Privacy Policy

1. Introduction

BuWei ("we") respects and protects your privacy by law. This policy explains how we collect, use, store, and protect your personal information when you use this website and our AI divination, AI chat, and credit recharge services.

By using the service, you consent to the data practices described in this policy. If you do not agree, please stop using the service.

2. Information We Collect

• Account information: email address and optional nickname provided at registration. Passwords are stored as one-way bcrypt hashes; we cannot recover the plaintext.
• Usage records: your AI chat content, divination casts and readings, credit transactions, and recharge orders — used to deliver the service and for audit.
• Payment information: recharge payments are processed by Creem. We do not store full bank card numbers; only order IDs and transaction IDs are retained for reconciliation and support.
• Technical logs: access IP, browser type, access time, request logs — used for security and troubleshooting.

3. How We Use Information

• Provide AI chat and divination (Liu Yao, Plum Blossom, Qi Men Dun Jia) services, deducting credits per use.
• Process credit recharges, order reconciliation, and refunds (where applicable).
• Maintain login sessions and authentication.
• Security, anti-fraud, and service stability.
• Improve service quality, fix issues, and optimize experience.

4. Third-Party Services

To deliver the service, we share necessary information with the following third parties, each governed by its own privacy policy:

• Creem: payment processing for recharge transactions.
• AI service providers: receive your chat and divination input to generate AI responses.
• Neon: PostgreSQL database hosting for user and business data.
• Vercel: application hosting and CDN for website access.

5. Cookies & Sessions

We use session cookies to keep you logged in. We do not use them for cross-site tracking or advertising. You may refuse cookies in your browser settings, but this may affect features such as login.

6. Data Security

• Passwords are stored as one-way bcrypt hashes.
• Data in transit is encrypted via HTTPS.
• Database operations use transactions and row locks to prevent credit anomalies and concurrency issues.
• Internal access is strictly limited.

7. Data Retention

Account and business data is retained until you delete your account or request deletion. Technical logs are generally kept for no more than 90 days. Where laws require otherwise, those requirements prevail.

8. Your Rights

To exercise these rights, contact us at the email at the bottom of this page. We will respond within a reasonable time.

• Access and review your account information and usage records.
• Correct inaccurate personal information.
• Delete your account and related data (except where retention is required by law).
• Export your data.

9. Minors

This service is not offered to anyone under 18. If we learn that a minor is using the service without guardian consent, we will take steps to delete their information.

10. Policy Changes

We may update this privacy policy from time to time. Updates will be posted on this page with a revised effective date. For material changes, we will notify you via in-site notice or email.

11. Contact Us

For any questions about this privacy policy or personal information, contact: lz7729889@gmail.com