# Privacy Policy

Ohra ("the Company") values the privacy of its users and complies with the Personal Information Protection Act and other applicable laws.

## Article 1 (Personal Information Collected)
The Company collects the following personal information to provide the Service.

At sign-up: email address, password
While using the Service: name (nickname), date of birth, time of birth, gender, lunar/solar calendar type
At payment: payment method information (card numbers, etc. are processed by the payment provider and not stored by the Company), payment history
Collected automatically: access IP, service usage records, cookies

## Article 2 (Purpose of Collection and Use)
1. Account management and identity verification
2. Generating and providing Saju fortune reports
3. Payment processing and order history management
4. Service improvement and statistical analysis
5. Responding to customer inquiries

## Article 3 (Retention Period)
1. Personal information is retained until account deletion and is destroyed immediately afterward.
2. As required by law, e-commerce transaction records are retained for 5 years and access logs for 3 months.

## Article 4 (Provision to Third Parties)
The Company does not provide users' personal information to external parties in principle.
However, payment-related information is provided to Toss Payments to process payments.

## Article 5 (Outsourced Processing)
- Anthropic: AI fortune report generation
- Supabase: database storage and management
- Vercel: service hosting
- Toss Payments: payment processing
- Sentry (error monitoring, United States): used for real-time monitoring and reliability improvements when a service error occurs. Information sent to Sentry is technical data captured at the time of the error (error message, stack trace, request URL, browser/OS information); personally identifiable information such as email addresses is automatically filtered out by sentryScrub.ts before transmission. Collected data is automatically deleted after 14 days under the free plan.

## Article 6 (User Rights)
Users may request to view, correct, or delete (withdraw membership) their personal information, or request that processing be suspended, at any time.
This can be done directly from My Page > Settings, or by contacting hello@unro.co.kr.

## Article 7 (Data Protection Officer)
Name: Jiyoung Park | Email: hello@unro.co.kr

## Article 8 (Use of Cookies)
The Company uses cookies to provide a personalized service.
Users may refuse to store cookies through their browser settings, but this may limit the use of some features.

## Article 9 (Destruction of Personal Information)
Personal information is destroyed without delay once the retention period has elapsed or the purpose of processing has been achieved.

Effective Date: This policy is effective as of June 1, 2026.