Privacy Policy
Last updated: 2026-06-30
Norolu Inc. (株式会社狼煙) (we) set out how personal information is handled in norolu PDCA (pdca.norolu.com). This Service processes daily-report content via our servers (it is not a device-only design). The items below are the same as the consent shown when you start using the Service.
- Your daily reports are stored in a spreadsheet inside your own Google Drive (Google LLC).
- Our server keeps the raw data for at most 24 hours (purged on approval).
- AI output is a draft; the final decision is yours. The developer is not liable for AI errors or temporary issues from external API changes.
- When you use AI assist or weekly review, the report text you enter is sent to and processed by our generative-AI provider (Anthropic). If you prefer not to send it, you can fill in everything manually without the AI features.
- Subprocessors: Google LLC (Sheets storage), Anthropic, PBC (AI processing), Vercel Inc. (hosting), Upstash, Inc. (KV; temporary retention up to 24h). Governing law: Japan.
- If you use Google sign-in, login email addresses (managers/members) are retained as login settings (a separate category from the 24h purge of report content, for the duration of service use). Google (OAuth) is used for authentication.
- Personal data controller: 株式会社狼煙 (Norolu). Requests to disclose, correct, suspend the use of, or delete your retained personal data, as well as inquiries and complaints, are handled at our Personal Data Inquiry Desk (kakehashi@norolu.jp).
- Purpose of use: We use personal data to manage daily-report PDCA, for manager approval, weekly reviews and 1-on-1 support, and to authenticate users and determine department/role for Google sign-in.
- Security measures: We apply encryption in transit, privilege separation via a service account, and automatic deletion of server-side source data within at most 24 hours.
- Provision to third parties overseas: For AI processing, report text is sent to Anthropic, PBC (United States); for storage we use Google LLC (United States and others). The temporary-retention providers Vercel Inc. and Upstash, Inc. (U.S. entities) hold data in the Tokyo region (within Japan). Please consent to these provisions to overseas third parties before use.
- Sales & payment: Sales of this service use Polar (Merchant of Record). When payment is enabled, payment information is processed by Polar, and we do not retain payment information.
The Japanese version of this policy prevails; in case of any discrepancy with a translation, the Japanese version governs.