Article 1 (Information We Collect)

The Operator may collect the following information in providing the Service.

1. Information provided by users

(1) Email address and nickname.

(2) Inquiry details, contact information, and other information sent by users to the Operator.

2. Information collected in connection with use of the Service

(1) Text, messages, and other content input by users into the Service.

(2) AI-generated responses, conversation summaries, estimated information relating to emotions, and other information generated in connection with providing the Service.

(3) Selected characters, usage dates and times, and other information relating to use of the Service.

(4) Paid plan status, purchase history, payment status, Stripe customer IDs, subscription IDs, payment IDs, and other information necessary for payment management.

(5) Cookies, session information, IP addresses, device and browser information, access dates and times, information relating to operations and errors, and other technical information.

Article 2 (Purposes of Use)

The Operator uses collected information for the following purposes.

1. To register users, enable login, verify identity, authenticate users, and manage accounts.

2. To provide, maintain, protect, and operate the Service.

3. To generate AI responses, display conversation history, maintain continuity of conversations, adjust responses for each character, and provide other functions of the Service.

4. To manage talk points, paid plan usage status, payment status, billing, refunds, cancellations, other Service usage status, and payment-related operations.

5. To send notices regarding the Service, important announcements, and communications regarding changes to terms or policies.

6. To respond to inquiries, opinions, requests, bug reports, and other communications from users.

7. To analyze usage of the Service, improve the Service, develop new features, and improve quality.

8. To investigate, prevent, and respond to unauthorized use, violations of terms, security issues, failures, and other events necessary for operation of the Service.

9. To comply with laws, guidelines, orders of administrative agencies or courts, and similar requirements.

10. For purposes incidental to the purposes above.

Article 3 (Use of External Services)

1. The Operator may use external services to the extent necessary to provide, maintain, and improve the Service and otherwise achieve the purposes of use set forth in this Policy.

2. In connection with the use of external services, user information may be transmitted to the providers of those external services and handled in accordance with the terms of use, privacy policies, data usage terms, and other conditions established by each provider.

3. When using external services, the Operator endeavors to review their content, information handling, terms of use, and other necessary matters, and to select appropriate services to a reasonable extent.

Article 4 (Transmission to AI Services)

1. For AI response generation, the Service may transmit text input by users, conversation history, conversation summaries, selected character information, and other information necessary for response generation to AI service providers used by the Operator.

2. The Operator endeavors not to transmit unnecessary personal information or sensitive information to AI service providers beyond the scope necessary for response generation.

3. Information transmitted to AI service providers may be handled in accordance with the terms of use, privacy policies, data usage terms, and other rules of the relevant AI service providers.

Article 5 (Handling of Payment Information)

1. Payments for paid plans of the Service are processed using payment services provided by Stripe, Inc. or its affiliates.

2. Credit card information, card numbers, expiration dates, security codes, and other payment method information input by users are processed by Stripe. The Operator does not directly collect, view, or store such information.

3. The Operator may collect or store Stripe customer IDs, subscription IDs, payment IDs, payment status, purchase history, billing, refund, and cancellation information, and other information necessary for payment management to the extent necessary to provide and manage paid plans.

4. For transactions in which the Operator uses Stripe Managed Payments, Stripe or its affiliates may act as the Merchant of Record (seller or merchant for payment purposes) and may perform payment processing, calculation, collection, and remittance of taxes, fraud handling, dispute handling, transaction-related support, and other operations designated by Stripe.

5. To the extent necessary for the operations described in the preceding paragraph, users’ email addresses and other contact information, transaction information, purchase information, payment information, and other necessary information may be transmitted to Stripe and handled in accordance with Stripe’s rules.

Article 6 (Analytics and Cookies)

1. The Service uses “Google Analytics,” an analytics tool provided by Google LLC, for analyzing usage, improving the Service, investigating defects, and otherwise improving the Service.

2. Google Analytics may use cookies and other identifiers to collect information regarding users’ use of the Service.

3. Information collected by Google Analytics may include viewed pages, usage dates and times, device information, browser information, operation information, regional information, and other information relating to usage status.

4. The Operator does not transmit email addresses, nicknames, chat content, or other information that directly identifies individuals to Google Analytics.

5. Users may refuse or restrict the use of cookies through browser settings.

6. Even if cookies are disabled, users may still use the basic functions of the Service. However, this may affect certain functions, display, retention of settings, or measurement of usage status.

