Privacy Policy

Introduction

This Privacy Policy explains how SenjoTech, LLC (“the Company,” “SenjoTech,” “we,” “us,” or “our”), the operator of the Hitaishi.ai platform, collects, uses, stores, shares, and protects your personal information when you use Hitaishi.ai, including our website and related services (collectively, the “Service”).

Hitaishi.ai is an AI-powered personal life coach grounded in Vedic astrology. Because the Service processes birth details, life events, and coaching conversations — information that may be considered sensitive — we apply heightened safeguards to this data as described below. We are committed to transparency about our data practices.

1. Legal Basis for Processing

We process your personal data under the following legal bases, as applicable under the EU General Data Protection Regulation (“EU GDPR”), the UK General Data Protection Regulation (“UK GDPR”) as retained under the Data Protection Act 2018, and other applicable data protection laws:

• Contract Performance: Processing necessary to provide the Service you requested (e.g., generating your Vedic chart and personal profile from birth data you provide, and responding to your coaching questions).
• Consent: Where required by law, we obtain your explicit consent before processing sensitive personal data such as birth details. You may withdraw consent at any time (see Section 9).
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., improving platform performance, preventing fraud), where those interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations.

2. Information We Collect

2.1 Information You Provide

When you create an account or use the Service, you may provide:

• Account information: username or display name, email address, and account credentials.
• Birth details: date of birth, time of birth, and location of birth, used for chart generation. We classify birth details as sensitive personal information and apply additional protections described in Section 5.
• Life context: answers you give during the calibration process, life events and their timelines, and decisions you record — used to personalise your coaching.
• User-generated content: questions, messages, or other inputs submitted to your AI coach.

2.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Device and connection information: IP address, browser type and version, operating system, and device identifiers.
• Usage data: pages visited, features used, timestamps, referring URLs, and interaction patterns.
• Cookies and similar technologies: as described in Section 10.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: Generating your Vedic astrology chart, your personal profile, and AI-powered coaching responses based on your inputs.
• Account management: Authenticating your identity, managing your account, and providing customer support.
• Platform improvement: Analyzing usage patterns to improve functionality, fix bugs, and develop new features.
• Communications: Sending service-related updates (such as email verification, password reset, and profile-ready notices), responding to inquiries, and (with your consent where required) sending promotional materials. You may opt out of promotional communications at any time.
• Security and fraud prevention: Detecting, investigating, and preventing unauthorized access, abuse, or other harmful activity.
• Legal compliance: Fulfilling legal obligations, responding to lawful requests, and enforcing our terms.

We do not sell your personal data to third parties. We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight.

4. AI Processing and Third-Party AI Services

Our Service uses artificial intelligence to generate your personal profile, respond to your coaching questions, and interpret your Vedic chart in the context of the life details you share. This section explains how your data is handled in that context.

4.1 How AI Processing Works

Astrological chart computation itself is performed by the Company’s own proprietary engine (SenjoVedicEngine), operated on Company-controlled infrastructure — no third party performs your chart calculations. When you use coaching features, your chart data and the inputs you have provided (questions, calibration answers, life events) are transmitted to our third-party AI provider to generate responses. Inputs are processed in real time and are not retained by the AI provider beyond what is described below.

4.2 Third-Party AI Provider: Anthropic PBC

We use the Anthropic API, powered by Anthropic’s Claude large language model, to process your inputs and generate your personal profile and AI-powered coaching responses. Anthropic acts as a data processor on our behalf and processes your data solely in accordance with our instructions to provide the Service.

Key data handling commitments by Anthropic under their Commercial Terms:

• No model training on your data. Anthropic does not use inputs or outputs submitted through its API to train its generative AI models. We have not opted in to any program that would permit such use.
• Data retention. Anthropic automatically deletes API inputs and outputs within 30 days of receipt or generation, except where retention is required to enforce its Usage Policy or comply with applicable law.
• Data Processing Addendum. Our use of the Anthropic API is governed by Anthropic’s Commercial Terms of Service, which incorporate a Data Processing Addendum (DPA) including EU Standard Contractual Clauses (SCCs) for international data transfers.
• No account identifiers. The Company does not attach your email address, credentials, or internal account identifiers to requests sent to Anthropic. Note that content you author yourself (questions, life events, calibration answers) is transmitted as written, so it may contain personal details you have chosen to include.

