AI Tools Hub
Legal

Privacy policy

Last updated:

1. What we collect

This site may collect the following.

  • Information you enter when contacting us, requesting a document or subscribing to the newsletter: name, company, email address, the tools you are evaluating, and similar
  • Information gathered by analytics tools such as Google Analytics: IP address, browser type, referring URL, pages viewed and time on page
  • Anonymous identifiers and user preferences stored in cookies

2. How we use it

  • Answering enquiries and sending requested documents or the newsletter
  • Providing services such as tool-selection advice and proof-of-concept support
  • Analysing usage to improve the site and build new features
  • Preventing abuse and spam

3. Disclosure to third parties

We do not disclose personal data to third parties without your consent, except in the following cases.

  • Where required by law, such as a formal request from police or a court
  • Where necessary to protect someone's life, body or property and obtaining consent is not practical
  • Where, on a business enquiry or document request form, you have explicitly ticked the optional box consenting to be introduced to partner vendors — see our ad disclosure

4. Cookies and analytics

To improve the experience and understand usage, this site transmits data to the following external services. (In Japan this disclosure is required by the external-transmission rules under Article 27-12 of the Telecommunications Business Act.)

  • Google Analytics 4 (recipient: Google LLC, United States) — sends page URL, referrer and browser information with an anonymous identifier. Purpose: traffic analysis and site improvement.
  • Microsoft Clarity (recipient: Microsoft Corporation, United States) — sends scroll and click positions with an anonymous identifier. Purpose: improving the user experience.

Neither includes information that identifies you, and we do not link this data to an individual ourselves. You can disable cookies in your browser, though some functionality will stop working. See the cookie policy for details.

5. Processors, including recipients outside Japan

We entrust the handling of personal data to the processors below, to the extent necessary to achieve the purposes above. Each maintains appropriate safeguards, and we are responsible for selecting them and supervising how they handle the data.

  • Vercel Inc. (United States): hosting and delivery. Processing is primarily in US regions, under Vercel's privacy policy and DPA.
  • Supabase Inc. (United States): database. Stores form submissions including enquiries and lead information. Processing is primarily in US regions.
  • Resend Inc. (United States): email delivery, used for replies and the newsletter.
  • Google LLC (United States): Google Analytics.
  • Microsoft Corporation (United States): Microsoft Clarity, for heatmaps and session analysis.

By submitting a form or otherwise using this site, you are taken to consent to the provision of personal data to these processors, including recipients located outside Japan. If you do not consent, please do not use the forms.

6. Security measures

To prevent loss, damage or leakage of personal data we apply the following measures.

  • Encryption in transit (HTTPS / TLS)
  • Database access restricted to the minimum necessary (service role only)
  • API keys and credentials held as environment variables
  • Periodic review of processor selection and contract terms
  • Controls against unauthorised access and attack (CSP, CORS, rate limiting, WAF-equivalent configuration)

7. Retention

We keep personal data only for as long as needed to achieve the stated purpose. Records relating to enquiries are kept for three years as a rule, and newsletter data is deleted promptly after you unsubscribe.

8. Disclosure, correction and deletion

On request from the person concerned, we will disclose, correct, suspend the use of, or delete retained personal data. Contact us through the form below; we may ask for information to verify your identity.

9. Revisions

We may revise this policy to reflect changes in law or in the service. Material changes are announced at the top of this page.

10. The operator

  • Operated as a sole proprietorship in Japan. The operator's name, address and the person responsible for personal data protection are disclosed without delay on lawful request.
  • The Japanese edition carries the statutory business disclosure required under the Act on Specified Commercial Transactions.

11. Contact

Questions about personal data can be sent through our contact form.