Saju Today is operated by SAJU LLC, a limited liability company organized in the United States ("we," "us," or "our"). We operate the website saju.today (the "Service"), which provides Saju (Four Pillars of Destiny) readings for entertainment purposes only.
Our full company details, including our registered address, are set out in our Terms of Service.
For the purposes of the EU/UK GDPR, SAJU LLC is the data controller of personal data processed in connection with the Service.
No account is required to use this Service. We do not operate user accounts, passwords, or logins. Your reading is delivered to you through a unique, unguessable link and by email.
1. Information We Collect
1a. Information You Provide
To generate a reading, we collect:
- Email address — used to deliver your reading and your payment receipt
- Date of birth
- Time of birth (if known)
- Place of birth
- Gender
For compatibility readings (Friend Synergy, Family Bond, Love Harmony, Child Compass), we additionally collect the same birth details for a second person. See Section 8 for important information about third-party data.
1b. Payment Information
Payments are processed by Stripe. We never receive, store, or have access to your full card number, CVC, or other complete payment credentials. We receive only a transaction reference, the amount, and the payment status.
1c. Information We Do Not Collect
- Government-issued identification numbers
- Precise geolocation data
- Biometric data
- Social media credentials
- Your real name (unless you voluntarily include it in an email to us)
1d. Cookies and Tracking
We use only cookies that are strictly necessary to operate the Service and process payments (including cookies set by Stripe during checkout). We do not currently use advertising or analytics cookies. Our analytics provider (see Section 1e) operates without cookies or device storage, which is why no cookie consent banner is presented for it.
1e. Information Collected Automatically
When you visit the Service, we collect limited technical information for aggregate analytics purposes:
- Device type (mobile, desktop, tablet)
- Browser and operating system type
- Approximate location at the country level, derived from your IP address
- Referring website or source
- Pages viewed and time of visit
This information is collected through Vercel Web Analytics. It does not use cookies or any other device storage, and it does not track you across websites or over time. We use it only in aggregate form to understand how the Service is used and to improve it. We do not use it to identify you.
2. How We Use Your Information
| Data | Purpose |
|---|---|
| Birth details (date, time, place, gender) | Calculating your Four Pillars chart and generating your reading |
| Email address | Delivering your reading, sending your payment receipt, responding to support requests |
| Payment transaction data | Processing payment, fraud prevention, financial record-keeping |
| Technical and usage data (Section 1e) | Understanding aggregate usage patterns, improving the Service, diagnosing technical issues |
We do not use your email address for marketing unless you separately and explicitly opt in.
We do not use your data for profiling, behavioral advertising, or automated decision-making that produces legal or similarly significant effects. Your reading is generated by an automated system, but it is provided for entertainment only and has no legal or similarly significant effect on you.
3. Data Storage and Retention
What We Store
| Data | Stored | Retention Period |
|---|---|---|
| Birth details (date, time, place, gender) | Yes | 12 months from purchase, then permanently deleted |
| Generated reading content | Yes | 12 months from purchase, then permanently deleted |
| Email address | Yes | 12 months, or up to 7 years where linked to a payment record (see below) |
| Payment transaction records | Yes (via Stripe) | Up to 7 years, as required by applicable tax and financial regulations |
| Email delivery logs | Yes (via Resend) | Per Resend's retention policy |
| Aggregate analytics data (Section 1e) | Yes (via Vercel) | Per Vercel's retention policy; retained in aggregate, non-identifying form |
Why 12 Months
Because the Service does not use accounts, your reading remains accessible through your unique link so that you can return to it. After 12 months, the birth details and reading content are permanently deleted and the link will no longer work. Please save or download your reading if you wish to keep it beyond this period.
Early Deletion
You may request deletion of your reading at any time before the 12-month period ends by contacting us at hello@saju.today with your reading link or the email address used at purchase. See Section 7.
4. Service Providers and International Transfers
We do not sell or rent your personal information. We share limited data with the following service providers solely to operate the Service:
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Vercel | Website hosting, serverless processing, and aggregate analytics | All submitted data, transiently during processing; technical and usage data as described in Section 1e | United States |
| Supabase | Database and file storage | Birth details, email address, reading content | United States (us-west-2, Oregon) |
| Google (Gemini API) | Generating reading content | Birth details and derived chart data | United States |
| Stripe | Payment processing | Payment transaction data, email address | Primarily United States |
| Resend | Email delivery | Email address, email content | United States |
All service providers are bound by data processing agreements that restrict them from using your data for any purpose other than providing services to us.
Artificial Intelligence Processing
Your birth details and the chart derived from them are transmitted to Google's Gemini API to generate your reading. We use a paid Gemini API tier. Under Google's terms for paid services, data submitted through the paid API is not used to train Google's models.
Where Your Data Is Processed
All of our infrastructure is located in the United States. If you access the Service from outside the United States, your personal data will be transferred to and processed in the United States.
The United States is not subject to a general adequacy decision under the EU or UK GDPR. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on the Standard Contractual Clauses (or the UK International Data Transfer Addendum, as applicable) incorporated into our agreements with our service providers.
Sub-Processor Privacy Policies
- Vercel: vercel.com/legal/privacy-policy
- Supabase: supabase.com/privacy
- Google: policies.google.com/privacy
- Stripe: stripe.com/privacy
- Resend: resend.com/legal/privacy-policy
5. Legal Basis for Processing (EEA, UK, and Similar Jurisdictions)
Where a legal basis is required, we rely on the following:
- Contract performance (GDPR Art. 6(1)(b)) — Processing your birth details and email address is necessary to provide the reading you have purchased and to deliver it to you.
