Privacy

Who we are

This website is run by TianEon (“we”), based in mainland China, which is the controller of the personal data described here. For anything about your data, write to support@tianeon.com.

What we collect

• Birth details you enter — date, time (optional), birthplace or time zone, and optionally a nickname and the gender used to set the direction of the luck pillars. We need these to calculate your chart.
• Questions you ask — for I Ching and Plum Blossom readings, the question text and the casting.
• Your email address — when you buy a report (to deliver it) or sign in.
• Order details — product, amount, country, status and the payment reference from Waffo Pancake. We never see or store your card details.
• A guest session cookie — so the charts you make before signing in stay yours and can be added to an account later.
• Technical logs — standard request logs (IP address, browser, time), kept briefly for security and to fix problems.

How we use it, and our legal bases

• Calculating and showing your charts and readings, and writing them with AI (see below) — to perform our contract with you.
• Delivering reports, handling payments, refunds and support — to perform our contract with you.
• Keeping order records for accounting and tax — a legal obligation.
• Security, bot protection and fixing problems — our legitimate interest in a safe, working service.
• Remembering your language and display choices — your consent; you can change them any time.

We do not sell or rent your personal information, use it for advertising, or build profiles about you.

AI processing (DeepSeek)

The words of readings and reports are written by an AI model from DeepSeek. To do that, we send the calculated facts of the chart — pillars, stars, hexagram lines, element balance — and, for question-based readings, the question you typed. We do not send your name, nickname or email address. DeepSeek processes this data on servers in the People’s Republic of China, under its own API terms.

If you would rather your question were not processed this way, leave the question blank: the hexagram is still cast and read.

Service providers

• Waffo Pancake — our Merchant of Record. It processes payments, tax and receipts, and receives your payment details directly under its own privacy policy. We receive only the order reference, amount, country and your email address.
• Cloudflare — hosting, databases, file storage and the Turnstile bot check.
• DeepSeek — AI text generation (People’s Republic of China).
• Resend — sending email.

Each provider may only use your data to provide its service to us. Place search runs on our own copy of GeoNames data — what you type there is not sent to anyone else.

International transfers

Our providers operate worldwide, so your data may be processed outside your country, including in the United States and the People’s Republic of China. Where the law requires it, we rely on the providers’ standard contractual safeguards.

Security

All traffic uses HTTPS, data is encrypted at rest by our hosting provider, and access to it is limited to the operator. No method is perfectly secure, but if a breach is likely to affect your rights, we will tell you and the relevant authority within 72 hours of becoming aware of it.

How long we keep it

• Charts and readings linked to an account or an order: until you delete them or close your account.
• Charts made as a guest and never linked to an account or an order: deleted after 12 months.
• Order records: kept as long as accounting and tax rules require, with your email address removed if you delete your account.
• Technical logs: up to 30 days.

Your rights

You have the right to access your data, correct it, delete it, download it in a portable format, restrict or object to its processing, withdraw consent at any time, and complain to your data protection authority. Signed-in users can delete charts, or the whole account, from the account page; anyone can write to support@tianeon.com and we will respond within 30 days. Depending on where you live (for example the EU or UK under the GDPR, or California under the CCPA), you may have further rights; we will never treat you differently for using them.

Cookies

We use only the cookies the site needs to work: the guest session cookie, the sign-in session cookie, your language preference, and the cookies Cloudflare Turnstile sets for bot protection. Your choice of reveal animation and chart colours is kept in your own browser’s local storage. There are no advertising or cross-site tracking cookies.

Children

This service is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

Changes

If we change this policy we will update the date at the top. For significant changes we will post a notice on the site, and email account holders, at least 30 days before they take effect.