隐私与 Cookie 政策Privacy & Cookie Policy
本页为中英双语：英文版为准，中文为译文，仅供参考。 This page is bilingual. The English version prevails.
中文（译文，仅供参考）
最后更新：2026 年 11 月 3 日
1. 我们是谁
FateNex（https://fatenex.com）的个人数据控制者为 COMNEX LTD，在英格兰及威尔士注册，公司编号 17540341，注册办公地址 128 City Road, London, EC1V 2NX, United Kingdom。隐私事务联系：support@fatenex.com（主题 "Privacy request"）。我们无须任命数据保护官。
2. 我们收集哪些数据
| 类别 | 示例 | 来源 |
|---|---|---|
| 账户数据 | 邮箱、登录标识、登录时间 | 您 / 认证服务 |
| 排盘输入数据 | 命盘名称或昵称、出生日期时间地点、性别、时区；奇门/六爻的问题与起局时间 | 您 |
| AI 对话数据 | 您的提问及生成的 AI 解读 | 您 / 本服务 |
| 购买数据 | 所购商品、金额、币种、日期、订阅状态、Stripe 客户与支付 ID、账单国家、您所接受的取消权放弃声明的版本与时间 | 您 / Stripe |
| 技术数据 | IP 地址、浏览器与设备类型、错误报告、安全日志 | 您的设备 |
| 分析数据（仅在同意后） | 浏览页面、功能使用情况、由 IP 推断的大致位置 | 您的设备 |
| 通信 | 您发给我们的邮件及我们的回复 | 您 |
我们不会接收或保存您的完整卡号，由 Stripe 处理。出生资料本身不属于特殊类别数据。我们不收集健康、宗教、性生活等特殊类别信息，本服务也不需要这些信息：请勿在自由文本问题中填写。如您仍然填写，该内容仅在生成您所要的回答时一并处理，不作他用；您可要求我们删除。如输入他人出生资料（如合盘解读），请确保对方同意。
您必须提供的数据。 注册账户须提供邮箱；生成命盘或解读须提供出生或起卦资料。这是履行合同所必需，缺少则无法提供相应功能。仅在购买时须提供支付信息。其余（如分析 Cookie 同意）均为自愿，拒绝不影响使用本服务。
3. 使用目的与合法依据（UK GDPR）
| 目的 | 合法依据 |
|---|---|
| 创建和运营账户；生成命盘、AI 解读与报告；交付所购商品 | 履行合同 |
| 收款、管理订阅、退款、防范支付欺诈 | 履行合同；正当利益（防欺诈） |
| 保存会计与税务记录 | 法定义务 |
| 安全、防滥用、错误监控与修复（Sentry） | 正当利益（保障服务安全与正常运行） |
| 产品分析（PostHog） | 同意 — 仅在您接受分析 Cookie 后 |
| 服务邮件（收据、条款变更） | 履行合同；法定义务 |
| 答复咨询与投诉 | 正当利益；履行合同 |
我们不出售您的个人数据，不对您作出具有法律或类似重大影响的自动化决策，也不将您的命盘数据或对话用于训练 AI 模型。AI 供应商通过其企业 API、按数据处理条款接收生成每次回答所需的内容，我们所用的设置不允许其将这些内容用于训练模型。
4. 共享对象（处理者）
我们使用以下服务商，它们依合同按我们的指示处理数据：
| 供应商 | 用途 | 涉及数据 |
|---|---|---|
| 认证服务（开源 Supabase Auth / GoTrue；由我们为 FateNex 单独运营的实例） | 登录与账户认证 | 账户数据 |
| Resend（Resend, Inc.，美国），邮件发送服务商 | 发送登录、验证与重置密码邮件 | 邮箱地址、邮件内容 |
| Stripe（Stripe Payments Europe, Limited；适用时 Stripe Payments UK Ltd；Stripe, Inc.） | 支付处理（银行卡、Apple Pay、Google Pay）、订阅、收据、账单门户、防欺诈 | 购买数据、支付信息、账单国家、邮箱 |
| PostHog（PostHog, Inc.，美国云） | 产品分析，仅在您同意后加载 | 分析数据（不与您的姓名或邮箱关联） |
| Sentry（Functional Software, Inc.） | 错误监控 | 与错误相关的技术数据（不含账户标识） |
| AI 模型供应商：OpenRouter（OpenRouter, Inc.，美国），将每次请求转发给我们选定的上游模型供应商；Anthropic（Claude；Anthropic Ireland, Limited，数据在美国处理）；OpenAI（ChatGPT API；OpenAI, L.L.C.，美国） | 生成 AI 解读。我们将 OpenRouter 限定于我们选定的模型供应商，且仅使用不将您的内容用于训练的供应商 | 回答所需的排盘资料与问题（不含您的账户邮箱或支付信息） |
| UCloud（云托管服务商；我们的服务器位于新加坡） | 托管服务器与数据库 | 本服务存储的全部数据 |
| Cloudflare（Cloudflare, Inc.） | 内容分发、DNS 与攻击防护，所有网站流量经其转发 | 技术数据（IP 地址、请求） |
Stripe 在部分目的（如防欺诈、履行其法定义务）上为独立控制者，详见 https://stripe.com/privacy 。我们也可能依法、为保护自身权利或向业务收购方披露数据（届时会通知您）。
5. 跨境传输
