Privacy Policy

1. Data we collect

• The birth details collected depend on the feature: birth date, sex used for chart calculation, birth city, birth time when known, display name, and another person's details for compatibility. Personalized paid readings require a birth city. The brain-map birth form does not ask for a birth address. You can continue without a known birth time; time-dependent interpretations are then limited.
• Order details: email, order ID, product, amount, currency, payment status, refund history, and delivery status.
• Service data: questions entered, generated report, access logs, IP address, browser, cookies, and product analytics events.
• Hongsimdang does not store full card or bank-account credentials.

2. Why we use it

We use data to calculate charts, generate and deliver reports, process payments and refunds, prevent abuse, answer support requests, and improve reliability.

3. Processors and international transfer

Service operation may use Vercel for hosting, Supabase for database and authentication, PortOne and PayPal or other displayed processors for payment, Resend for transactional email, PostHog for analytics, and listed AI providers for report generation. The minimum required report inputs may be transferred by encrypted API to processing regions outside the customer's country. Payment credentials are not sent to AI providers.

On hongsimdang.kr, Google LLC processes GA4 visit statistics: analytics cookie identifiers, visit times, sanitized page types, referring sites, and device/browser information. We do not send names, emails, birth details, questions, report text, or account/order identifiers. URL query strings, fragments, and private path identifiers are removed. Advertising personalization, Google signals, and automatic form/search/click measurement are disabled.

4. Retention

• Account and saved chart data: until deletion or account withdrawal, except legally required records.
• Payment, contract, and refund records: five years under Korean e-commerce law.
• Access logs: three months. Product analytics are anonymized under the service retention policy.
• GA4 user/event data: two months; aggregated reports are retained separately. Analytics cookies expire 60 days after initial creation.

5. Your choices and rights

You may request access, correction, deletion, or restriction where applicable by emailing support@hongsimdang.kr. Deletion cannot override transaction records that Korean law requires us to retain.

You can block GA4 collection with your browser's tracking protection or the Google Analytics opt-out browser add-on. See Google's partner-site data notice for Google's processing information.

6. Security and contact

Hongsimdang uses HTTPS, access controls, and managed cloud security. Privacy contact: Wijoon Woo, support@hongsimdang.kr.