Privacy Policy

• Account data: email address, password (stored hashed by our authentication provider), account creation date.
• Chart data: the name/label, date and time of birth, birth location, and gender you enter for yourself or another person, for the purpose of generating a chart.
• Usage data: any Master Wu question and answer you choose to save to your takeaways, and thumbs-up/down feedback on Master Wu's answers (the rating only, not the message itself). We do not otherwise store your Master Wu conversations.
• Subscription & billing data: your subscription tier and status; card and billing details are collected and processed directly by Stripe, our payment provider, not stored on our own servers.
• Technical data: standard server logs (IP address, browser type, timestamps) generated automatically by our hosting infrastructure for security and reliability.

• To provide the service (chart calculation, account access, Master Wu answers, subscription management) — Art. 6(1)(b) GDPR, performance of our contract with you.
• To improve the service (e.g. reviewing feedback ratings in aggregate) — Art. 6(1)(f) GDPR, our legitimate interest in improving accuracy and quality, balanced against your privacy.
• To meet legal obligations (e.g. billing records, tax) — Art. 6(1)(c) GDPR.

Birth data used to generate a Life Areas "Health" reading is a traditional-practice interpretation, not medical information about you, and is not treated as special-category health data under Art. 9 GDPR — but we handle it with the same care as your other chart data.

We use the following processors to operate Wuxora. We don't sell your data, and we don't share it for advertising purposes.

• Supabase — hosting, authentication & database. Processes account data, chart data, usage data.
• Vercel — application hosting. Processes technical/server logs.
• Alibaba Cloud (Qwen) — generates Master Wu's AI responses (EU-Frankfurt deployment). Processes your Master Wu messages and chart facts already computed from your birth data — not the raw birth data itself. Your data is not used to train Alibaba Cloud's AI models.
• Stripe — billing and payment processing. Processes payment and billing details.

Some processors above may process data outside the European Economic Area, or are affiliated with companies headquartered outside it. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep your account and chart data for as long as your account is active. If you delete your account, we delete your personal data immediately — including your saved charts, Learn progress, and saved Master Wu takeaways — except where we're required to keep billing records for longer under tax law.

Under the GDPR, you have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time where processing is based on consent. To exercise any of these, contact support@wuxora.com. You also have the right to lodge a complaint with the Austrian data protection authority, the Datenschutzbehörde (DSB).

If you generate a chart for someone else, you are the one submitting their birth data to us, not them. You are responsible for having the appropriate right or consent to do so; we act on your instructions as the account holder.

We use only the cookies/local storage strictly necessary to keep you signed in and remember basic preferences (like your selected chart or language). We do not use third-party advertising trackers.

We use industry-standard measures (encrypted connections, access controls, and our providers' own security certifications) to protect your data, but no system is completely secure, and we cannot guarantee absolute security.

Wuxora accounts must be held by adults. A child's birth details may appear within a parent's or guardian's account as chart data (see Section 7 above), but we do not knowingly collect account data directly from children.

We'll post any changes here and update the effective date; material changes will be notified in-app or by email.

The data controller is Poh Ling Kang, Einzelunternehmerin in Salzburg, Austria. Contact for privacy questions: support@wuxora.com · Austrian Datenschutzbehörde: dsb.gv.at.

This policy is provided in English and Chinese for convenience. In the event of any discrepancy or inconsistency between the two versions, the English version shall prevail.