HITO Privacy Policy

For account registration, authentication, and the operation of "HITO" (the "Service"), we collect only the minimum necessary information. For the secure storage and management of data, we utilize external platform services and store data with industry-standard encryption.

Account Information: Email address, nickname, and password. (Processed and secured via Supabase, Inc.)

Payment-Related Information: Name on the credit card, card information, and billing details. Note: This information is collected, processed, and managed directly by our third-party payment processor, Stripe, Inc. The Operator (GritVib, represented by Sara Azuma; collectively, the "Operator") may view registered names and email addresses through Stripe's dashboard for management purposes, but this data is never stored on the Service's primary servers or within Supabase.

Service Usage Information: Chat messages and inquiry content.

The Service is a platform designed for real human beings to converse while preserving anonymity. In day-to-day chat support, only the User's chosen nickname is displayed on screens used by the Operator (including team members in charge); payment information on Stripe (such as real names or credit card billing names) is not visible during regular chat operations.

Except where operationally necessary—such as subscription management, identity verification, or when responding to a direct inquiry regarding payments—the Operator does not cross-reference or view payment information together with chat accounts.

Users must not include personally identifiable information (PII) in chat messages, including real names, physical addresses, phone numbers, employers, or social media account names. If such information is posted, the Operator reserves the right to delete the relevant message without prior notice to protect User privacy.

Collected information is used strictly for the following limited purposes:

Provision and operation of the Service (account management and secure login authentication).

Processing and management of subscription payments, and identity verification.

Responding to inquiries regarding payments and sending critical operational notices.

Except as required by applicable law, the Service does not provide personal information to third parties without the User's explicit consent. To ensure smooth operation and payment processing, we entrust information processing to the following trusted external services:

Payment Processing: Stripe, Inc. (United States) – For monthly subscription billing management.

Data Storage and Authentication: Supabase, Inc. (United States) – For account authentication and secure storage of encrypted chat data.

International Data Transfers: By using the Service, Users acknowledge and agree that their personal information may be transferred to, stored, and processed in jurisdictions outside their country of residence, including Japan and the United States. The Operator ensures that all such transfers comply with applicable data protection laws through secure transfer mechanisms.

The Service may use cookies, local storage, or similar technologies solely for essential technical functions, such as maintaining User login sessions and authentication states. We do not use these technologies for behavioral advertising or third-party tracking.

Chat information obtained through the Service is strictly NOT used for AI (artificial intelligence) or machine learning in any form. However, to deliver deeper and more empathetic communication, it is learned and understood more deeply by the Operator as a human being.

Data Deletion: Chat messages may be completely and permanently deleted at any time by the User's own action within the interface. The Operator does not permanently back up or retain past chat logs once deleted.

Account Termination: When an account is canceled or deleted, registered information such as the email address is promptly and securely discarded from active databases.

Your Legal Rights: Depending on your jurisdiction (such as the EU/EEA under GDPR or various US state laws), you may have the right to access, correct, restrict, or request the deletion of your personal data. To exercise any of these rights, please contact us using the information provided below.

For inquiries regarding this Privacy Policy or the handling of personal information, please contact the Operator via the inquiry form within the Service.

Operator Name: GritVib (Representative: Sara Azuma)

Address: 2F-C Shibuya Dogenzaka Tokyu Bldg., 1-10-8 Dogenzaka, Shibuya-ku, Tokyo, 150-0043, Japan

This Privacy Policy may be revised as needed to reflect changes in legal requirements or operational practices. Revised content becomes effective immediately upon being posted on the Service.