Privacy Policy

Last updated: 2026-06-11

This English translation is provided for reference purposes only. In the event of any discrepancy, the Japanese version shall prevail.

1. Data controller

• Business operator: Utakata-SciFi Co., Ltd. (株式会社Utakata-SciFi)
• Representative: Kaoru Nozue, Representative Director
• Address: 3F d_ll Tsukuba, 2-4-1 Azuma, Tsukuba-shi, Ibaraki, Japan
• Contact: contact@utakata-scifi.com

2. Personal data we collect

• Account information (email address, display name)
• Payment information (via Stripe; card numbers never reach our servers)
• API usage logs (key prefix, request time, IP address, user-agent, target model ID)
• Download logs
• Personally related information (session tokens, dashboard UI interaction events)

3. Purposes of use

Service provision / authentication / billing / fraud and abuse detection / statistical analysis for quality improvement / important service notifications / responses required by law.

4. Third-party provision / cross-border transfers

We entrust personal data to the following global providers:

• Cloudflare, Inc. (USA) — Workers / R2 / KV / Pages / Access
• Stripe, Inc. (USA) — payment processing and Customer Portal
• Sentry / PostHog (to be added in later phases)

5. Security measures

• TLS 1.3 in transit; API keys stored as SHA-256 hashes
• Admin routes protected by Cloudflare Access
• Audit logs kept append-only in Cloudflare KV

6. Cookies / tracking

Authentication session token only (httpOnly + SameSite=Lax). No advertising trackers.

7. Disclosure requests

We respond within 30 days after identity verification. Contact: contact@utakata-scifi.com