AtsonaLast updated: October 20, 2026
Atsona Privacy Policy
Version: 1.0
Effective date: October 20, 2026
This Privacy Policy explains how Atsona handles personal information when you use its website and services, including accounts, birth profiles, readings with digital twins (AI), practitioner onboarding, payments and support. Atsona is operated by 안치림 (AHN CHI RIM) under the registered trade name 앳소나(Atsona) in the Republic of Korea (Atsona, we or us).
We do not sell personal information or use it for advertising. Your readings with a digital twin are not sent to the practitioner and are not published.
1. Information we collect and why
| Area | Information | Purpose |
|---|---|---|
| Account | Email address, name and profile photo received through Google sign-in; account identifier; language, appearance and notification settings; the Terms version you accepted and when | Sign-in, account management, service messages and display preferences |
| Birth profiles and charts | For you and the people you save: name or label, relationship, birth date and time, birthplace, coordinates, time zone, notes and chart settings | Saving profiles, calculating the charts you request and giving twins context for your readings |
| AI readings | Your messages, the birth and chart information you include, conversation context, AI answers and calculation results | Generating answers, continuing the conversation and checking answers for quality and safety |
| Usage records | For each answer: the tokens it used and how they count against your allowance, which twin and practitioner answered, your plan, and the time | Keeping the weekly usage allowance, and counting how much each twin and practitioner is used |
| Practitioner onboarding | Practitioner name (display name) and photo, location (country and city), one-line introduction and about text, chart settings (including the reference place for horary charts), practice-reading messages, reasoning notes, supplied materials, trial answers, corrections, reading rules and messages written for clients, and submission and review status | Building, testing and reviewing a practitioner's digital twin and offering an approved twin to clients |
| Payments | Plan, amount, currency, payment date, transaction number and billing country, and the card brand and last four digits where provided, received from the payment company | Processing purchases, cancellations and refunds, preventing fraud and keeping records required by law |
| Support | Messages you send us, your contact details and related account information | Answering questions and handling account, privacy, payment and service requests |
| Practitioner waitlist | Account identifier, practitioner name and area of interest | Recording interest in practitioner features |
| Service operation | IP address, browser and device information, access times and error records; a hashed IP address or account identifier used for request limits | Security, abuse prevention, troubleshooting and keeping the service running |
We collect this information from you, from Google when you sign in, from the payment company when you pay, and automatically while you use the service. Optional fields can be left empty, but a feature may not work without the information it needs. Please do not put identification numbers, passwords, card numbers or unnecessary sensitive information, such as health details, into readings or messages. Practitioner photos are resized on our server and automatically checked only for whether a face is present; we do not identify the person and do not send the photo elsewhere for this check.
2. AI processing
Atsona's answers are generated with OpenAI's API. When you ask a twin, the relevant messages, birth and chart information, calculation results and the twin's reference material are sent to OpenAI to generate and check answers. With every answer, the name or label, relationship, birth details and notes of you and of everyone you have saved are sent too, so the twin can tell whom you mean. In practitioner onboarding, the practitioner's answers, notes, corrections, reading rules, chart settings and supplied material in practice readings and twin reviews are also sent to OpenAI on the same terms.
OpenAI does not use data sent through its API to train its models unless the customer opts in, and Atsona does not opt in. OpenAI may keep API data for up to 30 days to monitor abuse and then deletes it, unless the law requires longer retention.
A twin's reference material comes only from what its practitioner submitted. Your readings are not added to any practitioner's material and are not used to train AI models. AI answers are automated interpretations that can be wrong; they are not decisions that produce legal or similarly significant effects on you.
3. Where your readings are kept
Conversations with twins are kept in your browser for that session and sent to our server with each message so the twin can continue the conversation. We do not keep a server-side archive of these conversations. The AI provider's abuse-monitoring copies and the short-term service logs described in this policy may still exist for limited periods.
Closing the browser tab or clearing site data removes the conversation from your browser.
4. Sharing and disclosure
We share personal information only as described in this policy. Practitioners do not receive your readings. When a practitioner submits a twin, Atsona's authorized reviewers can see the submission and its material, and an approved twin's practitioner name, photo, one-line introduction, about text and location (city or country) are shown to signed-in clients.
We may disclose information when the law requires it, limited to what the law requires. If Atsona's business is transferred, we will notify you in advance as the law requires.
