Privacy Policy

1. Introduction

BIRTHEORY ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share your personal information when you use our website, applications, and services (collectively, the "Services").

This policy applies to all users worldwide and complies with the EU General Data Protection Regulation (GDPR), the Thailand Personal Data Protection Act (PDPA), and other applicable data protection laws.

2. Data We Collect

We collect the following categories of personal data:

2.1 Account Information

• Name, email address, password (hashed)
• Billing details (name, address, phone, tax ID) for invoicing
• Newsletter opt-in preference

2.2 Birth & Profile Data

• Date, time, and place of birth
• Blood type, gender, occupation, industry, life goals
• Generated Birth Codes, Life Codes, and Archetype
• Custom questions submitted for reports

2.3 Sub-Profile Data (Third-Party Data)

• Birth data of family members, friends, and clients you add
• Relationship type, notes, and generated codes for these individuals
• You must have explicit consent from these individuals before entering their data

2.4 Interaction Data

• Chat conversations with the AI Consultant
• Q&A Report Letters (questions and responses)
• Support chat conversations with Birthy
• Support tickets and messages
• Community posts and blog comments
• Daily Science Destiny Horoscope data

2.5 Transaction Data

• Purchase history, credit balance, subscription details
• Invoices and payment references (via Stripe — we do not store card numbers)
• Print order details and shipping addresses

2.6 Technical Data

• IP address, browser type, device information
• Page visits and analytics data
• Cookies and similar tracking technologies

3. How We Use Your Data

• Generate personalized Birth Code, Mission Code & Life Code analysis
• Create reports, Theory Briefs, and Personalized Science Destiny Horoscope insights
• Power AI Consultant sessions and Q&A Report Letters
• Process payments and manage subscriptions
• Send transactional emails (order confirmations, invoices, OTP codes)
• Send marketing emails if you opted in during signup
• Provide customer support via tickets and Birthy chat
• Moderate community content
• Improve our services and develop new features
• Detect and prevent fraud or abuse

4. Legal Basis for Processing

• Contract Performance: Processing necessary to deliver services you purchased
• Consent: Marketing emails, cookies, newsletter subscription
• Legitimate Interest: Service improvement, fraud prevention, analytics
• Legal Obligation: Tax records, regulatory compliance

5. Data Sharing

We do not sell your personal data. We may share data with:

• Stripe: Payment processing (PCI DSS compliant)
• Abacus.AI: AI/LLM processing for report generation and consulting
• Lulu Direct: Print order fulfillment (shipping address only)
• Email services: Transactional and marketing email delivery
• Cloud infrastructure: Secure data storage and hosting
• Your Partner (if applicable): If you were referred by a partner, they may see limited information (codes, archetype — not raw birth data)

All third-party processors are bound by data processing agreements and handle data in accordance with applicable privacy laws.

6. Cookies & Tracking

We use essential cookies for authentication and session management, and optional analytics cookies to improve user experience. You can manage preferences through the cookie consent banner. See our Data Protection page for full cookie details.

7. Data Retention

• Account data: Retained for the lifetime of your account
• Reports: Retained permanently as long as account exists
• Chat and letter history: Retained permanently for returning user access
• Support tickets: Retained for 3 years after resolution
• Transaction records: Retained for 7 years for tax/legal compliance
• Analytics data: Retained for 26 months

You may request deletion of your account and associated data at any time.

8. Your Rights

Depending on your jurisdiction, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw marketing consent at any time

To exercise these rights, contact us via the Contact page or email us directly.

9. International Data Transfers

Your data may be processed in Thailand where our office is located. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required by GDPR.

10. Children's Privacy

Our Services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we learn that a child's data has been collected, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For privacy inquiries or to exercise your rights:

• Data Protection Contact: Contact Page
• Address: Spaces Chamchuri Square, 24th Floor, 319 Phayathai Road, Pathumwan, Bangkok 10330, Thailand