Privacy Policy

Effective: June 6, 2026 | Data Controller: Haetnim Sanghoe

The official privacy policy is written in Korean and is legally binding under Korean law. This English version is provided for convenience only. In case of any discrepancy, the Korean version shall prevail.

1. Overview

Haetnim Sanghoe ("Company") operates OAO Innersights services (Four Pillars Saju analysis, Astrology analysis, Personality Assessment, etc.) and is committed to protecting users' personal information in accordance with the Korean Personal Information Protection Act.

Data Controller: Haetnim Sanghoe
Representative: Sunah Lee
Business Registration: 254-71-00252
Address: 566 Gyeryong-ro, Seo-gu, Daejeon, 4F Jay88
Contact: [email protected] / +82-507-1353-8229

2. Data We Collect

Account Registration

Type	Data Items	Purpose
Required	Name, email, password	User identification, login, authentication
Optional	Phone number	Identity verification, service notifications
Optional	Marketing consent (email, SMS)	Promotional communications

Service Provision

Service	Data Items	Purpose
Four Pillars (Saju)	Date of birth, birth time, birthplace (city, lat/lng), gender, name (Korean/Hanja)	Calculate four pillars chart & generate AI analysis
Astrology	Date of birth, birth time, birthplace (city, lat/lng), gender	Calculate natal chart & generate AI analysis
Personality Assessment	Date of birth, gender, test responses & scores	Calculate personality profile & generate AI interpretation
Compatibility Analysis	Partner's date of birth, birth time, birthplace, gender, name	Generate compatibility analysis

Payment

Naver order number — for order verification and credit allocation via Naver SmartStore

Automatically Collected

IP address, user agent, access country — fraud prevention, login history
Service usage logs (analysis type, timestamp, duration) — service improvement

3. Data Retention

Account data: Deleted (anonymized) immediately upon account withdrawal — name, phone, birth data, and location are erased; email and password are removed
Payment records: Retained for 5 years from payment date as required by Korean e-commerce law, then deleted
Analysis logs: Personal identifiers removed and data anonymized upon account withdrawal (retained for service quality improvement)
Access logs: Retained for 3 months as required by the Korean Telecommunications Privacy Act

Note: Upon withdrawal, personal data is immediately anonymized. The account ID is retained in inactive state for payment record referential integrity during the legal retention period.

4. Third-Party Disclosure

We do not disclose personal information to third parties, except:

When the user has given prior consent
When required by law or requested by law enforcement

5. Service Providers (Data Processing Delegation)

Provider	Service	Data Transmitted
Anthropic (USA)	AI analysis generation (Saju, Astrology, Personality)	Saju/Astrology: birth date/time, birthplace, gender, name (Hanja) Personality: test scores only (no personal identifiers)
Google (USA)	Social login (OAuth 2.0)	Email, name (Google account info)
Kakao (Korea)	Social login (OAuth 2.0)	Email, name (Kakao account info)
Naver (Korea)	SmartStore order verification	Naver order number (payment is processed directly by Naver)
Resend (USA)	Email delivery (verification, notifications)	Email address
Amazon Web Services (USA)	Server hosting and data storage	All data necessary for service operation

Note: Anthropic, Google, Resend, and AWS are based in the United States. Data is protected in accordance with each provider's privacy policies.

6. Your Rights

You (or your legal representative) may exercise the following rights at any time:

Request access to your personal data
Request correction or deletion of your personal data
Request suspension of data processing
Withdraw your account (via the "Account Withdrawal" menu in the service or by email request — processed immediately)

To exercise your rights: [email protected] or through the settings menu within each service.

7. Cookies and Local Storage

We do not use cookies. Instead, we use browser localStorage to store:

Item	Purpose	Retention
auth_token	Login authentication (JWT)	30 days (cleared on logout)
lang	Language preference	Until manually cleared

You can clear localStorage through your browser settings. Clearing it will require you to log in again.

8. Security Measures

HTTPS (TLS) encrypted communications
Passwords stored using bcrypt one-way hashing
JWT-based authentication with expiration and invalidation
Separated administrator access controls
Regular encrypted data backups

9. Children's Privacy

Our services restrict registration for users under 14 years of age. If we become aware that personal data of a child under 14 has been collected, we will delete it immediately.

10. Data Protection Officer

Name: Sunah Lee
Email: [email protected]
Phone: +82-507-1353-8229

11. Reporting Privacy Violations

For complaints or reports regarding personal data, you may contact:

Personal Information Protection Commission (Korea): privacy.go.kr / 182
KISA Privacy Center: privacy.kisa.or.kr / 118

12. Policy Changes

This policy is effective from the date stated above. Any changes will be announced through in-service notifications.

Current effective date: June 6, 2026
Previous effective date: April 8, 2026