Privacy Policy

When users register, the Company may ask for name, email address, phone number, and company name. The Company may also collect payment-related information from payment processors and other contractors.

The Service uses YouTube API Services. When you use the Service, Google's Privacy Policy (https://policies.google.com/privacy) also applies.

For YouTube connection features, the Company handles the following data through YouTube API Services:

1. Access to YouTube channels that the user authorizes via OAuth (retrieving channel information)
2. Sending videos created or uploaded by the user, together with title, description, and privacy status (public / unlisted / private) and other metadata to YouTube via the YouTube API
3. Retrieving channel statistics such as YouTube Analytics data to provide analytics in the Service

This information is used only to provide post management, scheduled publishing, and analytics reports. The Company does not use this data for purposes unrelated to YouTube. Information obtained through YouTube API Services is used in accordance with Google's Limited Use requirements and only for post management, scheduled publishing, and analytics reports in the Service. If the user disconnects YouTube from the Service, the Company will delete related data obtained through the connection within 30 days of disconnection.

For Instagram, Facebook Page cross-posting, X, and TikTok, the Company handles data only within the permissions shown at connection time. We do not sell this data to unauthorized third parties or use it for advertising delivery.

1. Instagram: basic information of a Business or Creator account, publishing finished posts, and retrieving insights (such as reach)
2. Facebook Page cross-posting: page identifiers (page name, Page ID, and similar) and sending post content so an Instagram post can also be published to the linked Page
3. X: creating posts and retrieving organic metrics
4. TikTok: publishing finished videos or photos and retrieving follower and video metrics

In connection with the Service's AI video editing features, materials such as videos, audio, and images uploaded by users, as well as scripts, chat content, editing information, and other information related to those features may be transmitted to or processed by external AI service providers, including Google LLC and other providers that perform processing such as large language models, video analysis, and speech synthesis (collectively, "AI Providers"). The Company uses paid tiers of the Gemini API, OpenAI API, Claude API, and similar services, and requires contractual terms that user input not be used for training by the Company or AI Providers. Actual handling by AI Providers is as set forth in Article 2 of the Terms of Use and each provider's terms.

The Company handles such information within the scope necessary to provide and operate the Service. Except where disclosure is required under the Act on the Protection of Personal Information or other laws, the Company will not disclose personal information to third parties (except where the handling of all or part of personal information is entrusted to the extent necessary to achieve the purpose of use). See Article 2-2 for retention periods.

The Service may use cookies or similar technologies on the user's device or browser to collect and store information for the following purposes:

1. User authentication and session management
2. Analyzing and improving use of the Service
3. Saving user settings

Users may restrict or disable cookies in their browser settings. Some features of the Service may then become unavailable.

To request deletion of data collected by the Service, follow Data Deletion. In summary:

1. Deletion in the Service
   1. Sign in to the Service
   2. Open SNS settings and disconnect accounts
   3. Delete the account or a project, or send a deletion request to the contact on the Data Deletion page
2. Revoke the Service's access in Google Security settings (https://security.google.com/settings/security/permissions)
   1. Sign in to your Google Account
   2. Open Security settings
   3. Find Third-party apps and services
   4. Select the Service (Mawaru) and revoke access

After these steps, data collected by the Service will be deleted and Google Account access will be revoked. Content already published or shared with other users may require a separate deletion request.

1. Account information (name, email address, phone number, company name, etc.): 180 days after withdrawal
2. Post drafts and content created through the Service: 180 days after withdrawal
3. SNS connection tokens (OAuth, etc.): revoked and deleted immediately upon disconnection or withdrawal
4. Analytics snapshots and similar usage data: 180 days after withdrawal
5. Inquiry and email correspondence records: 180 days after withdrawal
6. Payment-related information: 7 years after contract termination (as required by law for record keeping)

• Firebase (Google LLC): authentication and database infrastructure
• Stripe (Stripe, Inc.): payment processing
• SendGrid (Twilio Inc.): email delivery
• Gemini API (Google LLC), OpenAI API (OpenAI, L.L.C.), Claude API (Anthropic, PBC): AI features (paid tiers)
• SNS platform APIs (Meta, YouTube, X, TikTok, etc.): SNS connection features

Many of these contractors are located outside Japan or handle personal information on servers outside Japan. See also the Subprocessors page for AI-related contractors.

