Privacy Policy

This policy explains what information AuraTime ("we", "us") collects from you, why we collect it, and how we handle it. We aim to keep this short, plain, and honest. If something is unclear, email us at hello@getauratime.com.

1. What we collect

To produce your personalized Saju reading and deliver it to you, we collect:

• Identification: your name (as you choose to provide it) and email address.
• Birth data: date, time (or your best estimate), and city/country of birth. This is the input to your Saju chart calculation. We do not collect your real-name legal identity, government ID, or address beyond city.
• Payment metadata: the order ID and amount of your purchase. We do not see or store your card number, billing address, or banking details — those are handled entirely by our payment processor.
• Technical logs: standard server logs (IP address, browser type, referring page) for diagnostics and abuse prevention. Retained for 30 days then deleted.

We do not sell, rent, or trade your information to anyone, ever.

2. How we use it

• To calculate your Saju chart and generate your personalized report and wallpapers.
• To deliver the bundle to your email inbox.
• To respond to support requests you send us.
• To honor refund requests under our Terms.
• For legitimate fraud prevention and to comply with applicable law.

We do not use your data to train AI models or to personalize advertising.

3. Service providers we share data with

Producing and delivering your reading requires a small number of third-party processors. We share only what is necessary, and only for the purpose described:

• Lemon Squeezy — payment processing and merchant of record. Receives your name, email, and order amount. Their privacy policy: lemonsqueezy.com/privacy.
• Anthropic (Claude API) — generates the written analysis from your chart data. Receives anonymized chart data only (no name, no email). Anthropic does not train on API data by default. Their privacy policy: anthropic.com/legal/privacy.
• Google (Gemini API) — generates the wallpaper images. Receives a generic image prompt only (no personal data). Their privacy policy: policies.google.com/privacy.
• Resend — sends your bundle email. Receives your email address and the bundle attachment. Their privacy policy: resend.com/legal/privacy-policy.
• Vercel — hosts our website and serverless functions. Standard request logs only. Their privacy policy: vercel.com/legal/privacy-policy.

4. How long we keep it

• Birth data and order information: retained for 90 days after delivery, then deleted, unless you specifically ask us to keep it for re-delivery.
• Email address: retained as long as needed to honor refund requests (30 days minimum) and respond to support, then deleted.
• Server logs: 30 days, then deleted automatically.
• Payment records: retained by Lemon Squeezy per their policy and applicable tax law (typically 7 years). We do not control this retention.

5. Your rights

Wherever you live, you have the right to:

• Ask us what data we have about you.
• Ask us to correct it if it is wrong.
• Ask us to delete it (we will, except where retention is legally required).
• Ask us to send you a copy of it in a portable format.
• Withdraw any consent you have previously given.

Email hello@getauratime.com with your request and the email address you used to order. We respond within 14 days.

If you are in the European Union, the United Kingdom, or California, you have additional rights under GDPR / UK GDPR / CCPA. Those laws apply to us when they apply to you, even though we are a small operation.

6. Cookies

Our site uses minimal cookies:

• Essential: session and CSRF protection — required for the site to function. No tracking.
• Analytics: we currently use no third-party analytics. If we add analytics in the future, we will update this policy and use a privacy-respecting provider that does not require consent banners (e.g., Plausible, Fathom).

We do not use advertising cookies, retargeting pixels, or social media tracking.

7. International transfers

AuraTime is operated from South Korea. Our processors (above) operate primarily in the United States. By using our service, you understand your data may be transferred to and processed in those jurisdictions. Each processor has its own safeguards (Standard Contractual Clauses, etc.) for international transfers.

8. Children

AuraTime is not intended for users under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, email us and we will delete it.

9. Changes to this policy

If we change this policy meaningfully, we will update the effective date at the top and (where required) email customers who have ordered in the past 90 days.

10. Contact

Privacy questions: hello@getauratime.com.