Privacy Policy

1. Overview

DaoShu Energy provides cultural feng shui analysis reports for residential and commercial properties. To provide this Service, we collect certain personal information, including property addresses, floor plan images, and contact details.

Our Service is offered through daoshuenergy.com and is primarily directed at residents of Australia, New Zealand, the United States, and Canada.

2. Who We Are

DaoShu Energy
Website: daoshuenergy.com
Location: Adelaide, South Australia, Australia
Contact: privacy@daoshuenergy.com

3. What Personal Information We Collect

3.1 Information you provide directly

• Account registration: Full name, email address, password (stored as bcrypt hash — we never store your plain-text password).
• Property address: The street address you submit for analysis.
• Floor plan image: An optional image file (PNG, JPG, or PDF) you voluntarily upload.
• Payment information: Stripe processes all payments. We receive only a transaction reference and email. We never store your card number or CVV.
• Communications: If you contact support, we retain those communications.

3.2 Information collected automatically

• Usage data: Pages visited, features used, job submission times. Collected via server logs.
• Device and browser info: Browser type, OS, IP address, time zone. Used for security only.
• Authentication tokens: JWT tokens stored in localStorage with a 30-day expiry.

3.3 Information we do NOT collect

• We do not collect race, ethnicity, religious beliefs, health information, or biometric data.
• We do not scrape property listing data from third-party platforms to process customer jobs.
• We do not use cookies for advertising or cross-site tracking.

3.4 Mobile App (v3) — Birth-Date Personalisation

If you register through the mobile experience, we additionally ask for the items below, used solely for our cultural “personal palace recommendation” feature (BaZi-based; see §14).

• birth_date (year / month / day) — required for personalisation.
• gender (male or female) — required by the traditional cultural framework that drives the recommendation.
• birth_time (optional) — stored for display in your profile only; it does not influence the algorithm output.

We obtain your express consent for this collection at registration via a separate “I consent to keeping my birth date and gender for personalised palace recommendations” checkbox. Without that consent, the registration request is rejected and no birth-date / gender values are stored.

Sensitivity note: under APP 3.3, gender identity may be considered “sensitive information”. Your separate consent is the lawful basis for collection and processing.

What we deliberately do not collect: birth city, birth country, time zone, or daylight-saving information. We process the date and time exactly as you supply them, without conversion. This is a deliberate cultural design choice — see §14 for details.

4. How We Use Your Personal Information

We will not use your personal information for direct marketing without separate, explicit consent. We do not sell your personal information.

5. Disclosure to Third Parties

We share information only as necessary with:

• Stripe, Inc. (USA) — payment processing
• Anthropic, PBC (USA) — language-model processing (address and floor plan data passed via API)
• Cloudflare, Inc. (USA) — CDN and R2 object storage for reports
• Fly.io (USA) — application hosting
• Supabase (USA) — managed database
• Resend (USA) — transactional email

We do not sell, rent, or trade your personal information to any third party for marketing.

6. Overseas Transfer (APP 8)

Some of our service providers are located outside Australia (primarily the United States). Before disclosing your information to an overseas recipient, we take reasonable steps to ensure they handle your information consistently with the APPs. By using the Service, you consent to this transfer.

7. Data Retention

• Account data: retained while your account is active and for 3 years after closure for legal compliance.
• Analysis jobs and reports: retained for 12 months from completion, then permanently deleted.
• Floor plan images: deleted from our systems within 30 days of report generation.
• Server logs: retained for 90 days, then deleted.

8. Access & Correction (APP 12 & 13)

You have the right to access the personal information we hold about you and to request corrections. To exercise this right, contact us at privacy@daoshuenergy.com. We will respond within 30 days.

9. Security

We implement reasonable technical and organisational measures to protect your personal information, including bcrypt password hashing, TLS encryption in transit, and access controls. No method of transmission over the internet is completely secure. In the event of a data breach, we will notify affected users and the OAIC as required under the Notifiable Data Breaches scheme.

