Privacy Policy

1. Services We Provide

YaoMaster offers divination, inspiration, Daily Message, and AI assistant experiences through conversation, including but not limited to:

• Chat conversations (regular chat/divination mode/auto mode)
• Daily messages (including history, feedback, poster generation, etc.)
• Account login (email verification code, password login, Mastodon login/linking)
• Top-up and subscription (Stripe)
• BYOK (Bring Your Own Key) feature (available for members)
• Optional long-term memory/cross-conversation memory (available for subscribers)
• User feedback, quota requests, data export, etc.

2. Information We Collect

We only collect information to the extent necessary to provide our services.

2.1 Information You Provide

A. Account & Identity Information

• Email address: For login/linking/receiving verification codes and export links
• Mastodon account identifier: For OAuth login
• Username/Nickname: For display
• Password: Never stored in plain text; we store only a salted hash

B. Conversation & Content Information

• Text you enter in chats (questions, follow-up details, instructions, etc.)
• AI responses returned to you
• Session-related information: session ID, title, archive status, favorited conversations/messages, etc.

C. Daily Messages & Divination Information

• Questions you use to generate messages (default or custom prompts)
• Six Yao/hexagram-related outputs
• The text of your daily messages and your feedback on them

D. Personalization & Settings

• General settings: language, theme, font size, default view, etc.
• Personalization settings: custom instructions, nickname, conversation style preferences
• Data settings: whether to save history, auto-delete days, etc.
• Memory settings: whether to enable long-term memory (available for subscribers)

E. BYOK (Bring Your Own Key) Information

• API Keys you configure for providers like OpenAI/Google/Anthropic (we store them encrypted)
• Key status information: provider type, validity, a masked version shown in the interface

2.2 Cookies & Local Storage

We use the following technologies to store information:

• Essential Cookies/LocalStorage: To maintain login status, remember language preferences, theme settings (no consent required)
• Functional Storage: To save your custom settings, conversation drafts, etc.

We do not use third-party advertising tracking cookies or analytics cookies.

2.3 Automatically Collected Information

A. Technical & Log Information (retained for 90 days)

• IP address (for rate-limiting features available without signing in, fraud prevention, and security)
• Request time, request path, response status, error messages
• Device and browser information (User-Agent, language preference, etc.)

B. Usage & Billing Information

• Credit balance and expiration date
• Credit consumption records: usage type, credits consumed, associated session ID
• Model identifiers used, token statistics, cost estimates
• Subscription status: membership type, expiration time, etc.

2.4 Information from Third Parties

A. Payment & Subscription (Stripe)

When you top up or subscribe, payment is processed by Stripe. We may receive your Stripe customer ID, payment status, amount, and similar information. We do not access or store your full card number, CVV, or other sensitive payment details.

B. Mastodon (OAuth)

With your authorization, we obtain basic account information from Mastodon (such as your username and display name) to create your account or sign you in.

3. How We Use Your Information

3.1 Legal Basis for Processing (GDPR)

Under GDPR and related regulations, we process your data based on the following legal grounds:

• Contract Performance: Processing account information and conversation content to provide services you purchased/registered for
• Legitimate Interests: Security protection, fraud prevention, service improvement
• Legal Obligation: Compliance with applicable laws and regulations
• Consent: Sending marketing emails (if any), using non-essential cookies (if any)

3.2 Specific Use Cases

• Provide core features: Generate chat responses, divination readings, daily messages, posters, favorites, history, data export
• Account & Security: Login verification, verification code delivery, anomaly detection, anti-abuse measures
• Billing & Transactions: Credit deduction, subscription/top-up confirmation, orders and reconciliation
• Personalized Experience: Apply your language/theme/style settings, custom instructions, nickname, etc.
• Memory Feature: When enabled, we extract information from your past conversations to improve your experience across chats
• Customer Service & Communication: Handle your feedback and quota requests, and send service notification emails

4. How We Share Information

We do not sell your personal information. To provide our services, we may share information in the following scenarios:

4.1 AI Service Providers

To generate responses, messages, divination readings, or vector embeddings for you, we may send necessary text and context to the following third parties:

• OpenAI (conversation generation, embeddings/vectors)
• Google Gemini (conversation generation)
• Anthropic Claude (conversation generation)

4.2 Payment Processing (Stripe)

To process top-ups, subscriptions, refunds, and billing, we share necessary transaction information and user identifiers with Stripe.

4.3 Email/Message Delivery Services

• SMTP email service provider: For sending verification codes, data export links, service notifications
• Mastodon server/API: For OAuth sign-in and for sending verification codes by direct message

4.4 Legal Requirements

We may disclose necessary information when required by law or regulation, in response to lawful judicial or law enforcement requests, or to protect the security of our users and platform.

4.5 Cross-Border Data Transfers

To provide our services, your data may be transferred to servers in the following countries/regions:

• United States: OpenAI, Anthropic, Stripe servers
• EU/Global: Some Google service servers

We protect cross-border data transfers through the following measures:

• Signing data processing agreements with service providers that include Standard Contractual Clauses (SCCs)
• Selecting service providers with SOC2, ISO27001, and other security certifications
• Using TLS encryption throughout the transfer process

5. Data Retention Period

We retain data for the minimum period necessary to fulfill our purposes and provide configurable deletion mechanisms.

• Account data: Retained while your account exists. Permanently purged within 30 business days after account deletion.
• Chat history: Saved by default to support history/favorites/export/memory features. You can disable "Save history" or enable "Auto-delete" in settings.
• Daily message history: Saved to your account; cleared along with your account upon deletion.
• Technical logs: IP addresses and other technical logs are automatically purged after 90 days.
• Payment records: Retained for 7 years as required by Hong Kong law.
• Data export files: Export links are valid for 7 days and are automatically deleted once they expire.

6. Your Rights & Choices

To the extent permitted by applicable laws and regulations, you may:

• Access & Correct: Update your email, linked Mastodon account, username, and settings
• Data Portability: Export your data in a structured, common format (JSON)
• Right to Erasure (Right to be Forgotten): Request deletion of your account and associated data
• Right to Restrict Processing: Request restriction of data processing in certain circumstances
• Right to Object: Object to processing based on legitimate interests
• Withdraw Consent: For consent-based processing, you may withdraw at any time
• Control Storage: Disable "Save history" or enable "Auto-delete" in settings
• Lodge a Complaint: If you believe our data processing is unlawful, you have the right to lodge a complaint with your local data protection authority

7. Security Measures

• Passwords are stored using salted hashing; plaintext passwords are not stored
• BYOK API Keys are stored encrypted, decrypted only when called
• Access control: A sign-in token is required to access any user data endpoint
• Transport security: HTTPS enabled site-wide

However, no system can guarantee 100% security. If a security incident occurs, we will take appropriate measures and notify you as required by law.

8. Children's Privacy

This Service is not intended for users under 18 years of age. We do not knowingly collect personal information from individuals under 18.

If you are a parent or guardian and discover that your child has provided us with personal information, please contact us and we will take steps to delete such information.

If we discover that we have inadvertently collected personal information from a user under 18, we will promptly delete that information.

9. Policy Updates

We may update this policy from time to time. We will notify you of significant changes through in-app notices, email, or other means.