- Legal obligation (GDPR Art. 6(1)(c)) — Retention of payment records as required by applicable financial and tax laws.
- Legitimate interest (GDPR Art. 6(1)(f)) — Fraud prevention, security, maintaining the integrity of the Service, and measuring aggregate usage of the Service through privacy-preserving analytics that do not involve cookies or cross-site tracking.
- Consent (GDPR Art. 6(1)(a)) — Where your birth details are processed in the context of a philosophical or belief-based analysis, this may constitute special category data under GDPR Article 9. We obtain your explicit consent before processing, which you provide by submitting the reading form.
You may withdraw your consent at any time by contacting us at hello@saju.today. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit — All data transmitted between your device and our servers is encrypted using TLS.
- Encryption at rest — Data stored in our database is encrypted at rest by our infrastructure provider.
- Unguessable reading links — Each reading is accessible only through a randomly generated identifier that cannot be guessed or enumerated.
- Limited retention — Birth details and reading content are deleted after 12 months, reducing long-term exposure.
Please note: because your reading is accessible via a link rather than a login, anyone who obtains that link can view your reading. Do not share your reading link with people you do not intend to give access to.
No method of transmission or storage is completely secure. In the event of a data breach affecting your personal data, we will notify the relevant supervisory authorities and affected individuals within the timeframes required by applicable law (e.g., 72 hours under the GDPR).
7. Your Rights
Depending on your jurisdiction, you may have some or all of the following rights:
- Right of access — Request confirmation of whether we process your personal data and obtain a copy.
- Right to rectification — Request correction of inaccurate data.
- Right to erasure — Request deletion of your data.
- Right to restrict processing — Request that we limit how we process your data.
- Right to data portability — Receive your data in a structured, commonly used format.
- Right to object — Object to processing based on legitimate interests.
- Right to withdraw consent — Withdraw consent at any time.
- Right to non-discrimination — (California) We will not discriminate against you for exercising your privacy rights.
How to Exercise Your Rights
Contact us at hello@saju.today. Because we do not operate accounts, please include the email address you used at purchase and, where possible, your reading link, so that we can locate your data. We will respond within the timeframe required by applicable law (generally 30 days, or 45 days for CCPA requests).
We may need to verify your identity before acting on a request. Where we cannot reasonably verify that a request relates to your own data, we may decline to act.
Right to Lodge a Complaint
If you believe your rights have been violated, you may lodge a complaint with your local data protection authority:
- EU/EEA — Your national data protection authority (list at edpb.europa.eu)
- UK — Information Commissioner's Office (ico.org.uk)
- Canada — Office of the Privacy Commissioner
- Australia — Office of the Australian Information Commissioner
8. Third-Party Birth Details (Compatibility Readings)
Our compatibility readings require the birth details of a second person.
By submitting another person's birth details, you confirm that you have the right to provide that information. You are responsible for ensuring that you have obtained any consent required under applicable law, and for handling the resulting reading responsibly.
If you are the second person referred to in a reading and you wish to have that data deleted, please contact us at hello@saju.today. We will make reasonable efforts to locate and delete the relevant record, though we may need additional information to identify it, since we do not store the second person's email address.
9. Children's Privacy
The Service is not directed to children. You must be at least 18 years old to purchase a reading.
Child Compass
The Child Compass reading analyzes the birth details of a child alongside those of a parent. This reading is intended to be purchased and used only by a parent or legal guardian of that child. Before submitting, you must confirm that:
- You are 18 years of age or older; and
- You are the parent or legal guardian of the child whose birth details you are providing, and you consent to those details being processed to generate the reading.
We record the date and time of these confirmations.
We do not knowingly collect personal information directly from children. If we become aware that a person under 18 has used the Service directly, or that a child's birth details have been submitted by someone who is not their parent or legal guardian, we will delete the relevant data promptly. If you believe this has occurred, contact us at hello@saju.today.
10. Jurisdiction-Specific Provisions
California Residents (CCPA/CPRA)
- Categories of personal information collected: Identifiers (email address); characteristics of protected classifications (gender, date of birth); commercial information (payment transaction records); internet activity (device type, browser, approximate country-level location, referral source, and pages viewed).
- We do not sell or share your personal information as those terms are defined under the CCPA/CPRA.
- Sources: Directly from you.
- Business purposes: As described in Section 2.
- Your rights to know, delete, correct, and opt out are described in Section 7.
Quebec Residents (Law 25)
Your data is transferred to and stored on servers outside Quebec, in the United States. We have assessed this transfer and take reasonable steps to ensure equivalent protection. You may request a summary of this assessment by contacting us.
EEA and UK Users
See Sections 4 and 5 regarding international transfers and legal bases.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last Updated" date. For material changes, we will provide prominent notice and, where required by law, obtain your renewed consent.
12. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your information, please contact us:
SAJU LLC
Email: hello@saju.today
Our registered address is set out in our Terms of Service.
13. Entertainment Disclaimer
Saju Today provides readings based on traditional East Asian philosophical interpretation. All content is provided for entertainment purposes only and does not constitute financial, medical, legal, psychological, or any other form of professional advice.
We make no claims regarding the scientific validity, accuracy, or predictive power of our readings. Please consult qualified professionals before making important life decisions.
This Privacy Policy is provided in English. Where translations are provided for convenience, the English version shall prevail in case of any inconsistency.