SPLAI Privacy Policy

This Privacy Policy describes the information we collect and use in connection with your use of SPLAI's services.

By using our service, you agree to the terms of this policy.

We may collect or generate the following information to provide the Service, handle billing, deliver support, maintain security, and improve our features:

• Account registration details, profile information, contact information, and other information necessary for identity verification or support
• Chats, agents, connects, sessions, messages, files, connector settings, and other content created or stored by Users
• Workspace information, memberships, invitations, usage limits, logos, and other information necessary to operate workspaces
• Information necessary for point purchases, billing, payment processing, refunds, or chargeback handling
• Logs, usage history, device and browser information, IP addresses, and other technical information
• Authentication credentials, connected account information, and data exchanged with external services when Users use integration features

We use collected information for the following purposes:

• To create and manage user accounts, authenticate Users, and provide the Service
• To generate AI responses and operate agents, connects, sessions, and related features
• To manage workspaces, memberships, and usage controls
• To process billing, payments, refunds, chargebacks, and accounting operations
• To provide important notices, support, security monitoring, and fraud prevention
• To improve the Service, measure quality, perform aggregated analysis, investigate incidents, and comply with applicable laws

When Users connect Gmail, Google Calendar, or Google Drive to SPLAI, we access Google user data only after the User completes OAuth consent and only as needed to provide user-requested chat features.

• Data accessed: SPLAI may access the connected Google account email address; Gmail message metadata, sender and recipient addresses, subject lines, dates, search results, snippets, and message bodies; Google Calendar event titles, descriptions, time ranges, locations, and status; and Google Drive file or folder metadata, names, MIME types, modified times, sizes, search results, and file text content.
• Use of Google user data: SPLAI uses this data only to answer user-initiated requests in the chat UI, such as searching, reading, summarizing, and generating responses from connected Gmail, Calendar, or Drive data. SPLAI does not send, modify, or delete Gmail messages; create, edit, or delete Google Calendar events; or create, modify, delete, upload, or share Google Drive files.
• Limited use and sharing: SPLAI does not sell Google user data, use it for advertising, retargeting, personalized or interest-based advertising, data-broker services, credit decisions, lending purposes, or generalized AI or machine learning model training. Google user data may be processed by service providers only as needed to provide the requested feature, operate the Service, maintain security, investigate abuse or incidents, or comply with law. Humans are not allowed to read Google user data except with the User's permission, for security or legal reasons, or for aggregated internal operations.
• Protection and deletion: SPLAI protects OAuth credentials and Google user data with access controls and applicable security measures. When a User disconnects a Google connector or deletes their account, SPLAI deletes or disables OAuth credentials and deletes, disables, or anonymizes related Google user data according to Article 6, except where retention is required for security, legal compliance, incident response, fraud prevention, audits, or other legitimate business needs.

As an important policy of SPLAI, information entered into conversations with AI agents and conversation history is not used by us to train AI models.

However, to generate AI responses, produce summaries, execute tools, or carry out other processing requested by Users, prompts, attachments, conversation history, and other necessary data may be transmitted to the AI model provider selected by the User or to connected external service providers.

We may use anonymized or aggregated information to improve service quality, monitor security, and prevent misuse, provided that Google user data and any data derived from it are handled only as described in Article 4 and applicable Google policies.

Information deleted by Users or subject to account deletion is handled in accordance with Article 6, and certain information may continue to be retained when required by law or legitimate business needs.

We retain information only for as long as necessary to fulfill the relevant purpose, and then delete, disable, or anonymize it. Our primary standards are as follows:

• Account basics, profile information, and other User-related information are ordinarily deleted after the deletion process is completed, unless retention is required by law or legitimate business needs.
• Chats, agents, connects, sessions, files, connectors, follow-up records, and other service-managed data are ordinarily deleted in response to User deletion actions or the account deletion process.
• When an account is deleted, workspaces owned by the User may become subject to deletion, and the User will leave workspaces they joined as a member or administrator. This does not include the personal data of other users.
• Information necessary for point purchases, payment processing, billing, tax and accounting obligations, refunds, or chargeback handling may be retained for periods required by law or legitimate business needs.
• Token consumption logs, deletion records, security logs, incident response logs, and other audit-related information may be retained or archived for a certain period for fraud prevention, audits, incident investigation, or legal compliance.
• Backups, disaster recovery copies, and anonymized or aggregated datasets may remain for some time after ordinary deletion processing.

We may use the following third-party services or providers to operate the Service:

We may send or store information with these providers to the extent necessary to provide the Service.

• Payment providers such as Stripe
• AI model providers such as Anthropic, OpenAI, and Google
• External service providers, such as Google, that Users choose to connect through integrations
• Cloud infrastructure, authentication, and storage providers

We may also provide information to third parties when required by law, when we have your consent, or when otherwise permitted under applicable privacy laws.

We implement appropriate security measures to protect your information, including data encryption and unauthorized access prevention.

However, due to the nature of internet-based services, we cannot guarantee complete security of information.

You have the right to request disclosure, correction, or deletion of your personal information.

You may request account deletion from the settings page or contact our support desk to exercise rights available under applicable law.

Once account deletion begins, your access may be restricted or lost, and certain information may continue to be retained as described in Article 6.

This policy may be updated in response to service changes or legal requirements. We will notify you of significant changes through in-service notifications or email.

For questions or requests regarding privacy, please contact us at:

Email: support@splai.jp

This service is not intended to be used by individuals under 18 years of age without the consent of a parent or guardian.

If a person under 18 uses this service, it will be assumed that consent has been obtained from a parent or guardian.

If you are a parent or guardian and believe that your child's personal information has been collected in violation of the law, please contact us. If we learn that we have collected personal information from a child without the legally required parental consent, we will delete that information in accordance with applicable legal requirements.