Privacy Policy

1. Information collected

The Service may collect the following information.

• The user ID (handle) entered at account registration and passkey (WebAuthn) public keys and other information necessary for authentication. No email address is required for account registration
• An email address and other contact information the user provides voluntarily (which may be collected for announcements, support, and important notices)
• Information the user saves to the Service (including conversations with AI, conversations ingested from workspace services, notes, tasks, events, records, and other information the user enters or saves)
• Information about use of the Service (access timestamps, features used, error information, technical logs, etc.)
• Subscription and payment status information when using a paid plan

Even where authentication methods such as passkeys are used, the Operator does not itself collect the user's biometric data.

Payment processing is handled through an external payment provider (Stripe); the Operator does not collect or retain credit card numbers or other card information.

2. Purposes of use

The Operator uses collected information for the following purposes.

• To provide, maintain, protect, and improve the Service
• To authenticate the user
• To provide features such as display, search, organization, and export of information the user has saved
• To let AI clients and MCP-compatible tools reference and retrieve information the user has authorized, in response to their requests
• To run jobs the user has configured
• To investigate issues and provide inquiry response and support
• To send announcements, important notices, and other communications about the Service
• To analyze usage and improve the Service
• To detect and prevent unauthorized use, security issues, and other matters necessary for operating the Service
• To provide paid plans and confirm billing and payment status
• To respond to legitimate requests from laws, regulations, or government authorities

A registered notification email address is used only for important billing, ownership verification, security, and account notices. It is never used for marketing email and is never shown to other users.

3. Integration with external AI services and tools

The Service may be used in conjunction with AI clients, MCP-compatible tools, workspace services, and other external services used by the user.

Depending on what the user asks an external AI service, information may be saved to the Service. Information handling on the external AI side follows that service's own terms and privacy policy.

The Operator does not transmit information stored in the Service to external AI services without the user's instruction or permission.

When an automation runs, the necessary information is sent to the model provider used by the Operator-provided AI environment. This transmission is based on the automation the user created and ran.

4. Disclosure to third parties

The Operator does not provide personal information to third parties without the user's consent, except in the following cases.

• When required by law
• When necessary to protect a person's life, body, or property
• When a legitimate request is received from a public authority
• When outsourcing payments, infrastructure, authentication, email delivery, analytics, error monitoring, inquiry response, or similar functions to external providers to the extent necessary to provide the Service

5. Outsourcing

The Operator may outsource media storage, AI model execution, code execution, authentication, payments, email delivery, analytics, error monitoring, and similar functions to external providers as needed to provide the Service. Application servers and databases run on infrastructure in Japan managed by the Operator.

The main external providers currently used are: Cloudflare, Inc. (media file storage/delivery, CDN, and the execution environment for the Managed AI model), Modal Labs, Inc. (code execution environment for jobs and functions), Google LLC (marketing-site analytics via Google Analytics), Stripe, Inc. (payment processing), and Resend (email delivery — notification email verification and billing-related notices).

This policy will be updated when external providers are added or changed.

6. Retention period

The Operator retains information saved by the user in the Service for as long as the account is active.

Information deleted by the user is removed or rendered unusable within a reasonable period. Logs and backups may nonetheless be retained for a period as needed for legal, accounting, security, abuse-prevention, and incident-response purposes.

Complete deletion from backups may take some time.

7. User access, correction, and deletion

Users can review, modify, and delete information they have saved within the Service. The Service's export feature also lets users retrieve their saved information in bulk, in standard formats (Markdown, CSV, etc.).

A registered notification email address can be reviewed, changed, or deleted at any time within the Service. A verified address is required to start a new paid subscription.

For requests to delete an account, or to disclose, correct, suspend use of, or delete personal information, the Operator responds reasonably and in accordance with applicable law.

8. Security measures

The Operator implements necessary and appropriate measures to prevent unauthorized access, loss, alteration, and leakage of user information.

The Service implements technical and organizational controls including transport encryption, database encryption, access controls, and audit logs. Details will be published on a separate security page.

9. Use of cookies

The Service may use cookies or similar technologies to maintain login sessions, ensure security, understand usage, and improve the Service.

Users may disable cookies in their browser settings, though some features of the Service may become unavailable as a result.

10. Use by minors

Minors must obtain the consent of a parent or other legal guardian before using the Service.

11. Processing outside Japan

In providing the Service, user information may be stored or processed by servers or external providers located outside Japan. In such cases, the Operator takes necessary and appropriate measures in accordance with applicable law.

12. Language

The authoritative text of this policy is the Japanese version. Translations into English or any other language are provided for reference, for the user's convenience.

In the event of any discrepancy or conflict between a translation and the Japanese version, the Japanese version prevails.

13. Changes to this policy

The Operator may change the content of this policy as needed.

For material changes, the Operator notifies users by in-service display, email, or other appropriate means. The revised policy takes effect upon publication within the Service or at another time designated by the Operator.

14. Operator information and contact

The Operator will, upon a user's request and in accordance with applicable law, provide the Operator's name and address without delay.

For inquiries about this policy or the handling of personal information, please contact the following.

Contact: [email protected]

15. Effective and revision dates

Effective date: July 7, 2026

Last revised: July 14, 2026