Privacy Policy

1. Introduction

KuchiKomi AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our review management platform and services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

2. Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use our service:

Personal Information

• Name and email address
• Business name and contact information
• Account credentials (password is stored encrypted)
• Payment information (processed by Stripe)
• Google Business Profile data (when connected)

Automatically Collected Information

• IP address and browser information
• Device type and operating system
• Usage data and interaction patterns
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and maintaining our service
• Processing your subscription and payments
• Generating AI-powered review responses
• Fetching and displaying your Google reviews
• Sending service-related notifications
• Improving our service and developing new features
• Responding to your inquiries and support requests
• Complying with legal obligations

4. Data Sharing

We may share your information with third parties in the following situations:

• Service Providers: Stripe for payment processing, Anthropic for AI services
• Google: To access your Google Business Profile data
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger or acquisition

We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements

Upon account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of sensitive data in transit and at rest
• Secure password hashing using bcrypt
• Regular security audits and updates
• Access controls and authentication measures
• Secure token storage for third-party integrations

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Data Portability: Request transfer of your data
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent at any time

To exercise these rights, please contact us at privacy@kuchikomi-ai.com.

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for service functionality
• Authentication Cookies: To keep you logged in
• Analytics Cookies: To understand service usage
• Preference Cookies: To remember your settings

For more information, please see our Cookie Policy.

9. Third-Party Services

Our service integrates with the following third-party services:

• Google: For Google Business Profile integration
• Anthropic (Claude AI): For AI-powered response generation
• Stripe: For secure payment processing

These services have their own privacy policies, and we encourage you to review them.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Japan. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Data processing agreements with service providers
• Compliance with applicable data protection laws

11. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through the service. Your continued use of the service after such modifications constitutes your acceptance of the updated policy.