Privacy Policy
This policy describes how the operator of KOTORI (a multilingual translation bot on LINE and related web/admin pages) collects, uses, shares, and manages information about users.
1. Scope
This policy applies to information handled in connection with the services we provide.
2. Information We Collect
-
LINE account information
- LINE user ID
- Display name / nickname
- Group ID, talk room ID, and member composition details
-
Messages and conversation history
- Content of text messages sent/received in groups where the bot participates
- User ID and display name of senders
- Message timestamp and message ID
- Translated text
-
Language and usage settings
- Preferred language settings per user and group
- Plan type (Free / Pro, etc.)
- Change history of settings
-
Payments and billing
- Payment information provided by processors such as Stripe (subscription ID, charged amount, payment status, etc.)
- We do not store sensitive card numbers ourselves; they are managed by the payment processor.
-
Technical and log data
- IP address, browser information, device information, request time, error logs, etc.
- Information obtained via cookies or similar technologies when using the website
3. Purposes of Use
Information is used only for the purposes below and not for other purposes.
The group representative who introduces this service guarantees that all members of the group have agreed in advance to the collection, storage, and sending of conversation data to external AI models.
-
Provide and operate the service
- Generate and return translations based on message content
- Deliver context-aware translations
- Translate into languages configured for each user or group
-
Maintenance and quality improvement
- Log analysis for translation quality, response speed improvement, incident handling, and bug fixes
- Statistical analysis in a non-identifiable form
-
Billing, payments, and fraud prevention
- Process subscriptions via Stripe or similar
- Manage plan status and billing information
- Monitor and prevent misuse and fraudulent payments
-
Support and inquiries
- Respond to user inquiries
- Verify identity and usage as needed
-
Legal compliance and dispute handling
- Comply with laws and guidelines
- Handle claims or disputes related to rights infringement, etc.
4. Sending Conversation Data to External AI
- We send target messages and portions of recent conversation history to AI models (e.g., Google Gemini) for translation processing.
- Data may include user IDs, display names, message content, target languages, and related context.
- We strive to prevent reuse for training where available, but final handling follows each AI provider’s policy.
- The representative guarantees group members have consented to this transmission.
5. Retention Period
-
Messages and conversation history
- May be stored long term unless deletion is requested.
- May be deleted or anonymized at our discretion for operational reasons.
-
Language settings and account data
- Stored during use and deleted or anonymized after the service ends and a certain period passes.
-
Billing information
- Kept for periods required by law and accounting rules, then deleted or anonymized appropriately.
6. Third-Party Provision
We do not provide personal data to third parties except in the cases below:
- With user consent
- As required by law
- When necessary to protect life, body, or property and consent is difficult
- When particularly necessary for public health or child development and consent is difficult
- When cooperation with government or local authorities is necessary and obtaining consent is difficult
7. Outsourcing
We may entrust part or all of processing to external vendors for service operation, payments, and storage, including:
- Database and infrastructure providers
- Payment processors
- AI model providers
- Log collection, analytics, and monitoring services
Vendors handle data only under our instructions and with appropriate safeguards.
8. Cross-Border Transfers
Servers, databases, AI models, or payment platforms may be located outside Japan, so data may be transferred abroad. We take appropriate safeguards in line with applicable laws.
9. Security Measures
- Access control limiting staff to the minimum necessary
- Proper management of passwords and API keys (e.g., environment variables or secret managers)
- Encrypted communication (HTTPS/TLS)
- Monitoring of login attempts and error logs
- Deletion or anonymization of data after service termination
10. User Rights
Within the bounds of law, users may request:
- Disclosure of their personal data
- Correction, addition, or deletion if inaccurate
- Suspension or erasure of use
- Suspension of provision to third parties
Contact the help desk below for requests. If we cannot comply under law, we will explain the reason.
11. Minors
Minors must use the service with consent from a guardian. If we learn a user is a minor, we may confirm consent or impose restrictions as needed.
12. Changes to this Policy
We may update this policy when necessary. Important changes will be announced on the service or via LINE notices. Updated policies apply from the time they are posted.
13. Contact
- Operator: Iwasa Digital
- Email: contact@iwasadigital.com