their parent or guardian. Minors may not create their own account.

Retention and deletion

Your account, charts and readings are kept while your account is active. You can request deletion of your account and associated data at any time, and we will complete it within 30 days — except for records we are required to retain for payment, anti-fraud, tax or legal reasons, which may not be deleted at the same time.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your data, to receive a copy of it, and to complain to a data-protection authority. To exercise any of these, email [email protected].

Changes

If we make material changes to this policy, we will post the updated version here with a new date.