Privacy Policy
This English translation is provided for reference only. The Japanese version is the authoritative text.
Last updated: March 13, 2026
zelva ("we") establishes this Privacy Policy regarding the handling of users' personal information in the web services and applications we provide (the "Service").
Article 1 (Personal Information Collected)
We collect the following information in providing the Service:
- Account information: Identifying information such as email addresses, names, and profile images obtained through Google OAuth authentication.
- Payment information: Information processed through payment services such as Stripe when using paid plans (detailed payment information such as credit card numbers is managed directly by the payment processor; we only retain necessary information such as payment status and history).
- Service usage data: Digital content created, entered, uploaded, or saved by users on the Service (text, images, audio data, project files, settings, etc.) and related metadata. Depending on the service or feature specifications, this data may be stored only on the user's device (local storage, etc.) without being sent to our servers, or may be stored in a cloud database.
- Access logs and device information: Information automatically collected and recorded by our hosting infrastructure and systems, including IP addresses, browser types, session information, and identifiers stored in cookies or local storage.
Article 2 (Purpose of Use)
We use the collected personal information for the following purposes:
- To provide, maintain, protect, and improve the Service.
- For user authentication and account management.
- For billing and payment processing of paid plans.
- To respond to user inquiries and provide support.
- To prevent and address violations of our Terms of Service or fraudulent use.
- To notify users of important information such as changes to terms or system maintenance.
Article 3 (Disclosure to Third Parties and International Transfers)
We will not provide personal information to third parties without prior user consent, except in the following cases:
- When required by law.
- When necessary to protect a person's life, body, or property, and obtaining consent is difficult.
- When outsourcing all or part of personal information handling to external service providers to the extent necessary to achieve the purposes of use (including provision to foreign service providers as specified in Article 4).
Article 4 (Use of External Services / Provision to Third Parties in Foreign Countries)
The Service uses external services provided by the following companies (all based in the United States) for functionality and data management, and provides personal information to the extent necessary:
- Authentication: Google OAuth (Google LLC / USA)
- Database and backend: Supabase (Supabase, Inc. / USA)
- Payment processing: Stripe (Stripe, Inc. / USA)
- Hosting and infrastructure: Cloudflare (Cloudflare, Inc. / USA)
If infrastructure services are added or changed in the future, this policy will be updated accordingly.
For inquiries regarding the personal information protection systems of these countries under the guidelines of Japan's Personal Information Protection Commission, please contact us through the inquiry channel listed in this policy.
Article 5 (Security Measures)
We take necessary and appropriate measures to prevent the leakage, loss, or damage of personal information. Data is protected through communication encryption (HTTPS) and other measures, and is strictly managed on highly reliable cloud infrastructure.
Article 6 (Disclosure, Correction, Suspension, Deletion, and Retention Period)
Users may request the disclosure, correction, addition, deletion, or suspension of use of their personal information. We will respond without delay in accordance with applicable laws after verifying the requester's identity.
When the account deletion feature is used, personal information and service usage data associated with the account will generally be deleted from our systems within 30 days. However, backup data automatically retained by cloud infrastructure providers (such as Supabase) for disaster recovery purposes cannot be immediately deleted due to technical specifications, and will be securely stored until the provider's retention period expires, after which it will be automatically deleted.
Article 7 (Use of Cookies and Analytics Tools)
The Service uses cookies and browser local storage for session management and to improve usability. We also use analytics tools such as Cloudflare Web Analytics to understand and improve service usage. These tools collect traffic data but do not include personally identifiable information.
Article 8 (Changes to This Privacy Policy)
We may change this policy as necessary. In the event of significant changes, we will notify users through announcements on the Service or direct notification. The revised privacy policy shall take effect from the time it is posted on this page.
Article 9 (Governing Language)
The authoritative text of this policy is in Japanese. Even if translated versions of this policy are provided, only the Japanese version shall prevail in terms of interpretation and legal effect.
Article 10 (Business Operator and Contact Information)
For questions regarding this policy, inquiries about the handling of personal information, or requests for information about foreign personal information protection systems, please contact us through the following channels:
Business operator: Masashi Yamada
Trade name: zelva
Address: Yamato Bldg 405, 1-6-16 Kanda-Izumicho, Chiyoda-ku, Tokyo 101-0024, Japan
For additional business operator details, please also refer to the following page:
Business operator information: About page
Contact:
Contact form: Contact page