部分供应商在英国境外处理数据，主要在美国、欧盟与新加坡（我们的服务器所在地）。向英国境外传输时，我们依据英国充分性认定（包括供应商参与的 EU-US 数据隐私框架英国延伸），或供应商数据处理条款中所含的国际数据传输协议（IDTA）或欧盟标准合同条款英国附录。您可向我们索取详情。
6. 保存期限
- 账户与命盘数据：账户存续期间。您要求注销账户后，我们在收到请求后 30 天内删除；备份中的副本（如有）随备份过期另于 90 天内删除。您自行删除的命盘即时删除。
- AI 对话与解读：账户存续期间，注销账户时按上述方式一并删除。删除某个对话会将其从您的账户中移除；如需提前清除其存储记录，请发邮件给我们。
- 购买与交易记录：按英国税法与公司法要求保存（一般为财政年度结束后 6 年），注销账户后亦然。
- 安全、服务器与错误日志：最长 90 天。
- 分析数据：由 PostHog 按我们所用套餐的保留期保存，期满删除；不与您的姓名或邮箱关联，您可要求我们删除与您设备相关的分析数据。
7. 您的权利
根据英国数据保护法，您有权：访问、更正、删除数据；限制或反对处理（包括基于正当利益的处理）；数据可携；随时撤回同意（不影响此前处理）。您可用账户邮箱发邮件至 support@fatenex.com 要求注销账户，通过页脚 Cookie 设置 更改选择，或发邮件至 support@fatenex.com。我们将在一个月内答复。
如有不满，请先联系我们。您也有权向英国信息专员办公室（ICO）投诉：https://ico.org.uk/make-a-complaint/（电话 0303 123 1113）。欧盟/欧洲经济区用户可向当地数据保护机构投诉。
8. 未成年人
本服务不面向 18 岁以下人士，我们不会故意收集儿童数据。如您认为有儿童向我们提供了数据，请联系我们删除。
9. 安全
我们使用传输加密（HTTPS）、访问控制及可靠的供应商。支付数据由通过 PCI DSS 一级认证的 Stripe 处理。任何传输方式都无法做到 100% 安全。
10. Cookie 及类似技术
我们使用 Cookie 及类似技术（包括浏览器本地存储）。首次访问时，横幅提供同等醒目的全部接受与仅必要选项。非必要技术在您接受前不会加载。您可随时通过页脚 Cookie 设置 更改选择。
| 类型 | 提供方 | 用途 | 是否需同意 |
|---|---|---|---|
| 严格必要 | FateNex / 认证服务 | 保持登录、安全、记住 Cookie 选择、语言、时区（取自浏览器，用于按您当地时间显示日期；仅在本次浏览器会话内有效）与显示主题；在同一浏览器标签页内保持结账与注册步骤正常 | 否 |
| 偏好（本地存储） | FateNex | 记住您选择的设置，如命盘显示设置与解读语气 | 否 |
| 严格必要（结账） | Stripe | 在 Stripe 结账页处理支付与防欺诈 | 否 |
| 错误监控 | Sentry | 发现并修复错误。我方配置不写入 Cookie，也不在您的设备上存储任何内容；错误报告发送前去除用户信息与敏感参数 | 否 |
| 分析 | PostHog | 了解功能使用以改进服务 | 是 — 仅在您接受后 |
网站不使用广告或跨站追踪 Cookie。
11. 变更
更新将在此公布，重大变更将通过邮件或网站通知。
English (prevailing)
Last updated: 3 November 2026
1. Who we are
The controller of your personal data for FateNex (https://fatenex.com) is COMNEX LTD, registered in England and Wales, company number 17540341, registered office 128 City Road, London, EC1V 2NX, United Kingdom. Contact for privacy matters: support@fatenex.com (subject "Privacy request"). We are not required to appoint a Data Protection Officer.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | email address, login identifiers, sign-in timestamps | you / our authentication service |
| Chart input data | name or nickname for a chart, date, time and place of birth, gender, time zone; question text and casting time for Qi Men / Liu Yao | you |
| AI conversation data | the questions you ask and the AI interpretations generated | you / the Service |
| Purchase data | products bought, amounts, currency, dates, subscription status, Stripe customer and payment IDs, billing country, the version and time of any cancellation-right waiver you accepted | you / Stripe |
