Umibudo Privacy Policy

Kujirahand (the "Operator") handles information relating to users of the Umibudo outline editor service (the "Service") as described in this Privacy Policy.

1. Scope

• This Policy applies to user information obtained by the Operator in connection with use of the Service.
• Information handled by an external service linked from the Service is governed by that external service's privacy policy.

2. Information We Collect

The Operator may collect the following information to the extent necessary to provide the Service.

• Account information
  • Email address, display name, password hash, and other registration information
  • If the User chooses authentication through Google or Apple, identifiers, email address, display name, and other authentication information supplied by that provider
• User Data
  • Text, outlines, files, settings, and other data created, entered, stored, uploaded, published, or shared by the User
• Usage and technical information
  • IP address, User-Agent, access times, authentication and operation history, error information, cookies, session identifiers, device information, and other information about the usage environment
• Payment and subscription information
  • If paid plans are offered, subscription status, payment results, and information necessary for billing
  • As a rule, credit card numbers and similar payment details are managed by an external payment provider, and the Operator does not retain card numbers themselves.
• Inquiry information
  • The content of inquiries, contact information, and support history

3. Purposes of Use

The Operator uses collected information for the following purposes:

• to provide the Service, verify identity, authenticate Users, and store, synchronize, back up, publish, and share data;
• to manage accounts, paid plans, and payments;
• to respond to inquiries, support requests, and the exercise of data protection rights;
• to investigate failures, maintain and improve quality, and develop new features;
• to prevent misuse, maintain security, and respond to breaches of the Terms of Service;
• to send important notices concerning changes to or suspension of the Service;
• to comply with legal obligations and respond to lawful requests from public authorities; and
• for purposes incidental to those listed above.

If a purpose of use is changed, the change will remain reasonably related to the original purpose and will be notified or published as required by applicable law.

4. User Data and AI Features

• The Operator does not use private User Data for the Operator's own AI training, advertising, or promotion.
• The Operator accesses private User Data only to the extent necessary to provide the Service, respond to failures or security incidents, fulfill a User request, or comply with law.
• Only when the User runs an AI feature, text selected by the User and other necessary information may be sent to the external AI service that provides that feature.
• Because published or shared data may be viewed, stored, or reposted by third parties, Users should verify the selected publication scope themselves.

5. Cookies and Similar Technologies

• The Service uses cookies and similar technologies to maintain login state, authenticate Users, protect security, and save User settings.
• Users may disable cookies in their browser settings, but doing so may prevent some or all of the Service from functioning.

6. Disclosure to Third Parties

The Operator does not disclose personal data to third parties without the individual's consent, except:

• as required or permitted by law;
• where necessary to protect a person's life, body, or property and obtaining consent is difficult;
• where particularly necessary to improve public health or promote the sound growth of children and obtaining consent is difficult;
• where cooperation with a national or local government body carrying out duties prescribed by law is necessary and obtaining consent may impede those duties;
• in connection with a merger, business transfer, or other succession of business; or
• where the disclosure is otherwise not treated as a third-party disclosure, or is permitted without consent, under applicable law.

7. Service Providers

The Operator may entrust the handling of user information to external providers to the extent necessary for hosting, authentication, email delivery, payment processing, AI features, maintenance, and other operations. The Operator appropriately selects and supervises such providers.

8. External Services and International Processing

• The Service may use domestic or overseas external services for authentication, email delivery, payment processing, or AI features.
• Information sent to an external service may be processed or stored on servers outside Japan in accordance with that provider's terms and privacy policy.
• The Operator takes measures required by applicable law when personal data is handled in a foreign country.

9. Security Measures

The Operator takes necessary and appropriate measures to prevent leakage, loss, damage, unauthorized access, and other risks, including access control, appropriate protection of credentials and communications, log review, and backups. Upon request, the Operator will provide information about these measures to the extent that disclosure does not compromise security.

10. Retention and Deletion

• The Operator retains user information for the period necessary to fulfill the purposes of use or as required by law.
• When a User closes their account, the Operator disables login and public URLs, deletes or invalidates credentials, and moves User Data to an area pending deletion. As a rule, User Data is permanently deleted 30 days after account closure, although a different period may apply due to configuration or operational circumstances.
• Information necessary for preventing misuse, legal compliance, dispute resolution, or backups may be retained only for the necessary period.

11. Requests for Access, Correction, or Suspension of Use

In accordance with applicable law, an individual may request notification of purposes of use; access to, correction of, addition to, or deletion of retained personal data; suspension of use; erasure; suspension of third-party disclosure; or access to third-party disclosure records. Please contact the address below. The Operator will verify the requester's identity and respond as required by applicable law.

12. Minors

A minor using the Service must obtain the prior consent of a parent or other legal representative. Persons under 16 years of age may not use the Service.

13. Changes to This Policy

The Operator may change this Policy in response to changes in law or the Service. Material changes will be announced by posting on the Service, by notice to the registered email address, or by another appropriate method.

14. Contact

• Operator: Kujirahand
• Email: web@kujirahand.com
• The Operator's address and other information required to be made available under applicable law will be provided without delay upon a request sent to the contact address above.

• Established and effective: August 5, 2026