Privacy Policy

1. Data we collect

We may collect account details; Google or Apple account identifiers; questions and selected reading inputs; birth date, birth time or unknown-time status, birth city, time zone and coordinates; calculated charts, generated reports and delivery status; order, payment and refund references; and limited security, request and administrator-audit records.

When first-party visit measurement is enabled, we record page and product activity, broad referral and device categories, interface language, and a random identifier limited to one page session. The visit-measurement records do not contain raw IP addresses, full referral URLs, full user-agent strings or payment-card details. We also retain sanitized checkout-loading error codes and timing to identify persistent failures.

Payment providers process card or wallet credentials. We do not store complete card numbers, security codes, payment passwords, OAuth access tokens or model API keys in user-facing records.

2. Why we use it

We use data to create and protect accounts, calculate and deliver purchased readings, verify payments, process refunds and privacy requests, resume background generation, prevent fraud and abuse, operate customer support, comply with legal duties and maintain service security.

First-party visit counts help us understand which pages and products are used. Aggregated payment and delivery counts and sanitized checkout incidents help administrators find service failures. Visit identifiers are not used to recognize a person across page sessions.

3. Service providers and international processing

Only data reasonably necessary for a function may be sent to hosting, identity, payment, model or email providers. The current web server is hosted in Alibaba Cloud's Jakarta region. Database, identity, model, payment and email processing locations must be updated here to match the services actually enabled at launch.

Where data is processed across borders, we apply purpose limitation, data minimisation, access controls, retention limits and appropriate contractual or legal safeguards.

4. Retention

Reading inputs, charts, previews and completed reports are retained for up to 180 days after completion or case closure, then deleted or irreversibly de-identified unless a longer period is required. Payment, refund, anti-fraud, accounting and audit records may be retained for applicable legal periods, but unnecessary reading text and birth data are not kept solely for those purposes.

First-party visit sessions and events are retained for up to 30 days; sanitized checkout-loading incidents are retained for up to 90 days.

5. Your choices and rights

Signed-in users can use “My readings → Privacy & account” to export their data or request account closure and deletion of data that is not legally required. Requests are identity-verified. Records needed for refunds, tax, accounting, fraud prevention, security or disputes may be restricted and retained instead of deleted until the applicable obligation ends.

You may also ask for access, correction, restriction or objection where applicable by emailing service@lotusblissstore.com. You may complain to an applicable data-protection authority.

6. Children

The minimum account age is 18. The service is not directed to children. Where local law requires parental or guardian consent at a higher age, that local requirement applies.

7. Security and changes

Measures include server-side sessions, verified third-party sign-in, payment webhook verification, administrator allowlists, encrypted secrets, rate limits and audit logs. No internet service can promise absolute security. Material changes will be posted with a new effective date.

Contact and operator

FateFollow is operated by Lotus Bliss Company Limited, a company incorporated in Hong Kong under company number 78906325. The business address stated on its business registration certificate is ROOM 12, 3/F, YAU LEE CTR, 45 HOI YUEN RD, KWUN TONG, HONG KONG.

Privacy, refund, complaint and general service requests: service@lotusblissstore.com. We acknowledge requests within 1–3 business days and aim to complete straightforward requests within the same period. Where identity checks, legal retention duties or third-party coordination require longer, we will explain why and provide an estimated completion date.