Privacy Policy
Effective October 14, 2026. This policy explains what personal information Galaxy Saju LAB collects, why, and how you can control it.
1. What we collect
| When | What |
|---|---|
| Creating an account | Email address; your name and profile picture if you sign in with Google; a password if you sign up with email (stored only in encrypted form by our login provider) |
| Using a chart or report | Name, gender, date and time of birth (time is optional), time zone, and any questions you write |
| AI chat | Your messages and the replies, kept so you can continue the conversation; you can delete them at any time |
| Automatically | Access logs, IP address, device and browser type, cookies |
| Contacting us | Your name, email address and the content of your message |
2. Why we use it
- To calculate your Four Pillars chart and write your report
- To keep your reports in My account and email you when a report is ready
- To identify you, keep your account secure and prevent misuse
- To answer questions and handle complaints and refunds
- To understand how the site is used and improve it
- To meet legal obligations
3. Who processes it for us
We do not sell your personal information. We share it only with the service providers below, who process it on our behalf, or when the law requires it.
| Provider | Country | Purpose | Data |
|---|---|---|---|
| Anthropic PBC | USA | AI writing of your report and AI chat (Claude API) | Birth details, gender, questions and chat messages |
| Supabase Inc. | USA | Database and sign-in | All the information above |
| Vercel Inc. | USA | Website hosting | Access logs, IP address |
| Resend, Inc. | USA | Report-ready emails | Email address, name, report name |
| Google LLC | USA | Google sign-in; site analytics | Sign-in details you allow; de-identified usage data (cookies) |
| Meta Platforms, Inc. | USA | Advertising measurement | De-identified browsing events (cookies) |
4. International transfer
We are based in the Republic of Korea, and our service providers store and process data in the United States. By using the service you understand that your information is transferred to and processed in these countries, protected as described in this policy.
5. How long we keep it
- Account and reports: until you delete your account
- AI chat messages: until you delete them or your account
- Access logs: 3 months
- Payment and refund records (once payments open): 5 years, as required by Korean e-commerce law
- Complaint records: 3 years
6. Your rights
You can ask to see, correct, download or delete your personal information, or ask us to stop processing it. Email galaxysajulab@gmail.com and we will respond within 10 days. If you live in the EU, the UK or California, you have these rights under your local law as well, and you may also complain to your local data protection authority.
7. Cookies
We use cookies to keep you signed in, to remember your preferences and to measure how the site is used. You can block cookies in your browser settings, but some features (such as signing in) may then stop working.
8. Children
The service is not intended for children under 14, and we do not knowingly collect their information. If you believe a child has given us personal information, contact galaxysajulab@gmail.com and we will delete it.
9. Security
Data is encrypted in transit, access is limited to what each task needs, and passwords are never stored in plain text.
10. Changes
We will post any change to this policy on this page at least 7 days before it takes effect (30 days for significant changes).
Who we are
| Business name | Luckywave (service name: Galaxy Saju LAB) |
|---|---|
| Representative | Jang Dong-wook |
| Business registration no. | 316-78-00414 |
| Mail-order business no. | 2024-Gyeonggi Icheon-0698 |
| Address | 290 Iyeo-ro, Baeksa-myeon, Icheon-si, Gyeonggi-do, Republic of Korea |
| galaxysajulab@gmail.com |