Privacy Policy
This English version is a reference translation. If there is any discrepancy between this translation and the Japanese version, the Japanese version prevails. kairo Inc. (the "Company") sets out how it handles personal information and related data in Monjiro (the "Service") as follows.
1. Information we collect
In providing the Service, the Company may collect the following information.
- Account registration and contract information: name, company name, email address, information needed for authentication, and information on contracts and billing
- Content and usage information: documents users create and publish, questions submitted on public sites, answers generated by AI, the content of inquiries, and the usage history of these
- Technical information: IP address, browser and device information, access date and time, referrer, identifiers such as cookies, operation logs and error logs
- Information about communications with the Company: the content of inquiries and support
If you enter personal information in questions or documents, that content is also included in the information the Company handles.
2. Purposes of use
The Company uses the information it collects for the following purposes.
- To provide the Service, verify identity, manage accounts, handle contracts and billing, and provide support
- To generate AI answers that refer to documents, analyze the content of questions, and provide the analysis results to document operators
- To prevent misuse, respond to failures and ensure security
- To understand usage and improve the quality and features of the Service
- To communicate important notices and changes to the terms or this Policy
- To fulfill legal obligations and respond to disputes
- To measure the effectiveness of advertising for the Service
3. Handling of published documents and questions
Documents that a document operator has set to be published are shown to readers of the public site. Questions submitted from a public site are used to generate answers and may also be reflected in the question history and analysis results that the document operator can view. Do not enter in the question field any personal or confidential information that you do not want the operator of the public site to know.
Document operators must comply with the laws and regulations applicable to them regarding the information they publish and the information they obtain from people who ask questions. Where the Company processes information on behalf of a document operator, the roles and responsibilities are governed by a separately concluded agreement or similar arrangement.
4. Outsourcing to external services
To the extent necessary to provide the Service, the Company may entrust the handling of information to providers of cloud infrastructure, authentication, payment, analytics, AI models and similar services. For AI answers and analysis, the Company may send questions and the content of related documents to AI services. The Company selects such contractors appropriately and supervises them as necessary.
The following AI service is used to generate AI answers.
| Item | Details |
|---|---|
| Provider | OpenAI, L.L.C. (OpenAI API) |
| Information sent | The content of the question, earlier questions and answers in the same chat, and the content of documents needed for the answer |
| Country | United States of America |
| Use for training | Under OpenAI's published policy, information sent through the API is not used to train AI models. |
| Retention period | Under OpenAI's published policy, it is retained for up to 30 days for purposes such as abuse monitoring and then deleted (unless retention is required by law). |
The Company entrusts the handling of information to OpenAI after confirming that OpenAI has established a system for the proper handling of personal information. For the personal information protection system of the United States, see the Personal Information Protection Commission's website (in Japanese).
For organizations using BYOK (a method that uses the API key of an AI service registered by the user), questions and the content of related documents are sent to the AI service chosen by the user (Anthropic, OpenAI or Google) with the user's API key. In this case, the handling of information is governed by the terms between the provider of that AI service and the user.
5. Provision to third parties
The Company does not provide personal data to third parties except where required by law, with the consent of the individual, or as otherwise permitted by law. Regarding the provision of question history and analysis results to document operators described in Section 3, the Company will confirm what is actually displayed and whether consent needs to be obtained, and will explain it clearly within the Service as well.
6. Cookies and similar technologies
The Company may use cookies and similar technologies to keep you signed in, ensure security, analyze usage and so on. You can disable cookies in your browser settings, but some features of the Service may then become unavailable.
To analyze the use of the Service's website (monjiro.io) and application (app.monjiro.io) and to measure the effectiveness of advertising for the Service, the Company uses Google Analytics and Google Ads provided by Google LLC. These services use cookies and similar technologies to send the following information to Google LLC.
| Item | Details |
|---|---|
| Recipient | Google LLC (Google Analytics, Google Ads) |
| Information sent | URLs of pages viewed, referrer, access date and time, browser and device information, IP address, identifiers such as cookies, information about ad clicks, and completion of account registration and its method (email address or an external service account) |
| Information not sent | Account information such as email address and name, document content, and AI chat questions and answers |
| Purpose of use | Analyzing and improving the use of the Service, and measuring the effectiveness of advertising for the Service |
| Country | United States of America |
For how Google handles information, see How Google uses information from sites or apps that use our services. You can stop Google Analytics from sending information with the Google Analytics Opt-out Browser Add-on. You can change Google Ads personalization settings in My Ad Center.
The handling of information by analytics tools (such as Google Analytics) that a document operator sets up on a public site is governed by that document operator's own policies.
7. Retention period and security management
The Company retains the information it collects for the period necessary to achieve the purposes of use or the period required by law, and deletes or anonymizes information that is no longer needed by appropriate methods. Information after leaving the Service (deleting the organization) is handled as follows.
- The organization's documents, files such as images, question and answer history, and members' account information: kept in a state where they cannot be viewed for 30 days after leaving, then erased. During this retention period, leaving may be canceled upon inquiry.
- Previous versions of erased files: erased within 7 days of erasure.
- Database backups: kept for 7 days for recovery from failures. Erased information may also be included in backups during this period. Backups are not used for any purpose other than recovery from failures.
- Access logs and error logs: kept for 30 days, then erased.
- Records of contracts and billing: kept by the payment provider (Stripe) and the Company for the period required by law.
The Company takes security management measures appropriate to how information is handled, such as restricting access to information, encrypting communications and managing contractors.
8. Requests for disclosure and other actions
Individuals may, in accordance with the law, request notification of the purposes of use, disclosure, correction, addition, deletion, suspension of use, erasure, or suspension of provision to third parties of their personal data held by the Company. To make a request, contact the contact point in Section 10. The Company will verify your identity and respond in accordance with the law.
9. Changes to this Policy
The Company may change this Policy in response to changes in laws, changes to the Service and so on. The changed content will be posted on the Service, and where required by law, the Company will separately notify you or obtain your consent.
10. Company information and contact
- Company name: kairo Inc.
- Representative: Yusuke Suwa
- Address: Kuwano Building 2F, 6-23-4 Jingumae, Shibuya-ku, Tokyo, Japan
- Contact: support@kairotech.jp
- Established: October 1, 2026