How we handle
your data.

This Privacy Policy is effective as of March 1, 2026, and was last updated on March 4, 2026.

This Privacy Policy describes how Daniel AI LLC ("Company," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the GSG — Fortune Consulting Bureau website at gsgxai.com and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

We collect the following categories of personal information: a) Information You Provide Directly: • Account information: name, email address, password (hashed) • Birth information: date of birth, time of birth, gender (required for Saju analysis) • Profile information for others you add (with their consent) • Payment information (processed by our third-party payment processor; we do not store full payment card details) • Communications you send to us (contact form, support requests) b) Information Collected Automatically: • Device and browser information (type, version, operating system) • IP address and approximate geolocation • Usage data (pages visited, features used, consultation history, token usage) • Cookies and similar tracking technologies (see Section 8) c) Information from Third Parties: • Social login profile data (Google, Kakao) — limited to name, email, and profile picture as authorized by you

We use the information we collect for the following purposes: • Providing the Service: Generating Saju analyses, AI consultations, and compatibility readings • Account Management: Creating and maintaining your account, authenticating your identity • Payment Processing: Processing subscriptions, token purchases, and managing billing • Communications: Responding to inquiries, sending service-related notifications • Improvement: Analyzing usage patterns to improve the Service (in aggregate/anonymized form) • Security: Detecting and preventing fraud, abuse, and unauthorized access • Legal Compliance: Fulfilling legal obligations and enforcing our Terms of Service We do NOT use your personal information for: • Selling to third parties • Targeted advertising based on your Saju profile data • Automated decision-making that produces legal or similarly significant effects

We do not sell your personal information. We may share your information only in the following circumstances: • Service Providers: With third-party vendors who assist in operating the Service (hosting, payment processing, analytics) under strict contractual obligations • AI Processing: Your birth data and consultation queries are processed by AI language model providers to generate analyses. This data is sent without your name or email. • Legal Requirements: When required by law, subpoena, court order, or government request • Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified) • With Your Consent: When you explicitly authorize sharing Our current third-party service providers include: • Supabase (database and authentication) • Anthropic (AI language model processing) • Stripe (payment processing) • Cloudflare (CDN and security) • Microsoft Clarity (website analytics — see Section 8 for details) • Google Analytics 4 (website traffic and conversion tracking — see Section 8) • Meta Pixel (advertising conversion tracking — see Section 8)

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically: • Account data: Retained until you delete your account • Consultation history: Retained during membership for your reference • Payment records: Retained as required by tax and financial regulations (typically 7 years) • Server logs: Automatically deleted after 90 days Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

Depending on your state of residence, you may have the following rights: a) All Users: • Access: Request a copy of your personal information • Correction: Request correction of inaccurate information • Deletion: Request deletion of your account and personal information • Portability: Request your data in a commonly used, machine-readable format b) California Residents (CCPA/CPRA): • Right to Know: What personal information we collect, use, disclose, and sell • Right to Delete: Request deletion of personal information • Right to Opt-Out of Sale: We do not sell personal information, but you may still submit an opt-out request • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights • Right to Correct: Request correction of inaccurate personal information • Right to Limit Use of Sensitive Personal Information: Your birth data is used solely for providing the Service c) Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other state residents: • Right to access, correct, delete, and obtain a copy of your personal data • Right to opt out of targeted advertising (we do not engage in targeted advertising) • Right to opt out of sale of personal data (we do not sell personal data) • Right to appeal a denial of your privacy request To exercise these rights, contact us at [email protected] or use the Contact page on our website. We will respond within 45 days (or as required by applicable law). We may need to verify your identity before processing your request.

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including: • Encryption of data in transit (TLS/SSL) and at rest • Secure authentication with hashed passwords • Row-level security on database access • Regular security reviews and access controls • Limited employee access to personal information on a need-to-know basis No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We use the following types of cookies: • Strictly Necessary: Required for login sessions and basic functionality. Cannot be disabled. • Functional: Remember your preferences (language, theme settings). • Analytics: Collect usage data to improve the Service. You may opt out. Google Analytics 4 (GA4): We use Google Analytics 4 to collect information about how visitors use our website, including pages visited, time spent on pages, traffic sources, and conversion events. Google Analytics uses cookies and collects data such as your IP address (anonymized), browser type, and device information. Google may use this data in accordance with its own privacy policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout). For more information, see Google's Privacy Policy (https://policies.google.com/privacy). Microsoft Clarity: We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement (https://www.microsoft.com/privacy/privacystatement). Meta Pixel: We use the Meta (Facebook) Pixel to track conversions from Facebook and Instagram ads, build targeted audiences for future ads, and remarket to people who have taken actions on our website. The Meta Pixel collects data such as HTTP headers, pixel-specific data, button click data, and form field values. This data is shared with Meta Platforms, Inc. For more information, see Meta's Data Policy (https://www.facebook.com/privacy/policy). You can manage cookie preferences through your browser settings. Disabling certain cookies may limit Service functionality. We do not respond to Do Not Track (DNT) browser signals, as there is no industry-standard interpretation.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected]. If we discover that we have collected personal information from a child under 13, we will delete it promptly.

The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country. By using the Service, you consent to this transfer.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date and, where required by law, by email notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint, please contact us: Daniel AI LLC Email: [email protected] Website: https://gsgxai.com/contact If you are a California resident and are not satisfied with our response, you may contact the California Attorney General at https://oag.ca.gov/contact.