Privacy Policy

What we collect

To compute your reading we collect your birth date, birth time (optional), and birthplace, which we convert to coordinates and a time zone. If you unlock a full reading we also store your email address and payment status. Optional details you share in a reading (such as city, industry or goals) are kept to personalize future guidance.

How we use it

We use your data only to compute your chart and BaZi, generate and store your reading, send the email you requested, and process payment. We also look at aggregate statistics about visits to the site (which pages are viewed, which site a visit came from, from which country, and on what type of device) to see how it is used; these are collected without cookies, and we see totals, not individual visitors. We do not sell your personal data, and we do not use it for advertising. If you're in the EU or UK, our legal bases are: performing our contract with you (computing and delivering the reading you asked for), your consent (marketing email, and any optional detail you choose to share), and our legitimate interests (keeping the service secure, preventing abuse, and understanding how the site is used). Where we rely on consent, you can withdraw it at any time.

AI processing

Your chart data is sent to a third-party AI provider we contract with, solely to synthesize your reading. It is not used to train external models. The deterministic chart and BaZi calculations happen on our own servers.

Your choices

You can request a copy of your data, ask us to correct it, or have it deleted at any time by emailing us. We aim to respond within 30 days. You can unsubscribe from any email we send with one click. If you're in British Columbia, your rights come from BC's Personal Information Protection Act; elsewhere in Canada, from PIPEDA — either way you can complain to the Office of the Information and Privacy Commissioner for BC or to the Privacy Commissioner of Canada. If you're in the EU or UK, you also have the right to restrict or object to certain processing and to data portability, and you can lodge a complaint with your local data protection authority. Sensitive optional fields are always yours to skip.

Security

We use industry-standard safeguards — encrypted connections (HTTPS/TLS) and access-controlled databases. Payment is handled entirely by Stripe; we never see or store your card details. No system is perfectly secure, but we take reasonable steps to protect your data. If a breach ever creates a real risk of significant harm to you, we will tell you and notify the regulator, as Canadian privacy law requires.

How long we keep it

We keep your chart and reading data for as long as your account is active, so you can return to past readings. Free mini-report requests made without an account are kept only as long as needed to deliver your report, then removed on a regular schedule. You can ask us to delete your data sooner at any time.

Cookies

We use a few small functional cookies: one remembers your language, one remembers your Simplified/Traditional Chinese preference, and when you sign in, cookies keep you signed in. None is used for advertising or tracking, and our visit statistics use no cookies at all. Our bot-protection provider may set a security cookie when you submit a form.

Where your data goes

We run Merilune with a small number of third-party service providers: cloud hosting and databases, a payment processor, an email delivery service, a bot-protection service, a website analytics service, and an AI provider that generates the reading text. Payments are handled by Stripe — we never receive or store your card details. These providers process data on servers in the countries where they operate, which may be outside your own, and each is bound by contract to protect your data and to use it only to provide the service to us. We never sell your data. If you want to know which specific providers we use, email privacy@merilune.com and we'll tell you.

Contact

Questions about your data? Email privacy@merilune.com and we'll help.

Contact and business information

Merilune is operated by an individual based in British Columbia, Canada. Prices are shown and charged in US dollars. You can reach us at:

Support and refunds

support@merilune.com

Privacy requests

privacy@merilune.com