Privacy Policy

DencyuSystems ("we", "us") sets out below how information about users is handled in the review web service "Relaynote" (https://relaynote.dev , the "Service"). This is our Privacy Policy (the "Policy").

1. Who we are

• Provider: DencyuSystems (sole proprietor, 田中匠美)
• Person responsible for handling personal information: 田中匠美
• Contact: support@dencyu-systems.com

Our address and telephone number will be disclosed without delay upon request.

2. Information we collect

2.1 Account information

When you sign in with a Google account or a GitHub account, we receive from that provider your name (display name), email address, profile image (avatar) and account identifier. We do not receive your password.

2.2 Content you record

The body of reports recorded in a Session, images such as screenshots, form and table entries, comments, records of approval and change-request decisions, and their timestamps. This content is recorded by you, by an AI client you have connected, or by a person to whom you have given a share link.

2.3 Connection information

Registration details of AI clients connected to the Service (client name, identifier, granted permissions, last used date), and API keys you issue. API keys are stored hashed; they are shown once at issue, after which not even we can read them.

2.4 Notification settings

The URLs and display names of the notification destinations you register.

2.5 Billing information

If you subscribe to a paid plan, the customer ID, subscription ID, subscription status and current period end issued by Stripe, Inc. Credit card numbers and other card details are never sent to us and we do not store them.

2.6 Access logs

Access to the Service is logged, including IP address, user agent, timestamp and the requested path.

3. Purposes of use

1. Providing the Service, displaying it, and delivering Sessions via share links
2. Identifying you and maintaining your signed-in state
3. Sending you notifications, including delivery to the notification destinations you register
4. Payment, billing and subscription management for paid plans
5. Detecting and preventing misuse, and investigating and responding to faults and defects
6. Responding to your enquiries
7. Complying with legal obligations

We do not use the information we collect for advertising or for profiling users.

4. Use of Google user data

When you sign in with a Google account, the Service requests the openid, email and profile scopes and receives your name (display name), email address and profile image.

• This information is used only to identify you, to maintain your signed-in state, and to display you within the Service.
• We never use information obtained from Google for advertising, promotion, profiling or any purpose other than those above.
• We never sell, rent or otherwise transfer information obtained from Google to third parties, except where required by law and except where the processors listed in Section 6 handle it in order to provide the Service.
• We retain information obtained from Google only for as long as it is needed to provide the Service, and delete it when the account is deleted.
• You can revoke the Service's access at any time from your Google account security settings (https://myaccount.google.com/permissions ).

Our handling of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements. The same information and purposes apply when you sign in with a GitHub account.

5. Retention

Deleting your account deletes your account information, Sessions, images, comments, decision records, connection information and notification settings. Deleted data cannot be restored.

6. Disclosure to third parties and processors

We do not disclose personal data to third parties except:

1. with your consent;
2. where required by law, or where disclosure is necessary to protect the life, body or property of a person and obtaining consent is difficult; or
3. where we entrust the handling of personal data to the following processors, to the extent necessary to provide the Service.

In addition, notification content is sent to the notification destinations (such as chat tool URLs) that you configure.

7. Cross-border transfers

The processors listed above are located outside Japan, and your information may be stored on servers outside Japan. We enter into contracts with these processors covering the handling of personal data and exercise the necessary and appropriate supervision required by the Act on the Protection of Personal Information of Japan. If you would like information about the personal data protection regimes of the countries concerned, please contact support@dencyu-systems.com.

8. Cookies

The Service uses cookies for the following purposes:

• a session cookie that keeps you signed in;
• a cookie that records that the password for a password-protected Session has been entered; and
• remembering your chosen display language, including via browser local storage.

The Service uses no advertising cookies. We currently use no third-party analytics tools. If we adopt any in future, we will revise this Policy and publish the change.

9. Security measures

We take the necessary and appropriate measures to prevent leakage, loss or damage of the information we collect, including encryption in transit (HTTPS), access control, storing API keys as hashes, and access control on private Sessions.

10. Your rights

1. You may request disclosure, correction, addition, deletion, suspension of use, or suspension of provision to third parties in respect of your personal data held by us. Please contact support@dencyu-systems.com. We will respond in accordance with the law after verifying your identity.
2. You can delete your account and its associated data yourself at any time from the settings screen.
3. Session retention can be set to 7, 30 or 90 days on the paid plan.

11. Children

The Service is not intended for persons under 13 years of age, and they may not use it. If we learn that we have collected information from a person under 13, we will delete it promptly.

12. Changes to this Policy

We may change this Policy. Where a change is material, we will publish it within the Service.

13. Contact

For questions about this Policy or about the handling of personal information:

• DencyuSystems (sole proprietor, 田中匠美)
• support@dencyu-systems.com