Information Handled by OTOM AI

When you use OTOM AI, the AI feature offered in the web version of the App (a feature in which an AI answers questions you ask the App's character; in OTOM-LINGBAO it also includes reading a pick from an image such as a screenshot; “OTOM AI”), your information is handled as described in this chapter. Matters not covered here follow the other sections of this policy.

(1) Information We Collect

• Questions and conversations — The questions you enter, the earlier exchanges in the conversation (or a summary of them in long conversations), and any image you send to be read.
• Usage records — Your account identifier (UID), the date, time and app of use, your plan, whether the use came from the daily allowance or a credit pack, the amount of AI processing (tokens) and the processing time. The text of questions and answers is not included in usage records.
• Feedback on image reading — When you check and correct a reading, the number of corrected slots and the pairing of a hero's title or skin name with the hero (including your UID, so the same person is not counted twice). Player names and images are not kept.
• Payment information — If you buy a paid plan or a credit pack: your Stripe customer identifier, the status, type and renewal date of your plan, your email address, and the remaining balance and expiry of credit packs. Card numbers and other payment details are received directly by Stripe; the Operator does not receive them.

(2) How We Use It

To answer your questions and read images, to save your conversations and show them across your devices, to manage daily allowances and credit packs, to prevent misuse, to bill and manage subscriptions, to understand costs and improve the feature, and to respond to enquiries.

(3) Where the Information Goes

To provide OTOM AI, we use the services of the following companies and send them the information they need as our service providers.

• Anthropic, PBC (United States) — To generate answers and read images, we send your question, the conversation (or its summary) and any image to the company's AI (Claude) API. Your account identifier and email address are not sent. Anthropic handles the data under its own terms and privacy policy.
• Amazon Web Services (Tokyo region) — The server that receives questions (AWS Lambda) and the storage of usage records, counts and subscription status (Amazon DynamoDB).
• Google (Firebase) — Sign-in verification (Firebase Authentication) and conversation storage (Cloud Firestore).
• Stripe (United States) — Payments for paid plans and credit packs, subscription management and receipts. The seller of paid plans and credit packs (Naohiko Ban) also handles this information to manage payments and subscriptions and to respond to inquiries.

These companies' servers may be located outside Japan.

Transfers to Third Parties Outside Japan

Anthropic, PBC and Stripe (Stripe, Inc. and its affiliates) are businesses in the United States, and the information above is sent to the United States. By sending a question or image to OTOM AI, or by applying for a paid plan or a credit pack, you are deemed to consent to the provision of your personal information to these companies in the United States.

• Country — The United States of America.
• The U.S. system for protecting personal information — The United States has no comprehensive federal law equivalent to Japan's Act on the Protection of Personal Information; personal information is protected by sector-specific federal laws and by state laws (such as the California Consumer Privacy Act). For details, see the survey of personal information protection systems in foreign countries published by Japan's Personal Information Protection Commission (https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku).
• Measures taken by the recipients — Each company takes security measures such as access restrictions and encryption in transit under its privacy policy and its contract with the Operator (its terms and data processing conditions). Anthropic's commercial terms provide that it does not use content received through its API to train its AI. Stripe is certified under the payment card industry data security standard (PCI DSS).
• Measures taken by the Operator — We limit what we send to what is needed to generate answers and process payments (your account identifier and email address are not sent to Anthropic), and we use both companies after checking their terms and data processing conditions.

(4) How Long We Keep It

• Conversations — Kept in the cloud (Cloud Firestore) under your account until you delete them, with a copy of recent conversations on your device. If a single conversation becomes extremely long, its oldest part may be deleted automatically.
• Images — Used only while being read and not stored on the Operator's servers.
• Usage records and feedback on image reading — Kept for at least one year to provide the feature, manage charges, prevent misuse, understand costs and make improvements, and deleted once no longer needed after that.
• Payment information — Kept for subscription management and for the period required by law.

Information sent to Anthropic and Stripe may be retained by those companies under their own policies.

(5) Deletion and Cancellation

You can delete each conversation from “History” in the OTOM AI screen; a deleted conversation is removed from the cloud and from that device. To request deletion of usage records, payment information or your account, please use the contact form given in the “Deleting Your Data” section of this policy (except information we are required by law to keep). You can cancel a paid plan or change your payment method from “Manage plan” in the OTOM AI screen (a Stripe page).

(6) What You Enter

Please do not include information that identifies you — such as your name, address, phone number or card number — or anyone else's personal information in your questions or images.