10. Cookies

We use a minimal set of technical cookies required for authentication and session management. We do not use advertising cookies or third-party tracking cookies. You may disable cookies in your browser settings, but this may prevent you from logging in.

11. Children

The Service is not directed at, and we do not knowingly collect information from, persons under 18 years of age. If you believe a minor has submitted information, contact us and we will delete it.

12. Complaints (APP 1.4)

If you believe we have mishandled your personal information, please contact us first at privacy@daoshuenergy.com. We will acknowledge your complaint within 5 business days and respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

13. Changes to This Policy

We may update this Policy from time to time. We will notify registered users of material changes by email at least 14 days before the change takes effect. Continued use of the Service after notice constitutes acceptance of the updated Policy.

14. Mobile App (v3) — Birth-Date Personalisation

This section explains how we use the birth-date data described in §3.4.

14.1 Purpose

Our mobile app offers a feature called Personal Palace Recommendation. It uses traditional Chinese cultural concepts (year-pillar mapping to a Bagua palace, zodiac-to-mountain mapping, and the year-branch interaction relations of clash / harm / break / penalty) to suggest which of the 8 cardinal palaces and 24 traditional “mountains” you may wish to pay attention to when evaluating a property.

This is a cultural reference only. Section 9 of our Terms of Service makes clear that no part of the report constitutes professional property, financial, or legal advice.

14.2 What we calculate from your birth_date

• Year pillar (year stem + year branch) — 2 of the traditional 6 characters used in our v1 algorithm.
• Month pillar and day pillar — displayed in your profile for completeness, but our v1 algorithm does not use them.
• Zodiac (year animal) — derived from year branch.
• Palace and mountain focus list — derived from year pillar and a small fixed lookup of cultural relations.

14.3 What we deliberately do not do

• We do not convert your birth_date / birth_time to UTC, GMT, or any other time zone. We treat the values you give us as the values, period. This avoids guessing which time zone you were born in and aligns with the cultural principle that the recognised time is the time.
• We do not use your birth_time for any algorithm output. It is stored only because some users want to see their full 8-character pillar in their profile; the algorithm operates on year pillar only.
• We do not share your birth_date / gender with any third party. They do not leave our backend except as part of an account export you request under §8.

14.4 Withdrawing consent / Deleting the data

You can clear your birth_date / gender at any time from your profile, which immediately disables the Personal Palace Recommendation feature. Deleting your account permanently deletes the values within the timeframe set out in §7.

14.5 Algorithm transparency

The cached recommendation in your profile records the algorithm version and the underlying calendar library version used to compute it (see also §3.4). Different traditional almanacs may differ slightly on edge cases (leap-month rules, solar-term cut-offs, year-of-birth pillar near the lunar new year). If you have a preferred almanac, treat the result you obtain there as authoritative for you.

15. Email Subscriptions (Spam Act 2003 (Cth))

This section explains how we comply with the Spam Act 2003 (Cth) when we send you periodic emails (currently the weekly DaoShu Mobile recommendation).

15.1 How we obtain your consent

We use a double opt-in process:

• You initiate by tapping “Subscribe” in the mobile app.
• We send a confirmation email containing a unique opt-in link.
• Your subscription becomes active only after you click that confirmation link.
• If you never click the link, no further emails are sent.

15.2 What you receive

Currently a single email kind: the weekly DaoShu Mobile recommendation, sent no more than once per week per active subscription. We do not bundle or cross-sell additional newsletter content from this mailing.

15.3 How to unsubscribe

• Every email contains a one-click unsubscribe link near the footer.
• The link works without requiring you to log in (it carries a one-time token).
• We action your unsubscribe immediately (typically within seconds).

15.4 Sender identification

Each email clearly identifies DaoShu Energy as the sender, includes our Australian Business Number (ABN), and an Australian-registered postal address. The reply-to address is monitored.

16. Contact

Privacy enquiries: privacy@daoshuenergy.com

General support: support@daoshuenergy.com