Privacy Policy — Iron Scripture (鐵板神數)

1. Who we are

Iron Scripture ("the Service", "we", "us") is a web application that produces traditional 鐵板神數 (Iron Plate Numerology) readings. The Service is operated by Pailala Institute, based in USA. For any privacy question or request, contact us.

2. What we collect

To produce a reading, you provide:

• Your birth date and time, gender, and calendar type (solar/lunar);
• Your parents' birth years or ages, used to derive the 後天卦 palaces;
• Optionally, birth information for a spouse or other kin, if you choose to unlock those palaces.

We also automatically record your IP address, used only to apply rate limits and protect the Service from abuse.

We do not require an account, a name, an email address, or a password to use the free Service.

3. How we use it

Your inputs are used solely to:

• Compute your reading (a deterministic match to predetermined verses); and
• If you request it, generate a plain-language interpretation (傳譯) of a verse.

We do not use your information for advertising, and we do not sell it.

4. Where it goes (third parties)

• AI interpretation: if you ask for a 傳譯, the relevant verse text and minimal reading context are sent to Google (Gemini API) to generate the interpretation. Google processes this under its own terms.
• Hosting: the Service runs on Render, with servers located in Singapore.
• Saved/shared readings: if a shareable reading link is created, the reading data is stored by Upstash (Redis) and automatically deleted after 30 days (or the period you select).

Because of the above, your information may be processed outside USA, including in Singapore and on Google's infrastructure.

5. Retention

We do not keep user accounts or long-term profiles. Birth inputs are processed to generate your reading and are not retained beyond what is needed to serve it. If you create a shareable link, that reading is held only until the link expires (30 days by default), after which it is deleted automatically.

6. Cookies and analytics

The Service currently uses no tracking or advertising cookies. If we add basic analytics in the future, we will update this policy and describe what is collected.

7. Your rights

Under USA's Personal Data Protection Act (and comparable laws), you may request to access, correct, or delete your personal data, or to ask how it has been used. To make a request, contact us.**. Because most readings are not stored, a deletion request will usually concern a shareable link you created — please include that link.

8. Children

The Service is intended for adults. It is not directed at children under 18, and we do not knowingly collect their data without a guardian's involvement.

9. Security

We take reasonable measures to protect information in transit and at rest, but no method of transmission or storage is completely secure.

10. Changes

We may update this policy. Material changes will be posted here with a new "last updated" date.