Vesperine
Vesperine

Privacy Policy

Version 2026-06-24

1. Who We Are

Vesperine is operated for Singapore customers by NOMAD SUSTAINTECH LIMITED. We provide the Singapore surface in English and Chinese, with SGD checkout through our New Zealand Stripe account.

Registered address: Auckland, New Zealand. Support: [email protected].

This policy is written for Singapore buyers and is intended to align with the Personal Data Protection Act 2012 (PDPA). It should be read together with our Terms, Refund Policy, and Data Processing & AI Data Handling Statement.

2. Consent, Purposes and Data We Collect

By creating an account, starting a reading, saving a chart, contacting support, or completing checkout, you consent to us collecting and using the personal data needed for those stated purposes.

Account and support data: email, sign-in records, locale, timezone, support messages, and security signals such as device and IP information.

BaZi and reading data: name or handle, birth date, birth time, birth place, gender, calendar choice, question text, generated chart, reading output, follow-up context, and any memory note you choose to save.

Payment data: name, email, Stripe order IDs, amount, SGD currency, payment result, refund result, and fraud-prevention signals. We do not collect or store full card numbers, expiry, or CVV.

Usage and measurement data: page views, checkout events, reading completion events, first-party analytics, and campaign measurement where enabled. Sensitive text fields and reading bodies are masked from session-replay tooling.

3. Purpose Limitation

We use personal data only for purposes a reasonable Singapore buyer would expect from this service: account access, chart calculation, reading delivery, payment and refund handling, service messages, support, fraud prevention, legal compliance, and improving reliability.

We may use de-identified or aggregated information to improve prompts, product quality, and conversion flows. We do not sell your personal data, and we do not use your private reading inputs to train third-party AI vendors' models.

Marketing emails are sent only where you have opted in or where permitted by law. You can unsubscribe through the email link or contact support.

4. AI and Automated Processing

Vesperine readings are generated through automated chart calculation and AI-assisted interpretation. The service turns the birth data, selected system, question, and saved context you provide into a reflective reading.

The output is for self-reflection and entertainment. It is not a medical, legal, tax, investment, immigration, mental-health, or other professional decision.

We use automated safeguards to detect failed or degraded generations. When a paid reading cannot be delivered properly, the system may restore credits or trigger review under the refund handling described in our Refund Policy.

5. Cross-Border Transfers and Processors

Stripe New Zealand processes Singapore SGD card payments, refunds, and card tokenisation for us. Your card details are entered with Stripe, not stored on Vesperine servers.

AI and infrastructure processors may process the reading input needed to generate or host your report. Where Anthropic is used, inference may occur outside Singapore. Where our self-hosted model is used, data stays within our controlled infrastructure.

Email and analytics processors help deliver password resets, receipts, support messages, and service measurement.

When personal data is transferred outside Singapore, we take reasonable steps to ensure the recipient is bound by protections comparable to the PDPA, including contractual, technical, and access-control safeguards where appropriate.

6. Access, Correction and Withdrawal

Under Singapore's PDPA, you may request access to personal data we hold about you and request correction of inaccurate personal data.

You may also withdraw consent for optional uses such as marketing. Some core data remains necessary to provide paid services, complete refunds, prevent fraud, keep tax/accounting records, or handle disputes.

Email [email protected] with your request. We will respond within a reasonable period and may ask for information needed to verify your identity.

For PDPA guidance or complaints, Singapore users may refer to the Personal Data Protection Commission at pdpc.gov.sg.

7. Retention

Account and reading history are kept while your account remains active, unless you delete individual readings or ask us to delete your account.

Payment, refund, tax, accounting, anti-fraud, and dispute records may be kept for the period required by applicable law and processor rules.

Server logs are normally kept for 90 days. De-identified or aggregated quality metrics may be kept longer because they no longer identify you.

8. Security and Updates

We use HTTPS, password hashing, role-based access, processor-side card handling, and least-privilege access controls. No internet transmission or storage system is perfectly secure.

Policy version: 2026-06-24. Material changes will be posted on the site or sent by email where appropriate.