Security & Data Handling

Four design principles

Retention of business plan, goals and actual figures (a separate category from report text)

If you use the business plan and goals feature, the business plan you enter (each section’s text and the monthly numerical plan), your goals and your daily actual figures are kept in our data store (Upstash KV, Tokyo region) while you use the Service. They are erased on request, or by an administrator from the screen, and are erased automatically 90 days after the contract ends (cancellation). The handling of report text (viewable for at most 24 hours, erased at the latest the next day, and immediately on approval) is unchanged. Figures created by us are not included. The roster (members’ email addresses) and policy settings, as well as the business plan, goals and actual figures, are erased automatically 90 days after cancellation. The administrator’s email address is kept as contract information and is erased on request.

Data flow

How a report flows from creation to storage.

1. 1

   1. Entry

   The user enters a report in the browser (traffic is encrypted).

2. 2

   2. Temporary hold (accessible ≤24h)

   The draft sits in our temporary store (Upstash KV, Tokyo region); accessible for at most 24 hours, erased by the daily scheduled deletion at the latest the next day.

3. 3

   3. Approval

   When the manager approves, the source data on our servers is erased immediately.

4. 4

   4. Storage (customer side)

   Approved content is appended to a spreadsheet in your Google Drive. From then on it is under your control.

Report text you enter is sent to the generative-AI provider (Anthropic) for processing when you use AI assist or the alignment report, and when weekly reviews are created. By default, weekly reviews are created automatically every Friday (a manager can turn this off on the “Coaching policy” page; once off, text is sent only when a manager creates a review on the “Weekly AI summary (evaluation draft)” page). If you prefer not to send it, turn off automatic weekly reviews and enter text manually without AI. AI output is a draft; the final decision is the user's.

Subprocessors

This Service uses the following subprocessors. The governing law is Japanese law.

Upstash, Inc.: in addition to the temporary retention above, also used to keep the business plan, goals and actual figures entered by the customer (Tokyo region).

Security measures

• Encryption in transit (HTTPS / TLS).
• Permission separation via a service account, granted with least privilege.
• Source data on our servers becomes inaccessible after 24 hours and is erased by the daily scheduled deletion at the latest the next day (immediately on approval).
• Tamper detection via signed sessions, and access control by department and role.
• Payment data is not retained on our servers (processed by Polar).

Transfer to third parties outside Japan

For AI processing we send report text to Anthropic, PBC (United States); for storage we send it to Google LLC (United States and others). Vercel Inc. and Upstash, Inc. (US entities), used for temporary retention, hold the data in the Tokyo region (within Japan). Please use the Service with your consent to these transfers to third parties outside Japan. (If you use the business plan and goals feature, a summary of goal names and goal/actual figures is also sent to Anthropic, PBC (United States) for AI processing, in addition to the report text.)

Sales and payment

Sales of this Service use Polar (Merchant of Record). Payment data is processed by Polar and not retained by us. Please also see our Commercial Transactions disclosure.

Your rights and data deletion

The actual reports live in your Google Drive, where you can view or delete them yourself. For requests to disclose, correct, suspend use of, or delete the personal data we hold (such as sign-in email addresses), please use the contact below.

Personal-data contact：株式会社狼煙 (Norolu)（kakehashi@norolu.jp）