| Technical data | IP address, browser and device type, error reports, security logs | your device |
| Analytics data (only with consent) | pages viewed, feature usage, approximate location derived from IP | your device |
| Communications | emails you send us and our replies | you |
We do not receive or store your full card number; Stripe processes it. Birth details on their own are not special-category data. We do not ask for information about your health, religion, sexual life or other special categories, and the Service does not need it: please do not include it in free-text questions. If you include it anyway, it is processed only as part of generating the answer you asked for and is not used for anything else; you can ask us to delete it. If you enter another person's birth data (for example for a compatibility reading), please make sure they are happy for you to do so.
What you must provide. An email address is required to create an account, and birth or question details are required to produce a chart or interpretation; this is a contractual requirement, and without it we cannot provide those features. Payment details are required only to buy something. Everything else (for example analytics consent) is optional, and refusing it does not affect the Service.
3. Why we use it and our lawful basis (UK GDPR)
| Purpose | Lawful basis |
|---|---|
| Creating and running your account; producing charts, AI interpretations and reports; delivering purchases | Contract |
| Taking payments, managing subscriptions, refunds, preventing payment fraud | Contract; legitimate interests (fraud prevention) |
| Keeping accounting and tax records | Legal obligation |
| Security, abuse prevention, error monitoring and fixing bugs (Sentry) | Legitimate interests (keeping the Service secure and working) |
| Product analytics (PostHog) | Consent — only after you accept analytics cookies |
| Service emails (receipts, changes to terms) | Contract; legal obligation |
| Responding to your enquiries and complaints | Legitimate interests; contract |
We do not sell your personal data, and we do not use your data for automated decisions that have legal or similarly significant effects on you. We do not use your chart data or conversations to train AI models. Our AI providers receive the content needed to generate each answer through their business APIs, under data processing terms, and we use settings under which they may not use it to train models.
