Draft - Last Updated: January 27, 2026

Privacy Policy

1. Introduction

This Privacy Policy describes how AICU Japan K.K. ("we", "us", or "our") collects, uses, and shares information about you when you use the AICU API Platform ("Service").

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• GitHub account information (if using GitHub OAuth)
• Avatar URL

2.2 Usage Information

We automatically collect information about your use of the Service:

• API requests (endpoints, parameters, timestamps)
• Generated content metadata (duration, cache status)
• IP addresses
• Error logs

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information. We receive from Stripe:

• Transaction history
• Subscription status
• Billing address (for invoicing)

2.4 Content You Create

We process and may cache:

• Text input for TTS generation
• Generated audio files
• Other content you upload or create

3. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Process payments and manage subscriptions
• Send service-related communications
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Respond to law enforcement requests

4. Content Caching

Generated content may be cached on our servers (Cloudflare R2) to improve performance and reduce costs. Cached content:

• Is associated with your account
• May be served to subsequent identical requests
• Is retained until you delete it or your account is terminated

5. Information Sharing

We may share your information with:

5.1 Service Providers

• Cloudflare - CDN, storage, security
• Stripe - Payment processing
• Vercel - Hosting
• fal.ai / RunPod - GPU processing (TTS)
• OpenRouter - LLM API aggregation (for LLM services)
• Groq / Together AI - LLM inference (for LLM services)

When you use our LLM API services, your prompts and generated responses may be processed by third-party inference providers. These providers have their own privacy policies and data handling practices. We recommend reviewing:

• OpenRouter Privacy Policy
• Groq Privacy Policy

5.2 Law Enforcement

We may disclose your information to law enforcement agencies when:

• Required by law (court orders, subpoenas)
• To prevent imminent harm
• To investigate violations of our Terms of Service

5.3 CSAM Reporting

If Child Sexual Abuse Material (CSAM) is detected on the Service, we are required to report it to:

• National Center for Missing & Exploited Children (NCMEC)
• Internet Hotline Center (IHC) in Japan
• Local law enforcement as required

6. Data Retention

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (with some exceptions)
• Export your data
• Object to processing

To exercise these rights, contact us at the address below.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS)
• Encryption at rest (where applicable)
• API key hashing (SHA-256)
• Access controls and audit logs

9. International Data Transfers

Your data may be processed in countries outside your jurisdiction, including Japan and the United States (for Cloudflare and Stripe). We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

The Service is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.

12. Contact Information

AICU Japan K.K.

• Privacy Inquiries: https://corp.aicu.ai/ja/contact
• Email: privacy@aicu.ai

Qualified Invoice Issuer Registration Number: T5010401186408

This is a draft version. The final version will be published after legal review.