Privacy policy

1. Scope and current availability

This policy explains the information handled by Ziweave, an independently operated Zi Wei Dou Shu natal and timing chart service, at ziweave.com. The operator can be reached at alikefox.dev@gmail.com.

This policy covers public information pages and authenticated account features. Account features include sign-in, saved chart entry, usage and referrals, and data controls. Ziweave is not yet listed for public installation in the plugin directory, and paid subscriptions are not enabled. The homepage and connection guide state current availability.

These public pages do not use advertising cookies, analytics scripts, or a mailing-list form. Our network provider, Cloudflare, processes technical request information such as IP addresses, browser information, and request timestamps to deliver HTTPS pages and protect the service. Reading product information and policies does not require an account or birth details; signing in and using account features are separate actions.

2. Google sign-in: what we access and why

Ziweave uses Google sign-in through WorkOS AuthKit to authenticate you and let you return to the same account. The sign-in permissions are limited to basic identity: a Google account identifier, verified email address, and basic profile information such as name and profile picture, when provided by Google. WorkOS processes that information as the authentication provider.

Ziweave’s authentication server receives WorkOS’s sign-in response, verifies the account and email-verification status, and discards the name, profile picture, and other provider profile fields from that response. It retains the verified provider identity and session information needed to authenticate the account. The verified email address is kept only within the encrypted website session so you can identify the account you are using and the account for a confirmation. It expires or is deleted with that session (at most 30 days); refresh replaces or clears it. It is not stored in your birth profile, billing records, or operational event logs. A verified provider identifier is mapped to an internal Ziweave account; the first eligible sign-in creates that account. Email text is not used to merge or select accounts.

We do not request access to Gmail messages, Google Drive files, calendars, contacts, or other Google content. Your Google password is entered with Google, never with Ziweave.

Ziweave does not sell Google user data, use it for advertising, or use it to develop, improve, or train generalized AI or machine-learning models. Google name, email, and profile-picture fields are not included in the chart context that Ziweave sends to an AI service. Google sign-in information is used for authentication, account security, and maintaining your access, not to calculate a chart.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its applicable Limited Use requirements. Google’s own handling is described in the Google Privacy Policy.

3. Information you provide to Ziweave

Account, eligibility, and sessions

We keep the internal account identifier, account status and creation time, authentication linkage, and the session records needed to maintain and end access. Ziweave has an 18-or-over eligibility requirement, but new sign-ins do not create a separate age-declaration record. We do not determine the account user’s age from a chart’s birth date. Earlier preview versions collected a separate declaration; any existing encrypted record retains its original expiry of at most 90 days or is removed through account deletion, and is no longer required for access.

Your saved chart

Each account holds one editable saved chart. Chart input includes the birth date and calendar type; leap-month setting where relevant; exact time or traditional time period; birth, residence, and display time zones; the engine’s male/female input; and calculation settings. We use these details to calculate the requested natal or timing context. A timing request can also specify the moment to examine. Language preferences affect display, not location or chart settings.

A proposed change first produces a normalized preview. It is saved as the active chart only after your separate, explicit confirmation. You can replace the account’s saved chart through a new preview and confirmation.

Usage and referrals

We keep account-period dates, allowance, current-period bonuses, successful-request counts, temporary reservations, and request receipts to enforce the free allowance and prevent duplicate charges for the same operation. Optional referral records include the account’s code, its confirmed referral relationship, and earned grants. Sharing a code does not share the chart or sign-in credentials. Once a referral relationship is confirmed, it cannot be changed.

Support messages

When local operational statistics are enabled, Ziweave records the tool category, success or failure, quota blocks, retries, duration, and an ordinary, reviewer, synthetic, or unknown cohort. These events contain no birth details, chart content, conversation text, credentials, email address, account identifier, or operation identifier. Raw events have a 30-day retention limit, subject to an earlier storage cap. Expired detail is removed on writes, startup, or the next hourly maintenance while the service is running; after that only daily aggregate counts and durations remain. No earlier logs are imported or retroactively cleared by this feature. This is operational measurement, not the billing ledger, and is not sent to third-party analytics services.

If you email us, we receive your email address and the information you choose to include. We use it to respond and resolve the request. Please start with a description of the issue, without passwords, tokens, or birth details.