5. Service providers and international transfers
We use the following providers to run the service. They process personal information on our behalf outside the Republic of Korea.
| Recipient (contact) | Country | Information | Purpose | Retention |
|---|---|---|---|---|
| Supabase, Inc. (privacy@supabase.com) | Australia (Sydney) | Account, profile, onboarding, submission, payment-record and support information | Database, sign-in and file storage | Until deleted under section 7 |
| OpenAI, L.L.C. (privacy@openai.com) | United States | Reading messages, chart information, practitioner reference material and calculation results | Generating and checking AI answers | Up to 30 days for abuse monitoring |
| Vercel Inc. (privacy@vercel.com) | Australia (Sydney) servers and a global delivery network (Vercel Inc. is a US company) | Content of requests to and from the site (such as reading messages, birth information and photos), IP address, request and error records | Website hosting, server processing and delivery | Short-term operational logs |
| The payment company named at checkout | The country shown at checkout | Payment and billing information | Processing payments and refunds | As required by law |
Information is transferred over encrypted connections when you use the related feature. These transfers are necessary to provide the service under our contract with you. You can refuse them by not using the service or by deleting your account, but the service cannot be provided without them.
Google handles your sign-in under its own privacy policy. Your browser also loads fonts from Google Fonts and jsDelivr and, on the page for practitioners, the sign-in button logo from Google; these providers receive your IP address and browser information.
6. Legal bases
We process personal information to provide the service you request and perform our contract with you, to comply with legal obligations such as keeping payment records, and for legitimate interests such as security and fraud prevention. Where consent is required, we ask for it separately; accepting the Terms of Service is not consent to anything beyond the service itself.
7. Retention and deletion
- Account and profile information: kept while your account exists, and deleted within 30 days after you delete your account.
- Usage records: kept linked to your account while it exists. When the account is deleted, that link is removed, and only records that cannot be traced to you remain, for counting use by twin and practitioner.
- Practitioner material and submitted twins: kept while the practitioner's account and twin exist. When a practitioner deletes the account, the twin is removed from clients and the material is deleted within 30 days.
- Records required by Korean e-commerce law: contract, withdrawal, payment and supply records for 5 years; consumer complaint and dispute records for 3 years; advertising and labeling records for 6 months. These are kept separately and used only for that purpose.
- Support messages: kept while your account exists and deleted with it, and kept for 3 years when they are consumer complaint or dispute records.
- Security and error logs: generally kept for no more than 90 days.
- Backups: copies in backups are erased automatically when the backups expire.
To delete your account, email support@atsona.com from the address on the account. We stop access to the account right away and delete its information within 30 days, except records we must keep by law. Electronic records are deleted so that they cannot be restored. Removing a saved person or practitioner material takes it off your account at once; if you want it erased before your account is deleted, ask us and we will erase it within 30 days. Material included in a submitted twin is kept with that submission; declined or superseded submissions are also kept as review history while the practitioner's account exists, and are erased within 30 days if you ask.
8. Your rights
You can ask to access, correct or delete your personal information, to suspend its processing, to withdraw consent or to receive a copy. Email support@atsona.com or call +82 10-4019-2610. We may ask only for the information needed to confirm it is you. We respond within 10 days, or within the period your local law sets. If we cannot fulfil a request, we explain why and how you can challenge the decision.
You can contact us first or go directly to the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), the Personal Information Infringement Report Center (118, privacy.kisa.or.kr), the Supreme Prosecutors' Office (1301, www.spo.go.kr) or the Korean National Police Agency (182, ecrm.police.go.kr). If you live in another country, you can also complain to your local data protection authority.
9. Cookies and browser storage
We use cookies that are necessary to keep you signed in, and cookies that remember your language and appearance for one year. The site also keeps drafts, birth details entered before signing in, reading conversations and settings in your browser's storage. Birth details entered before signing in are moved to your account profile when you sign in, unless the profile already has them. We do not use advertising or analytics cookies.
You can block or delete cookies and site data in your browser settings. If you do, you may be signed out, and your preferences or a conversation in progress may be lost.
10. How we protect information
We use encrypted connections, Google sign-in so that we never store passwords, database access controls that let each account reach only its own records, and limited administrator access. We collect only what each feature needs and review our safeguards regularly.
No method is completely secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.
11. Adults only
Atsona is for adults: you must have reached the age of majority where you live. We do not knowingly collect information from minors. If you believe a minor has given us information, contact us and we will delete it.
12. Privacy officer and contact
Privacy officer: 안치림 (AHN CHI RIM)Email: support@atsona.comPhone: +82 10-4019-2610Business: 앳소나(Atsona), business registration no. 108-40-93769Address: 159 Gosan-ro, Suseong-gu, Daegu, Republic of KoreaWebsite: https://atsona.com13. Changes to this policy
We announce changes on this page at least 7 days before they take effect, or 30 days before for changes that significantly affect your rights. Earlier versions are available on request.