Privacy Policy

Last updated: November 2, 2026

Welcome to Sheng Pin Kai. This Privacy Policy explains what we collect, why, and how we protect your data when you use our AI consultation service at shengpinkai.com, which offers BaZi and Western Astrology consultations. It should be read together with our Terms of Use.

shengpinkai.com is operated by Sheng Pin Kai Private Limited (UEN 202646762C), a company incorporated in Singapore, with its registered office at 60 Paya Lebar Road, #06-53, Paya Lebar Square, Singapore 409051. This company is the organization responsible for the personal data this site collects.

1. Data We Collect

Account data: Your name and email address. You sign in with a one-time code sent to your email.

Birth profile data: Your birth date, birth time, gender, and place of birth. We use this data to compute your Four Pillars of Destiny (BaZi) chart and your Western Astrology chart, which are the foundation of your consultations. We also store a hashed signature of your birth profile to protect the integrity of our free tier. Birth data is locked after submission because changing it would invalidate your chart and all prior analysis.

Other people's birth data (paid plans): If you enter another person's details for a compatibility check or a consultation on their chart, we store the name you give, their birth details, gender, and their relationship to you. You confirm that you have their authorization to share these details, as our Terms of Use require.

Guest trial data: If you try a consultation before signing up, we store a device identifier, a hashed signature of the birth details you enter, the number of questions used, and the IP address the trial started from.

Consultation data: The questions you ask and the AI-generated responses you receive are stored in our database. This includes timestamps, the consultation type (BaZi or Astrology), and metadata such as token counts. For some consultations we also keep a short note on the conversation about each chart, which we update as the conversation goes on. We store this data to maintain your conversation history and to monitor service quality. We also use consultation data, with names and email addresses removed, for internal analysis, to improve the service and to train our own AI models.

Usage and security data: Query counts, device and browser information, IP address, and security telemetry (such as rate-limit events and device identifiers used for abuse prevention).

Billing data (paid users): Limited payment metadata from our payment processor (see Section 6). We never see or store your card details.

Communications: Any emails or messages you send to us (such as support requests or feedback).

2. How We Use Data

We use your data to:

• Compute your BaZi and astrology charts from your birth details and provide personalized, chart-grounded AI consultations.
• Maintain your conversation history so you can pick up where you left off.
• Enforce account limits, detect repeated sign-ups, and prevent abuse of the free tier.
• Improve the quality, reliability, and security of the service.
• Analyse de-identified consultation data, improve the service and train our own AI models.
• Send essential notices about your account, billing, or policy updates.

3. AI Processing and Third-Party Providers

Your consultation is powered by an AI system. Here's how it works:

• When you ask a question, our own engine computes the relevant parts of your BaZi or astrology chart. This computation happens on our servers.
• Your question and the chart context are then sent to one of our AI providers (see Section 6), which generates the conversational response.
• The AI-generated response is streamed back to you and stored in our database alongside your original question.

We chose this architecture because computing a BaZi or astrology chart requires specialized logic that general AI models don't have. The AI's role is to present the chart analysis conversationally. It doesn't compute the chart itself.

4. Legal Bases

Depending on your location, we rely on one or more of the following:

• Contract: To deliver the consultation service you requested.
• Legitimate interests: To secure our platform, prevent abuse, improve the service, and develop our own AI models using de-identified data.
• Legal obligation: To comply with applicable laws and requests from authorities.
• Consent: For analytics, where the law requires it.

5. Data Retention

Account and birth profile: Retained while your account is active. If your account is deleted at your request, we remove your profile and consultation history. We retain only minimal anti-abuse data, such as a hashed birth signature, your email address, and device identifiers, to protect the integrity of our free tier. This retained data cannot be used to reconstruct your chart or consultation history.

Consultation history: Your questions and AI responses are retained while your account is active. They are deleted when your account is deleted.

Other people's birth data: kept with the consultation you entered it for, and deleted when your account is deleted.

Logs and security telemetry: Retained for a limited period necessary to monitor performance, investigate incidents, and meet legal obligations.

Billing records: Retained as required by tax and accounting laws.

6. Sharing and Processors

We do not sell your personal data. We will never sell your personal data.

We use trusted service providers to operate the platform:

• AI providers: Our AI models are provided by established technology companies that have strict data-protection policies of their own. We send them only what a consultation needs, and once they receive it, their handling of it is governed by their own data-protection terms. We make every effort to protect your data on our side.
• Payment processor: Airwallex handles payments for paid subscriptions. Your card details go straight to Airwallex: we never see them and cannot store them.
• Bot check: Confirms that sign-in and sign-up requests come from a person, processing only the minimum needed.
• Email-delivery service: Sends your sign-in codes and account emails, processing only the minimum needed.
• Cloud infrastructure: Hosts the platform and stores your data. A network service in front of the site carries traffic to it and helps block attacks.
• Analytics provider: Measures how the site is used, such as pages visited and steps like starting a consultation or a checkout, so we can improve the service. Events our servers send are linked to an internal account number, not to your name or email address. Where required by law, we will request consent before enabling analytics.

We only work with providers based in countries with established data-protection laws and strong intellectual property protection laws.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and service.

7. Security

We implement layered safeguards including encryption in transit, access controls, auditing, rate limiting, and abuse monitoring. We use device-level security measures (including a device identifier and device binding) to prevent abuse of the free tier.

No system is perfectly secure. We work to prevent, detect, and respond to incidents, but cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing.

• Access and correction: The Account page shows your name, email address, and birth details, and lets you update your payment method and manage your subscription. Birth details are locked once saved (Section 1), so a correction to them needs a request to [email protected]. For any other correction, contact us.
• Deletion: Request account deletion, and we will remove your data except the minimal anti-abuse records described in Section 5.
• Complaints: You may contact your local supervisory authority in addition to contacting us.

9. Cookies

We use these cookies:

• Strictly necessary: A session cookie that keeps you signed in, a device identifier cookie used for security and abuse prevention, and security cookies set by our network provider that tell people apart from automated traffic.
• Remembered device: If you choose to stay signed in when you enter your code, a cookie keeps you signed in on that device for up to 30 days.
• Preferences: Cookies that remember the language you chose for the site and for the BaZi lessons.
• Analytics: Cookies set by our analytics provider to measure how the site is used.
• Campaign attribution: If you arrive through a link that carries campaign tags, a cookie keeps those tags for 30 days so we can see which campaign led to a subscription.

Where required by law, we will request consent for analytics.

10. Children's Privacy

Our service is intended for users aged 18 and above. We do not knowingly collect personal data from minors.

11. International Transfers

Your data may be processed in countries other than your own, including the United States, through our use of third-party infrastructure and AI providers. Where applicable, we use appropriate safeguards such as standard contractual clauses when transferring data internationally.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are significant, we will notify you via email or in-app notice. Continued use of the service after updates take effect constitutes acceptance.

13. Contact

Questions or requests? Contact us at [email protected]

Data Protection Officer: [email protected]

Registered office: 60 Paya Lebar Road, #06-53, Paya Lebar Square, Singapore 409051

We respect your data and appreciate your trust in Sheng Pin Kai.