You can review Anthropic’s applicable terms and policies at the following links:

• Commercial Terms of Service: https://www.anthropic.com/legal/commercial-terms
• Data Processing Addendum: https://www.anthropic.com/legal/data-processing-addendum
• Privacy Policy: https://www.anthropic.com/privacy

4.3 Conversation Logging

Coaching conversations are stored on our platform and retained until you choose to delete them. You may delete conversations at any time by:

• Selecting and deleting individual conversations from your conversation history.
• Deleting your account entirely.

Stored conversations are secured using the measures described in Section 6. Access is restricted to authorized personnel for the purposes of customer support, safety monitoring, and abuse prevention.

4.4 AI Model Training

We do not use your personal data to train any AI models (whether our own or third-party) without your separate, explicit, informed consent. If we seek such consent in the future, we will clearly explain what data would be used, for what purpose, and how to opt out.

4.5 Limitations of AI Outputs

AI-generated content is provided for informational and self-reflection purposes only. It does not constitute medical, legal, financial, psychological, or other professional advice. See Section 13 for our full disclaimer.

5. Sensitive Data: Birth Details and Life Context

Birth details (date, time, and location of birth) are central to the Service, and the life context you share (calibration answers, life events, decisions) is inherently personal. This information may be considered sensitive personal information under applicable data protection laws. We apply the following additional safeguards:

• Explicit consent: We collect birth details only with your explicit, informed consent, obtained through an affirmative opt-in mechanism (not implied by usage).
• Purpose limitation: Birth details and life context are used solely for generating your Vedic chart, your personal profile, and your coaching responses. They are not used for profiling, marketing, or any unrelated purpose.
• Minimized access: Access to this data is restricted to systems and personnel strictly necessary to deliver the Service.
• Enhanced encryption: This data is encrypted at rest and in transit.
• Deletion: Birth details are stored as part of your account data. Because birth details are integral to your chart and coaching history, deletion of birth details requires deletion of your account. You may request account deletion at any time (see Section 9).

6. Data Storage and Security

We implement technical and organizational measures designed to protect your personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256 or equivalent).
• Hosting on secure cloud infrastructure with industry-standard certifications.
• Role-based access controls with least-privilege principles.
• Regular security assessments and vulnerability testing.
• Incident response procedures (see Section 6.1).

No system is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

6.1 Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (as required under EU GDPR and UK GDPR where applicable). For UK residents, the relevant authority is the Information Commissioner’s Office (ICO). We will notify affected individuals without undue delay. Where CCPA applies, we will notify affected California residents as required by law.

7. Sharing of Information

We share your personal data only in the following circumstances:

7.1 Service Providers (Data Processors)

We engage third-party companies to perform functions on our behalf. These processors are contractually bound to use your data only as instructed and to maintain appropriate security measures. Our current service providers include:

• Anthropic PBC — AI processing (personal profile and coaching responses) via the Anthropic API (United States). See Section 4.2 for details.
• Latitude.sh — Cloud hosting, application servers, and database infrastructure (United States).
• Mailgun — Transactional email delivery, such as verification and password-reset messages (name and email address only).
• Clerk, Inc. — Optional social sign-in infrastructure (United States). When you use social sign-in, Clerk handles the sign-in flow; the Company receives only your verified email address and basic profile information.
• Google LLC — Optional “Sign in with Google” identity service (United States). When you use Google sign-in, Google receives the OAuth authorisation request; the Company receives only your verified email address and basic profile information.
• Cloudflare, Inc. — Network security, content delivery, and bot protection (United States). Cloudflare sits in front of the Service and processes connection metadata (such as IP address and browser signals), including for the Turnstile challenge used to protect account creation.
• OpenStreetMap Foundation (Nominatim) — Geocoding for birth-location search. Receives only the place-name text you type when searching for your birth location; no account information is sent.

7.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process (e.g., a court order, subpoena, or government request). Where permitted, we will notify you before making such a disclosure.

7.3 Business Transfers

If the Company is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your data becomes subject to a different privacy policy.

We never sell personal information. We do not share personal data with third parties for their own marketing purposes.

8. International Data Transfers

The Company is based in the United States and does not have an establishment in the European Union. Our servers and service providers are located in the United States. If you access the Service from outside the United States, your personal data will be transferred to and processed in the United States.

