数据处理与隐私保护协议 Privacy & Data Protection Protocol
Version 3.3.0 · Last Updated: July 2026
1. 个人数据收集原则 / Data Collection Principles 1. Personal Data Collection Principles
我们仅收集生成报告所绝对必需的信息。为了保证排盘精度，我们需要您输入您的：出生日期（公历或农历）、精确出生时间、性别、出生城市。出生城市用于自动校准当地真太阳时（经度和纬度计算），以排除由于时区物理跨度大导致的八字错盘风险。
We only collect data strictly necessary to compile your report. To ensure high astronomical precision, we require your date of birth, time of birth, gender, and city of birth. The city is used solely to compute longitude/latitude for local true solar time correction.
2. 数据临时处理与物理销毁机制 / Data Lifespan & Destruction 2. Data Ingestion & Destruction Policy
为了对您的数据安全负责，我们确立了最少保留原则：您的生辰八字数据在发送给大语言模型完成高精度排盘并由服务器渲染生成 PDF 报告后，服务器的本地原始生辰缓存将立即启动物理销毁（Hard Purge），不保留任何明文参数。最终生成的 PDF 报告会保存在私有云存储中，仅由您绑定的邮箱链接有权下载。
Under our minimized retention policy, once the raw birth data is submitted to the LLM agent and compiled into a PDF report, all raw inputs are immediately and permanently purged from server RAM. The finished PDF is stored in our secure, private cloud repository, accessible only via links sent to your verified email.
3. 第三方共享豁免 / Third-Party Exemption 3. Third-Party Sharing Exemptions
我们声明：绝对不会将您的生辰参数、测算内容或电子邮箱销售、转移或共享给任何第三方广告联盟或营销平台。所有的接口交互（例如调用大语言模型进行推演）均通过内网封装的 API 加密传输，不包含任何可识别您真实身份的信息。
We guarantee that we will never sell, lease, or share your birth metadata or email address with any third-party marketing network or ad broker. All model inference requests are encrypted and stripped of identifying identifiers before processing.
4. 您的权利 / Your Legal Rights 4. Your Data Subject Rights
根据欧盟通用数据保护条例（GDPR）与中国《个人信息保护法》（PIPL），您拥有：知情权、更正权、删除权。您可以随时通过客服工单系统提交申请，要求我们彻底清空与您的电子邮箱绑定的全部历史测算报告和会话记录。
Under the GDPR and PIPL, you retain full rights to access, rectify, or demand erasure of your data. You may submit a request through our support ticket system at any time to permanently erase all past PDF files and session histories linked to your email address.