Privacy Policy

Introduction

Todor Tech, a sole proprietorship represented by 請求があった場合に遅滞なく開示いたします(the “Company,” “we,” “us,” or “our”), recognizes that appropriately protecting users’ personal information on the AI character chat platform “Turely” (the “Service”) is an important responsibility. This Privacy Policy explains what information we collect and how we use and protect it.

Information We Collect

We may collect the following information in providing the Service.

This information is processed and referenced automatically only to the extent the Service requires; operations staff do not routinely view individual content.

• Account information: email address, display name, profile image
• Usage data: conversation history in AI character chat and standard chat, the characters and models used, and user information extracted from conversations by the memory feature (such as interests and preferences, how you like to be addressed, and relationship context)
• Payment information: Caro purchase history (payment details such as credit card numbers are managed by Stripe, Inc.; we do not hold them)
• Voice data: audio data generated when you use the voice synthesis features
• Technical information: IP address, browser/app type, access timestamps, cookies, and similar data

How We Use Information

We use the collected information for the following purposes.

• Providing and operating the Service
• User authentication and account management
• Processing Caro payments and managing balances
• Providing chat features with AI characters
• Improving service quality and developing new features
• Detecting and preventing fraudulent use
• Providing customer support
• Sending important notices about the Service

Provision to Third Parties

Except as required by law, we do not provide personal information to third parties without your consent. However, we may provide necessary information to the following service providers in order to deliver the Service.

• Apple / Google: for authentication via social sign-in (Sign in with Apple / Google, etc.). ID tokens are verified.
• Stripe, Inc.: for payment processing. Information is managed in accordance with Stripe's privacy policy.
• OpenAI:to provide AI chat features. Chat content is sent to OpenAI’s API.
• Anthropic:to provide AI chat features. Chat content is sent to Anthropic’s API.
• Amazon Web Services (AWS): for cloud infrastructure and data storage.

These third parties process information in accordance with our instructions and do not use it for any other purpose.

Conversation History and the Memory Feature

To provide a continuing relationship with characters and quality responses, the Service retains the two kinds of data below. They are processed and referenced automatically only to the extent the Service requires; operations staff do not routinely view individual conversation content.

• Conversation history: message exchanges in character chat and standard chat. So that you can continue conversations with their past context, history is retained within the Service while your account is active. If you delete an individual conversation or delete your account, it is deleted, including backups, within a reasonable period (normally within 30 days).
• Information extracted by the memory feature: information about you automatically extracted from conversations (for example, hobbies, how you like to be addressed, preferences, and relationship context). It is reflected in character responses in later conversations. You can view and delete it from the settings screen within the Service.

Operations staff view individual conversation content only in limited situations such as the following.

• Investigating fraudulent use or violations of the Terms
• Responding to individual support requests from users
• Investigating the cause of system failures
• Responding to legitimate requests under law or from courts and other public authorities

Use for AI Training

We do not use your conversation history to train our own AI models. Chat content is sent via the APIs of external LLM providers (OpenAI and Anthropic); under both companies’ API terms, this data is not used for model training.

Use of Cookies

The Service uses cookies and similar technologies. We use NextAuth.js for session management, and cookies are set to keep you logged in. You can disable cookies in your browser settings, but some features may become unavailable.

Data Storage and Protection

We store collected personal information under appropriate security measures.

• Protection of data in transit through encrypted communication (TLS/HTTPS)
• Database encryption and appropriate access controls
• Periodic security audits
• Application of the principle of least-privilege access

Personal information is not retained beyond the period necessary to achieve the purposes of use. After account deletion, data is deleted within a reasonable period, except where retention is required by law.

Account Deletion

You can delete your account at any time from the settings screen of the Service’s apps (iOS / Android) or the web. From “Account” in settings, select “Delete account” and confirm through a two-step confirmation. Deletion is irreversible and cannot be undone.

When you delete your account, personal information and user-generated content such as conversation history, memories, settings, social information (follows, likes, blocks), owned Tures, and your Caro balance are deleted. Any remaining Caro balance is forfeited and is not refunded.

However, records of transactions and payments that are subject to statutory retention obligations under tax, accounting, the Act on Specified Commercial Transactions, and other laws (records of charges, purchases, refunds, and creator earnings and payments, etc.) are retained in anonymized form, so that no individual can be identified, only to the extent and for the period required by law. These records are stored in a form not linked to any individual and are used only for accounting and audit purposes.

In addition, email addresses for which delivery failures (bounces) or complaints (spam reports) have been recorded are retained on a suppression list after account deletion, solely to reliably prevent further sending to those addresses. This record contains only the email address and is not used for any purpose other than suppression decisions.

Your Rights

You have the following rights regarding your personal information.

• To request disclosure of the personal information we hold
• To request correction of inaccurate information
• To request deletion of personal information (including account deletion)
• To request suspension of use of personal information

To exercise these rights, please contact us at the address below. We will respond within a reasonable period in accordance with applicable law.

Contact

For inquiries about the handling of personal information, please contact:

Todor Tech
Representative: 請求があった場合に遅滞なく開示いたします
Email: contact@todortech.com

Amendments

We may amend this Privacy Policy in response to changes in law or to the Service. For material changes, we will notify users through announcements on the Service, email notices, or similar means. The amended Privacy Policy takes effect when posted within the Service.

Governing Language

This Privacy Policy is prepared in Japanese, and the Japanese version constitutes the official, governing text. This English version is a reference translation provided for convenience only. In the event of any discrepancy or difference in interpretation between the Japanese version and this English translation, the Japanese version shall prevail.