If you are located in the EU/EEA or UK, we ensure appropriate safeguards are in place for international data transfers, including:

• EU/EEA residents: Standard Contractual Clauses (SCCs) approved by the European Commission, as incorporated in each US-based processor’s Data Processing Addendum (including Anthropic’s DPA for AI processing, and equivalent SCC-based safeguards for our other US-based processors).
• UK residents: The UK Addendum to the EU Standard Contractual Clauses, as approved by the UK Information Commissioner’s Office (ICO), or the International Data Transfer Agreement (IDTA) where applicable.
• Adequacy decisions where applicable.

By using the Service, you acknowledge that your data will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. You may request a copy of the applicable transfer safeguards by contacting us at the address in Section 15.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

9.1 Rights Under EU GDPR and UK GDPR (EU/EEA/UK Residents)

If you are located in the EU/EEA, your rights arise under the EU General Data Protection Regulation. If you are located in the United Kingdom, your rights arise under the UK GDPR (retained under the Data Protection Act 2018). In both cases, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (“right to be forgotten”). Note: deletion of birth details requires deletion of your account, as described in Section 5.
• Restriction: Request that we limit processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Withdraw consent at any time for processing based on consent. Withdrawal does not affect the lawfulness of processing performed before withdrawal.
• Lodge a complaint: File a complaint with your local data protection supervisory authority. For UK residents, this is the Information Commissioner’s Office (ICO) at ico.org.uk.

9.2 Rights Under CCPA/CPRA (California Residents)

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to delete: Request deletion of personal information we have collected.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out of sale or sharing: We do not sell or share personal information for cross-context behavioral advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your rights.

9.3 How to Exercise Your Rights

Submit requests to: [email protected]

We will respond to verified requests within 30 days (GDPR) or 45 days (CCPA/CPRA). We may request verification of your identity before processing a request. If we need additional time, we will inform you of the reason and extension.

If you withdraw consent for processing birth details, your account and all associated data (including birth details, chart history, personal profile, and conversation history) will be deleted, as birth details cannot be separated from your account. You may continue to access the Service by creating a new account.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Strictly necessary cookies: Required for authentication, security, and core platform functionality (including the session cookie that keeps you signed in and the Cloudflare Turnstile challenge that protects account creation). These cannot be disabled.
• Preference storage: Remember your settings and preferences.
• Usage analytics: We record feature usage server-side to understand how the Service is used.

We do not use advertising or cross-site tracking cookies.

10.1 Cookie Consent

Where required by law (including under the EU ePrivacy Directive and the UK Privacy and Electronic Communications Regulations 2003 (PECR)), we obtain your affirmative consent before setting non-essential cookies. You may also control cookies through your browser settings, though disabling certain cookies may affect platform functionality.

11. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, or as required by law. Our standard retention periods are:

You may request deletion of your data at any time by contacting us. We will process deletion requests in accordance with the timelines in Section 9.

12. Children’s Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected data from a child under 16, we will take prompt steps to delete that information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the address in Section 15.

13. Coaching and Astrology Disclaimer

Hitaishi.ai provides AI-generated life-coaching perspectives informed by Vedic astrology. All charts, interpretations, coaching responses, and AI-generated content provided through the Service are for informational and self-reflection purposes only. They do not constitute and should not be relied upon as medical, legal, financial, psychological, therapeutic, or any other form of professional advice.

You should not make significant life decisions based solely on astrological interpretations or AI coaching responses. If you need professional advice, please consult a qualified professional in the relevant field.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will post the updated Policy on this page with a revised “Last Updated” date.
• For material changes, we will notify you by email (if you have an account) or by prominent notice on the Service at least 30 days before the changes take effect.
• Where required by law, we will obtain your consent to material changes.

Your continued use of the Service after the effective date of changes constitutes acceptance of the updated Policy. If you do not agree with any changes, you should discontinue use of the Service and request deletion of your data.

15. Contact Information

For privacy questions, data requests, or complaints:

Company: SenjoTech, LLC
Platform: Hitaishi.ai
Email: [email protected]

The Company does not have an establishment in the European Union or the United Kingdom. EU/EEA and UK residents may contact us directly at the email address above for any data protection inquiries.

If you are a UK resident and are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113

If you are an EU/EEA resident, you have the right to lodge a complaint with your local data protection supervisory authority.