4. What connected AI services receive

Using the website to enter a chart does not itself send the form through an AI conversation. When you ask a connected AI service, such as ChatGPT or Codex, to use Ziweave, that service receives the requested chart context and tool results. Context includes the chart information and timing details needed for the response, even if you originally entered the birth details on the website.

If you choose to set up or edit a chart in a chat, the birth details you type, the normalized preview, and tool responses also become part of that conversation. The AI service handles conversations under its own terms, retention rules, and account settings; this may include its own model-improvement settings. Ziweave cannot delete a conversation or change those settings for you.

Only connect an AI service you intend to use. A connection grants access to the signed-in Ziweave account’s supported features; a prompt cannot select a different person’s account. Profile and account deletion use the direct website process, not a model’s claim that deletion has occurred.

5. Service providers and other sharing

• Google and WorkOS: authenticate you and manage their portions of sign-in and session security. WorkOS’s handling is explained in its Privacy Policy.
• Cloudflare: provides network delivery, HTTPS, and security for requests to the service. See its Privacy Policy.
• Your chosen AI provider: receives the tool inputs and chart context described above when you use that connection.
• Email services: deliver messages you send to the support address and our replies.

We do not sell personal information or share it for targeted advertising. We may disclose the minimum necessary information to respond to a valid legal requirement or investigate abuse or a security incident. Providers may process information in countries other than yours under their own published policies; this site does not promise a particular data-residency region.

6. Storage, cookies, and security

Saved chart data, pending chart changes, short-lived chart replay data, and website authentication records use encryption at rest on Ziweave’s server. Connections use HTTPS. Server credentials and encryption keys are kept separately from public application files.

This is not end-to-end encryption. Ziweave’s server decrypts the information needed to authenticate you, calculate a chart, and return it to your chosen interface. Authorized operational access may be necessary to resolve a security or support issue; ordinary application logs are designed to exclude birth details, credentials, and full chart payloads.

The account website uses necessary session and sign-in cookies, with session cookies protected from ordinary page JavaScript. Authentication credentials are held by the server, not in browser local storage. Google and WorkOS may set their own cookies during their sign-in flows. Reading a policy page does not itself start sign-in or authorize an AI connection.

7. Retention and deletion

Your active chart is retained while needed for the account until you replace it or request deletion. Unconfirmed chart previews and encrypted retry copies of chart results have a ten-minute validity period; expiration prevents further use and retention cleanup removes expired records. It does not mean all historical backup copies disappear at that exact instant. Website sessions have a bounded lifetime and end on sign-out or expiry; pending provider revocations are retained until they can be completed.

The direct account interface provides separate profile and account deletion, requiring recent reauthentication and explicit confirmation. Profile deletion removes the saved chart and associated chart-change and replay material while retaining the account and already-consumed allowance. Account deletion disables access and coordinates the removal of chart, authentication, and related account data.

Deletion can remain pending while encrypted backup copies are removed and a clean replacement is verified. It is complete only when the service returns a completed receipt. An error or pending receipt is not a promise that every copy has already been erased. There is no fixed completion time promised here; a pending request must be resumed or reviewed if cleanup cannot finish.

Minimal deletion markers and records needed to prevent a deleted identity from being silently recreated may remain. Valid referral grants already earned by other accounts are not clawed back; the service removes or de-identifies the deleted account’s referral linkage rather than exposing its chart or Google profile. Security and support records are kept only as needed for their purpose or an applicable obligation.

Deleting a Ziweave account does not delete your Google account or conversations already held by an AI provider. Those are managed with the respective provider. If the direct deletion interface is unavailable, contact the address below; we will explain the identity check and applicable deletion steps without asking for your password.

8. Your choices

You can read these public pages without signing in. When account access is available, you can review and update the saved chart, sign out, disconnect an AI integration, or request profile/account deletion. You can also review or remove Google third-party access in your Google Account connections. Removing Google access may prevent future sign-in; it does not by itself delete Ziweave’s saved chart or account.

Ziweave accounts are intended for account holders aged 18 or older. Please contact us if an account was created by someone under 18. Do not provide chart details you are not entitled to share.

9. Contact and policy updates

For privacy questions, corrections, access requests, or deletion assistance, email alikefox.dev@gmail.com and identify the request without sending sensitive chart details initially. We may need to verify that the request concerns your signed-in account.

Updates will be posted on this page with a revised date. If we change how Google data is accessed or used, we will update these disclosures and obtain any required new consent before using it for the new purpose.