EnergyWay
Draft privacy notice. Update controller identity, retention periods, and subprocessors before launch. Not legal advice.

Privacy Policy

Effective date: August 3, 2026 · energyway.me

1. Who we are

EnergyWay (“we”) operates energyway.me. Contact: [email protected]

2. Data we collect

  • Pro contact: email is used only to issue an access link; we store a one-way email hash, not the plaintext address.
  • Access token: a random link token (stored as a hash) lets you reopen the report for 7 days. Keep the link; we cannot look up reports by typing your email alone.
  • Report content: AI text using the honorific “회원님” (your real name is applied only in your browser if you still have it saved locally).
  • Technical: IP address, browser type, request logs, task IDs needed to operate the service.
  • On your device only: birth inputs, display name, and free chart preview. Raw birth date/time and civil name are not kept in our database.

3. Why we process data

  • Provide AI reports you request
  • Let you re-open the same Pro report for a short period
  • Prevent abuse and operate the service securely
  • Comply with legal obligations

Legal bases (where GDPR applies) may include contract performance, legitimate interests (security/ops), and consent where required.

4. AI processing

For Pro reports, derived chart data (명식/pillars, five-element counts, luck cycles, etc.) may be sent to our AI provider(s). Civil name and raw birth date/time are stripped before the AI call. The model is instructed to address you only as “회원님”.

5. Sharing

We share data with infrastructure and AI vendors only as needed to run the service (e.g., hosting, LLM API). We do not sell personal data.

6. Retention

Pro reports, email hash, and access-token hash are kept for 7 days, then automatically deleted. We do not store plaintext email or raw birth date/time. If you lose the access link, we cannot recover the report by email lookup. You may request earlier deletion at [email protected] (provide the task link if you have it).

7. Your rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection. Contact [email protected]. EU/UK users may also lodge a complaint with a supervisory authority.

8. Children

The service is not directed to children under 16. If we learn we collected such data inappropriately, we will delete it.

9. International transfers

Data may be processed in countries other than yours (including where our hosts/AI providers operate). We use reasonable contractual and technical safeguards.

10. Changes

We may update this Policy and will revise the effective date above.