7. Please refer to Google’s Privacy Policy and related explanatory pages for information handling by Google Analytics.

Article 7 (Handling Outside Japan)

1. In connection with the use of AI services, payment services, analytics services, and other external services, user information may be transmitted to, stored in, or processed by businesses or servers located outside Japan.

2. If user consent, provision of information, or other procedures are required by law for the provision of personal data to a third party located in a foreign country, the Operator will take necessary measures in accordance with laws.

Article 8 (Provision to Third Parties)

1. The Operator will not provide personal data to third parties without the prior consent of the user, except in any of the following cases.

(1) Cases based on laws and regulations.

(2) Cases where it is necessary to protect the life, body, or property of a person and it is difficult to obtain the consent of the user.

(3) Cases where it is particularly necessary to improve public health or promote the sound upbringing of children and it is difficult to obtain the consent of the user.

(4) Cases where cooperation is necessary for a national government agency, local public entity, or a person entrusted by them to perform affairs prescribed by law, and obtaining the consent of the user may impede the performance of such affairs.

(5) Cases where the handling of personal information is entrusted in whole or in part to an external service provider to the extent necessary to provide the Service.

(6) Cases where information necessary for payment processing, tax handling, fraud handling, dispute handling, refunds, paid plan management, or other payment-related operations is provided to Stripe or other payment service providers.

(7) Cases where personal information is provided in connection with business succession due to business transfer, merger, company split, or other reasons.

2. In the cases described in the preceding paragraph, the Operator handles personal information to the necessary extent in accordance with laws.

Article 9 (Security Measures)

The Operator endeavors to implement necessary and appropriate security measures for preventing leakage, loss, or damage of personal information and otherwise ensuring the security management of personal information, including access controls, encryption of communications, appropriate management of authentication information, log management, and management of entrusted parties.

Article 10 (Retention Period and Handling Upon Withdrawal)

1. The Operator retains collected information for the period necessary to achieve the purposes of use, or for the period necessary under laws or for business operations.

2. If a user withdraws from the Service, the Operator will delete or anonymize the user’s registration information within a reasonable period, except for information that must be retained under laws or for business operations.

3. Even after withdrawal, payment records, inquiry history, records necessary for preventing unauthorized use, backups, logs, and other information necessary for operation of the Service, legal compliance, dispute resolution, or security management may be retained for a certain period to the necessary extent.

4. Information stored in backups and similar systems is not used for ordinary business purposes and is deleted sequentially as the retention period expires or backups are updated.

Article 11 (Disclosure, Correction, Suspension of Use, etc. of Personal Information)

1. Users may request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, erasure, suspension of third-party provision, and other procedures regarding their own personal information held by the Operator in accordance with laws.

2. When making a request under the preceding paragraph, users shall do so by the method separately specified by the Operator.

3. After confirming that the request is made by the user themselves, the Operator will respond within a reasonable period in accordance with laws.

4. Depending on the content of the request, the Operator may be unable to comply with all or part of the request based on laws.

5. A fee separately specified by the Operator may be required for requests such as disclosure.

Article 12 (Personal Information of Minors)

If a minor uses the Service, the minor shall provide personal information with the consent of a parent or other legal representative.

Article 13 (Changes to the Privacy Policy)

1. The Operator may change this Policy as necessary due to changes in laws, changes to the Service, changes to external services used, or other reasons.

2. When changing this Policy, the Operator shall publicize the changed content and the effective date by posting on the Service or by other appropriate means.

3. The changed Policy shall take effect from the effective date specified in the preceding paragraph.

Article 14 (Language)

1. This Policy is prepared in Japanese as the authoritative version.

2. If translated versions of this Policy are provided, such translated versions are provided for reference purposes for the convenience of users. In the event of any difference, inconsistency, or conflict between the Japanese version and any translated version, the Japanese version of this Policy shall prevail.

Article 15 (Governing Law)

This Policy shall be governed by the laws of Japan and shall be interpreted in accordance with the laws of Japan, regardless of the nationality or place of residence of the user.

Article 16 (Business Information and Contact)

For inquiries, consultations, requests for disclosure, and other matters regarding the handling of personal information by the Operator, please contact the following contact point.

Business Name: Mado no Mukou LLC

Personal Information Contact: Yosuga Chat Support Desk

Contact Email Address: support@yosugachat.com

The Operator’s location and, in the case of a corporation, the name of its representative will be disclosed without delay after necessary confirmation if disclosure is requested in accordance with the Act on the Protection of Personal Information and other laws.

Supplementary Provision

Established on August 30, 2026