IGNITE0 Privacy Policy

1. Information We Collect

The Company may collect the following information to provide and improve the Service:

(1) Information provided by users

• Account information such as name, email address, and username
• Profile information
• Inquiry details and support history

(2) Payment and refund information

• Plan, subscription status, and billing history
• Payment and refund transaction identifiers, amounts, currencies, and statuses

Payment method details, such as full credit card numbers, are processed by the payment processor and are not retained by the Company.

(3) Google authentication information

• Google account identifier, name, email address, and profile image
• Email verification status
• OAuth access tokens, refresh tokens, ID tokens, authorized scopes, and expiration times

The Company does not obtain or retain Google account passwords.

(4) Information automatically collected during use

• IP address, access date/time, and device type
• Browser information and usage logs
• Information collected via cookies and similar technologies

Within the Service, the Company may collect the above information regardless of whether it was explicitly provided by users or obtained through usage logs and access data.

2. Purpose of Use

The Company uses collected information for the following purposes:

1. Provision and operation of the Service
2. Usage analysis and service improvement
3. Customer support
4. Development of new features and services
5. Legal compliance and fraud prevention
6. Billing, subscription management, and refund processing
7. Registration, sign-in, identity verification, and sign-in method linking through Google authentication
8. OAuth token management and revocation, and account security

For these purposes, data may be anonymized and aggregated.

3. Data Handling Based on User Consent

Only when users provide explicit consent, the Company may use individual generated content and input data for service improvement and AI model training. Consent can be withdrawn at any time, and after withdrawal, the Company will stop using relevant data for training purposes.

When prompts or generated content include information that can identify specific individuals (personal information), user consent may be required depending on the handling context.

4. Collection of Information via Cookies, etc.

The Service uses cookies and similar technologies to analyze user settings and service usage. Cookies enable analysis such as visit frequency and visitor counts.

Users may refuse cookies through browser settings; however, some features of the Service may not function properly in that case.

5. Third-Party Provision

The Company does not provide users' personal information to third parties except in the following cases:

• With user consent
• When disclosure is required by law
• When disclosure to contractors is necessary within the scope of fulfilling the stated purpose (contractors are required to implement data protection measures equivalent to the Company's)

Google user data

The Company uses information received from Google APIs only as necessary for authentication, account management, security, and features requested by users. The Company does not use this information for advertising, sell it, or use it for unrelated purposes.

Ignite0's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Information Management and Retention

The Company implements reasonable security measures to properly manage user information. The Company also implements necessary technical and organizational measures against risks such as unauthorized access, leakage, and tampering.

While deletion is scheduled, the account remains available until its paid period ends. After deactivation, the Company generally retains account information and related data scheduled for deletion for 30 days and then permanently deletes it. During this period, the data is handled only as necessary for deletion, security, and support. If only the User is deleted while an Organization is retained, shared data stored in that Organization may be retained.

Notwithstanding the 30-day retention period, the Company may retain payment and refund records for the period necessary to comply with legal obligations, perform accounting and refund processing, prevent fraud, and resolve disputes. These records will not be used beyond what is necessary for those purposes.

Google authentication information is retained only as necessary for authentication and security while the Google account is linked to the Ignite0 account. When the Company deactivates an account with a deletion reservation, it revokes stored Google OAuth tokens. Related authentication information is generally deleted when permanent deletion occurs 30 days after deactivation.

Revoking Ignite0's access through Google does not delete the Ignite0 account and may make Google sign-in unavailable.

7. User Rights

Users have the following rights regarding their information:

• Request for disclosure
• Request for correction
• Request for suspension of use or deletion

Upon such requests, the Company will respond within a reasonable scope.

8. International Data Transfer

The Service is provided in Japan; however, information may be processed on overseas servers in the future. In such cases, the Company will comply with applicable data protection laws and implement appropriate safeguards.

9. Changes to this Policy

The Company may revise this Policy from time to time in response to legal amendments and changes in business operations. Users will be notified by posting the updated Policy within the Service.

10. Contact

For inquiries regarding this Policy, please contact: