Privacy Policy
1. Data Controller
Gokansha G.K. ("the Company") operates HOSHIDOU ("the Service") in compliance with Japan's Act on the Protection of Personal Information (APPI) and handles user data responsibly.
2. Information Collected
The Service collects the following information:
- Account information: Email address, display name
- Birth details: Names, birth dates, birth times, and birth locations entered by the user
- Purchase and billing information: paid plan status and purchase history for Star Scrolls (books written by AI). Credit card numbers are handled directly by our payment processor and never pass through or reside on our servers
- Usage data: Server logs such as chart calculation requests
- Inquiries: the email address, name, subject, and message you send through the contact form or by email, and, if you were signed in, which account sent it. For feedback and problem reports, also the page you were on, your browser type, your screen size, and your display setting
- Birth-date sky on hoshidou.com: The date you enter is sent to app.hoshidou.com to calculate planetary positions. It is not linked to any name or account
3. Purpose of Use
Collected personal information is used only for the following purposes:
- Providing chart calculation and display services
- Generating and delivering Star Scrolls
- Account authentication and security
- Processing payments and managing paid plan and purchase records
- Email verification, password reset, and other notifications, including important notices about the Service such as changes to prices or these terms
- Responding to inquiries, including AI-assisted sorting and reply drafts. A member of our staff reviews every draft before a reply is sent
- Service quality improvement and incident response
4. Processors and Third-Party Sharing
We do not share personal information with third parties without user consent, except as required by law. We entrust data to the following providers only to the extent necessary to operate the Service:
Payment processing: Stripe, Inc. (USA) — Card, Apple Pay, and Google Pay payment details are handled directly by Stripe and never pass through our servers. We receive the result of the payment and limited details such as the last four digits of the card number.
Star Scroll generation: Anthropic, PBC (USA) — To generate Star Scrolls, we send Anthropic's AI model API the planetary positions we calculate from your birth details (planets, houses, aspects, and so on) and the name the Star Scroll uses to address you. Your birth date, birth time, and birth location themselves are not sent. Under Anthropic's commercial terms, data sent through the API is not used to train AI models.
Inquiry reply drafts: Anthropic, PBC (USA) — To draft replies to inquiries, we send Anthropic's AI model API the subject and message of the inquiry and, where needed to answer, the status of the related Star Scroll (for example, whether it has been written or refunded). Email addresses and names are not sent. Birth dates, birth times, and birth locations written in the message are masked before sending. Under Anthropic's commercial terms, data sent through the API is not used to train AI models.
Inquiry sorting: TypeSafe AI, Inc. (USA) — To sort inquiries by topic and decide which ones a staff member needs to handle, we send TypeSafe's AI model API the same information described above. Email addresses and names are not sent, and birth dates, birth times, and birth locations written in the message are masked before sending. Under TypeSafe's privacy policy, data sent to it is not used to train AI models.
Email: Resend, Inc. (USA) — Sends verification and notification emails and replies to inquiries, and receives email addressed to support@hoshidou.com. Resend handles email addresses and the content of those emails.
Feedback and problem reports: GitHub, Inc. (USA) — Used to track feedback and problem reports sent from the app, and comments on the HOSHIDOU Map, as development records. We send the message along with the page you were on, your browser type, your screen size, and your display setting. Email addresses, names, and account or purchase details are not sent. Email addresses, phone numbers, and dates of birth written in the message or page address, and IDs such as Star Scroll IDs, are masked before sending.
Server infrastructure: Fly.io, Inc. (USA) — Hosts the application and database. Data is stored on servers in the Tokyo region (Japan).
Content delivery: Cloudflare, Inc. (USA) — Delivers the website and app (CDN).
All of the providers above are located in the United States. We have reviewed each provider's published data protection practices and contractual terms, and limit the data they handle to what the Service requires.
5. Analytics
For usage analytics we run our own instance of Umami, an open-source analytics tool. It uses no cookies and measures page views in a form that cannot identify individuals. No analytics data is sent to outside analytics providers.
6. Security Measures
The Service implements the following security measures to prevent unauthorized access, loss, or damage to personal information:
- Encryption in transit: All communications are encrypted using TLS (HTTPS)
- Password protection: Passwords are hashed using bcrypt and never stored in plain text
- Access control: Access to personal information is limited to what is necessary for operations
- Data location: Data is stored on servers in Japan (Tokyo region)
7. Data Retention
Account and birth details are retained as long as the account exists. When an account is deleted, all associated data is permanently removed. Server logs are retained for a maximum of 90 days before automatic deletion. Payment records are kept for the period required by law.
8. Cookies
The Service uses cookies solely for session management (keeping you logged in) and for remembering your language and display theme, which are shared between hoshidou.com and app.hoshidou.com. No advertising or tracking cookies are used. Our analytics (Umami, described above) also uses no cookies.
9. Your Rights (APPI Articles 33-35)
Under Japan's Act on the Protection of Personal Information, you have the following rights regarding your personal data:
- Right to disclosure: You may request to know what personal information we hold about you
- Right to correction: You may request correction of inaccurate information
- Right to deletion and suspension: You may request deletion or suspension of use of your personal information
- Right to stop third-party transfer: You may request that we stop transferring your data to third parties
- Self-service: You can update your profile, edit or delete birth details, and delete your entire account at any time from account settings
10. Privacy Contact
For requests regarding disclosure, correction, deletion, or suspension of personal information, or for any privacy-related questions, please contact us at support@hoshidou.com or through the contact form. We will respond within a reasonable period (generally within 30 days).
11. Complaints
For complaints about how we handle your personal information, please contact us first at support@hoshidou.com or through the contact form. If the matter is not resolved, you may submit a complaint to Japan's Personal Information Protection Commission (https://www.ppc.go.jp/).
12. Policy Updates
This policy may be updated to reflect changes in law or service features. We will notify users of any significant changes through the app or website before they take effect.