1. Scope and Who This Policy Covers
This Privacy Policy explains how Ichinyo Corporation and its affiliates, brands, and products that link to this Policy (collectively, “Ichinyo,” “we,” “our,” or “us”) collect, use, disclose, and otherwise process personal information in connection with ichinyo.ai, the PAX:Luma waitlist, any sign-in experiences, our content and blog pages, and related products, applications, services, and communications (collectively, the “Services”).
This Policy applies to personal information we collect from visitors, waitlist applicants, account holders, customers, business contacts, and individuals who communicate with us. If we introduce enterprise, developer, or white-label offerings, separate commercial terms, a data processing addendum, or supplemental privacy notices may also apply.
Where required by applicable law, Ichinyo is the “controller” or “business” responsible for the personal information described in this Policy. For questions about this Policy, please use the contact information in Section 15.
2. Personal Information We Collect
Information you provide directly
We may collect your name, email address, company, role, waitlist responses, account credentials, profile information, support messages, survey responses, and any information you choose to submit through forms, product features, chat, document ingestion, voice interactions, or direct communications with us.
Content and interaction data
If you use PAX:Luma or related features, we may collect prompts, instructions, uploaded files, notes, transcripts, generated outputs, feedback, preferences, and records of how you interact with the Services so we can provide, maintain, and improve them.
Technical and usage information
We may automatically collect device information, browser type, IP address, approximate location inferred from IP, language settings, referral URLs, pages viewed, session events, crash logs, diagnostics, cookies, and similar analytics data.
Information from other sources
We may receive information from analytics providers, authentication providers, hosting vendors, social media platforms, service providers, publicly available sources, and, where you authorize them, third-party integrations or connectors.
3. How We Use Personal Information
We use personal information to provide and operate the Services, administer the waitlist and accounts, authenticate users, personalize experiences, respond to requests, send transactional and product-related communications, and provide customer support.
We also use personal information to secure the Services; monitor performance; detect, investigate, and prevent fraud, abuse, safety incidents, and policy violations; comply with legal obligations; protect our rights and the rights of others; and enforce our terms and policies.
Subject to applicable law and user controls, we may use personal information, prompts, uploads, feedback, and interaction data to debug, evaluate, train, tune, and improve our models, systems, and safety measures. Where we offer settings that allow you to opt out of certain improvement or training uses, we will honor those choices as described in-product or in supplemental notices.
We may aggregate or de-identify information and use that information for research, analytics, safety testing, product development, benchmarking, and other lawful business purposes.
4. AI-Specific Processing Practices
Because the Services are designed around AI assistance, some personal information may be processed by machine learning models and automated systems to generate responses, summaries, analyses, recommendations, and other outputs. Outputs may not always be accurate, complete, or suitable for every use case, and users should exercise judgment before relying on them.
To improve quality, trust, and safety, authorized personnel and trusted service providers may review a limited subset of prompts, uploads, transcripts, and outputs, including where necessary for support, abuse prevention, legal compliance, incident response, or model evaluation.
Please do not submit highly sensitive personal information unless the Service expressly requests it and you are comfortable with that use. If future features are intended for regulated or sensitive use cases, Ichinyo may provide additional disclosures, controls, or contractual terms before those features become available.
6. Legal Bases for Processing
Where required under applicable law, we rely on one or more of the following legal bases: performance of a contract with you; our legitimate interests in operating, improving, and securing the Services; your consent; and compliance with legal obligations. If we rely on consent, you may withdraw it at any time, although this will not affect processing that occurred before withdrawal.
8. Data Retention
We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts, administer the waitlist, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business needs such as security, fraud prevention, and product improvement.
Retention periods vary depending on the nature of the information, the sensitivity of the data, the purpose for which it was collected, user settings, and applicable legal requirements. We may retain de-identified or aggregated information for longer periods.
9. Data Security
We use administrative, technical, and physical safeguards designed to protect personal information, including access controls, authentication measures, logging, encryption in transit where appropriate, vendor oversight, and security monitoring. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
10. International Data Transfers
Ichinyo may store and process personal information in the United States and other countries where we or our service providers operate. Those countries may have data protection laws that differ from those in your jurisdiction. Where required, we will use appropriate safeguards for cross-border transfers.
11. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information; obtain a portable copy of certain data; appeal a denial of your request; and opt out of targeted advertising, sales, or certain profiling activities if those laws apply.
You may also have choices regarding marketing emails, cookies, training or improvement settings, and public-sharing controls. We will not discriminate against you for exercising privacy rights protected by law.
To exercise rights, contact us using the details in Section 15. We may need to verify your identity before completing certain requests. You may also designate an authorized agent where permitted by law.
12. Children's Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without legally sufficient authorization. If local law sets a higher age threshold for digital consent, that threshold will apply in the relevant jurisdiction. If you believe a child has provided personal information to us in violation of this Policy, please contact us so we can investigate and take appropriate action.
13. Third-Party Services and Links
The Services may link to third-party websites, products, documentation, repositories, payment providers, or authentication tools. This Policy does not apply to third-party practices, and we encourage you to review the privacy policies of those third parties before interacting with them.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the Services, legal requirements, or our practices. If we make material changes, we will provide notice as required by law, which may include posting an updated Policy on the Services, updating the effective date, or sending notice through the Service or by email.
15. Contact Us
If you have questions about this Privacy Policy or would like to exercise your privacy rights, please contact Ichinyo at legal@ichinyo.ai