Privacy Policy

1. Collected Data Categories

Lá Số Việt collects only necessary categories of information required to operate and compute our services:

• Account details: email address, display name, and verification status.
• Birth profile & chart data: birth date, birth time, place, gender, calculated charts, and readings.
• Technical & behavioral data: IP address, user-agent/device class, referrer/UTM parameters/path, and product interactions.
• Commercial history: order history, payment confirmation status, and report reading progress.

2. Purposes of Data Processing

Collected data is processed for explicit purposes:

• Providing chart generation and storing birth profiles (birth_profile).
• Product usage analytics to refine user experience (analytics).
• Content personalization tailored to your needs (personalization).
• Suggesting relevant services and tailored offers (offers).
• Fraud prevention and infrastructure security (fraud/security).
• Ensuring content delivery and aggregate business measurement.

3. Visitor Identity & History Linking

Prior to consent or authentication, usage data is keyed to a first-party HTTP-only visitor_id cookie.

Wizard consent by an anonymous actor links visitor history to the birth profile and anonymous session context, and does not by itself create or imply an authenticated account. Signing in or authenticating (via Email or Google) links visitor history to your authenticated account. When an anonymous actor or profile is subsequently linked to a verified account, ownership transfers under the existing account-linking flow.

4. Retention & Deletion Schedules

We enforce strict data retention boundaries:

• Unlinked visitor and event records: purged after at most 30 days.
• Database backups: deleted automatically after at most 30 days. Data you have deleted is gone from backups after that period.
• Anonymous birth profiles and charts: retained for at most 24 hours with immediate deletion available.
• Deleting a chart profile: birth date, time, place and gender are erased as soon as you delete the profile. Reports you already bought stay readable in your library, with the profile name and the chart computed for that report, and are removed only when you delete your account. If you paid for a report that has been neither delivered nor refunded, the birth data is kept until it is delivered or refunded, then erased.
• Account-linked behavioral data: retained while the account exists and completely purged upon account or data deletion requests.
• Raw IP addresses: retained for 12 months for analytics/personalization and separately bounded fraud/security, then scrubbed from events.
• Sign-in IP addresses are kept for at most 12 months, to prevent abuse.
• Statutory accounting records: order invoices and payment transactions are preserved independently under applicable legal obligations. When an account is deleted, orders and payment history are kept, but without the email or birth data. Bank transfer notices that the system could not match to an order automatically, including ones you claimed afterwards, are kept exactly as the bank record, so they may still contain the payer's name and the transfer description.

5. Third-Party Data Boundaries (FD-053 Policy)

Under the binding FD-053 boundary, third-party analytics or export adapters do not receive: names, emails, exact birth date/time/place, free-text questions, chart_id, profile_id, report content, evidence text, raw IP addresses, or internal account/visitor identifiers.

Advertising pixels and third-party advertising trackers are not activated by LSV-12 in the current release.

6. Your Privacy Rights

You retain full authority over your personal information:

• Account data export: download a complete JSON file of your account data.
• Account deletion request with a 30-day recovery window.
• Immediate deletion of temporary data during anonymous sessions.
• Unsubscribe from marketing emails at any time should any marketing communication be sent.