4. Who we share it with (processors)
We use the following service providers, who process data on our instructions under contracts:
| Provider | What they do | Data involved |
|---|---|---|
| Authentication service (open-source Supabase Auth / GoTrue; a dedicated instance operated by us for FateNex) | Sign-in and account authentication | Account data |
| Resend (Resend, Inc., United States), email delivery provider | Sending sign-in, verification and password-reset emails | Email address, the email content |
| Stripe (Stripe Payments Europe, Limited; Stripe Payments UK Ltd where applicable; Stripe, Inc.) | Payment processing (cards, Apple Pay, Google Pay), subscriptions, receipts, billing portal, fraud prevention | Purchase data, payment details, billing country, email |
| PostHog (PostHog, Inc., US cloud) | Product analytics, loaded only after you consent | Analytics data (not linked to your name or email) |
| Sentry (Functional Software, Inc.) | Error monitoring | Technical data about errors (no account identifiers) |
| AI model providers: OpenRouter (OpenRouter, Inc., United States), which forwards each request to the upstream model provider we have selected; Anthropic (Claude; Anthropic Ireland, Limited, with processing in the United States); OpenAI (ChatGPT API; OpenAI, L.L.C., United States) | Generating AI interpretations. We restrict OpenRouter to the model providers we have chosen and to providers that do not use your content for training | Chart input data and questions needed for the answer (not your account email or payment details) |
| UCloud (cloud hosting provider; our servers are located in Singapore) | Hosting our servers and database | All data stored by the Service |
| Cloudflare (Cloudflare, Inc.) | Content delivery, DNS and protection against attacks; all website traffic passes through it | Technical data (IP address, requests) |
Stripe also acts as an independent controller for some purposes (for example fraud prevention and meeting its legal obligations); see Stripe's privacy policy at https://stripe.com/privacy. We may also disclose data where required by law, to protect our rights, or to a buyer of our business (you will be told).
5. International transfers
Some providers process data outside the UK, mainly in the United States, the EU and Singapore (where our servers are located). Where data is transferred outside the UK, we rely on UK adequacy regulations (including, where the provider participates, the UK Extension to the EU-US Data Privacy Framework) or on the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, as included in the provider's data processing terms. You can ask us for details.
6. How long we keep it
- Account and chart data: while your account is open. When you ask us to delete your account, we delete this data within 30 days of your request; copies in backups, if any, are deleted when those backups expire, within a further 90 days. A chart you delete yourself is removed immediately.
- AI conversations and readings: while your account is open, and deleted together with your account as above. Deleting a conversation removes it from your account; to have its stored records erased before then, email us.
- Purchase and transaction records: for the period required by UK tax and company law (generally 6 years from the end of the financial year), even after account deletion.
- Security, server and error logs: up to 90 days.
- Analytics data: kept by PostHog for the retention period of our PostHog plan, after which it is deleted. It is not linked to your name or email, and you can ask us to delete analytics data associated with your device.
7. Your rights
Under UK data protection law you have the right to: access your data; correct it; delete it; restrict or object to processing (including processing based on legitimate interests); data portability; and withdraw consent at any time (this does not affect earlier processing). You can ask us to delete your account by emailing support@fatenex.com from your account email, change cookie choices via Cookie settings in the footer, or email support@fatenex.com. We will respond within one month.
If you are unhappy, please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/ (tel. 0303 123 1113). If you are in the EU/EEA you may complain to your local data protection authority.
8. Children
The Service is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
9. Security
We use encryption in transit (HTTPS), access controls and reputable providers. Payment data is handled by Stripe, which is certified to PCI DSS Level 1. No method of transmission is 100% secure.
10. Cookies and similar technologies
We use cookies and similar technologies (including browser local storage). When you first visit, a banner lets you choose Accept All or Necessary Only with equal prominence. Non-essential technologies are not loaded until you accept. You can change your choice at any time via Cookie settings in the footer.
| Type | Provider | Purpose | Consent needed? |
|---|---|---|---|
| Strictly necessary | FateNex / authentication service | Keep you signed in, security, remember your cookie choice, language, time zone (read from your browser so that dates show in your local time; kept only for the current browser session) and display theme; keep checkout and sign-up steps working within a browser tab | No |
| Preferences (local storage) | FateNex | Remember settings you choose, such as chart display settings and reading tone | No |
| Strictly necessary (checkout) | Stripe | Process payments and prevent fraud on the Stripe checkout page | No |
| Error monitoring | Sentry | Detect and fix errors. Our configuration sets no cookies and stores nothing on your device; user details and secret values are stripped from error reports before they are sent | No |
| Analytics | PostHog | Understand how features are used to improve the Service | Yes — only after you accept |
We do not use advertising or cross-site tracking cookies on the website.
11. Changes
We will post updates here and notify you of material changes by email or on the site.