1. To provide and operate the Company's services (including publishing and scheduling posts to SNS, displaying analytics, AI image generation, AI video editing-related features, and other AI-powered features)
2. To respond to user inquiries (including identity verification)
3. To send emails about new features, updates, campaigns of the service in use, and information about other services provided by the Company
4. To contact users when necessary for maintenance and important notices
5. To identify users who violate the Terms of Use or attempt to use the service for improper or unfair purposes, and to deny their use
6. For purposes incidental to the above purposes

1. The Company may change the purpose of using personal information only if the changed purpose is reasonably related to the original purpose.
2. If the purpose is changed, the Company will notify the user by its prescribed method or publish the changed purpose on this website.

1. The Company will not provide personal information to a third party without the user's prior consent, except as permitted by the Act on the Protection of Personal Information or other laws, or in the following cases:
   1. When necessary to protect a person's life, body, or property, and it is difficult to obtain the person's consent
   2. When especially necessary to improve public health or promote the sound upbringing of children, and it is difficult to obtain the person's consent
   3. When necessary to cooperate with a national or local government body, or a person entrusted by such a body, in performing duties prescribed by law, and obtaining consent would impede those duties
   4. When the Company has announced or published the following in advance and has filed a notification with the Personal Information Protection Commission:
      1. That the purpose of use includes provision to third parties
      2. The items of data provided to third parties
      3. The means or method of provision
      4. That provision to third parties will stop upon the person's request
      5. How to accept such a request
2. Notwithstanding the preceding paragraph, the recipient is not treated as a third party in the following cases:
   1. When the Company entrusts all or part of the handling of personal information within the scope necessary to achieve the purpose of use
   2. When personal information is provided in connection with a merger or other business succession
   3. When personal information is jointly used with a specified party, and the Company has notified the person in advance, or placed the person in a position to easily know, of that fact, the items of personal information jointly used, the scope of joint users, the purpose of use, and the name of the person responsible for management

1. When the Company receives a request for disclosure of personal information from the person, the Company will disclose it without delay. However, the Company may withhold all or part of the disclosure in any of the following cases, and will notify the person of that decision without delay. A fee of 1,000 yen per request applies to disclosure of copies of personal information. This fee does not apply to deletion requests such as account withdrawal or account deletion; deletion requests are accepted free of charge.
   1. When disclosure may harm the life, body, property, or other rights or interests of the person or a third party
   2. When disclosure may significantly impede the proper conduct of the Company's business
   3. When disclosure would violate laws or regulations
2. Notwithstanding the preceding paragraph, the Company will in principle not disclose information that is not personal information, such as history or characteristic information.

1. If a user believes that personal information held by the Company is incorrect, the user may request correction, addition, or deletion (hereinafter "correction, etc.") through the Company's prescribed procedures.
2. If the Company determines that it must respond to the request, it will make the correction, etc. without delay.
3. The Company will notify the user without delay after making the correction, etc., or after deciding not to do so.

1. If the person requests suspension or deletion of use (hereinafter "suspension, etc.") on the grounds that personal information is being handled beyond the purpose of use or was obtained by improper means, the Company will promptly conduct the necessary investigation.
2. If the Company determines that it must respond, it will carry out the suspension, etc. without delay.
3. The Company will notify the user without delay after carrying out the suspension, etc., or after deciding not to do so.
4. Notwithstanding the preceding two paragraphs, if suspension, etc. would involve excessive cost or is otherwise difficult, and the Company can take alternative measures necessary to protect the user's rights and interests, the Company will take those alternative measures.

1. The content of this Policy may be changed except where otherwise provided by law.
2. If the Company makes a change that materially affects users' interests, the Company will notify users by posting on this website or by other methods prescribed by the Company no later than one week before the effective date. Minor changes take effect upon posting only.

• Address: Tokyo, Japan [registered address to be confirmed]
• Company: [New company name]
• Representative Director: [Representative name]
• Email: privacy@mawaru-sns.jp

See Data Deletion for deletion steps and Terms of Use for conditions of use.