Terms of use
Terms of use
- Your daily reports are stored in a spreadsheet inside your own Google Drive (Google LLC).
- Raw data on our server can be viewed for at most 24 hours after submission (anything older becomes inaccessible and is erased by the daily scheduled deletion at the latest the next day). It is erased immediately when a manager approves.
- AI output is a draft; the final decision is yours. The developer is not liable for AI errors or temporary issues from external API changes.
- When you use AI assist or the alignment report, and when weekly reviews are created, the report text you enter is sent to and processed by our generative-AI provider (Anthropic). By default, weekly reviews are created automatically every Friday (a manager can turn off the automatic creation on the “Coaching policy” page). If you prefer not to send it, you can fill in everything manually without the AI features, and a manager can turn off the automatic creation of weekly reviews. (If you use the business plan and goals feature, a summary of goal names and goal/actual figures is also sent, in addition to the report text, when creating the weekly review and 1-on-1 materials. When you use Evaluation Pro “AI drafts”, the business plan text, your department policy and the numerical assumptions you entered are also sent, only when a draft is generated. We do not store them.)
- Subprocessors: Google LLC (Sheets storage), Anthropic, PBC (AI processing), Vercel Inc. (hosting), Upstash, Inc. (KV; temporary retention for report data (inaccessible after 24h, erased at the latest the next day); business plan and goals data is kept while the Service is used). Governing law: Japan.
- If you use Google sign-in, login email addresses (managers/members) and the display names registered in the settings screen are retained as login settings (a separate category from the automatic erasure of report content). Members' email addresses and display names are automatically erased 90 days after the termination of the contract is confirmed. The manager's (purchaser's) email address is retained after termination for billing and contract records and for sign-in upon re-subscription. Google (OAuth) is used for authentication.
- Personal data controller: 株式会社狼煙 (Norolu). Requests to disclose, correct, suspend the use of, or delete your retained personal data, as well as inquiries and complaints, are handled at our Personal Data Inquiry Desk (kakehashi@norolu.jp).
- Purpose of use: We use personal data to manage daily-report PDCA, for manager approval, weekly reviews and 1-on-1 support, and to authenticate users and determine department/role for Google sign-in, and for the purchaser's billing and contract records and sign-in upon re-subscription.
- Security measures: We apply encryption in transit, privilege separation via a service account, and automatic erasure of server-side source data (inaccessible after 24 hours and erased by the daily scheduled deletion at the latest the next day; immediately on approval).
- Provision to third parties overseas: For AI processing, report text is sent to Anthropic, PBC (United States); for storage we use Google LLC (United States and others). The temporary-retention providers Vercel Inc. and Upstash, Inc. (U.S. entities) hold data in the Tokyo region (within Japan). Please consent to these provisions to overseas third parties before use. (If you use the business plan and goals feature, a summary of goal names and goal/actual figures is also sent to Anthropic, PBC (United States) for AI processing, in addition to the report text. When you use Evaluation Pro “AI drafts”, the business plan text, your department policy and the numerical assumptions are also provided, only when a draft is generated. We do not store them.)
- Sales & payment: Sales of this service use Polar (Merchant of Record). When payment is enabled, payment information is processed by Polar, and we do not retain payment information.
- Analytics: this Service may use Vercel's cookieless, aggregate analytics (Vercel Web Analytics / Speed Insights). It does not identify individuals and is used only for statistics such as page views and load speed.
- Business plan and goals: If you use the business plan and goals feature, the business plan you enter (each section’s text and the monthly numerical plan), your goals and your daily actual figures are kept in our data store (KV) while you use the Service (a separate category from the automatic erasure of report text). Figures created by us are not included. They are erased on request, or by an administrator using “Erase plan, goals and actuals” under “Data management” on the Settings screen. For a team whose contract has ended (cancellation) more than 90 days ago, they are erased automatically. The roster (members’ email addresses) and policy settings, as well as the business plan, goals and actual figures, are erased automatically 90 days after cancellation. The administrator’s email address is kept as contract information and is erased on request.
- End of contract: for a team whose contract period has ended (and whose grace period for a late payment, if any, has passed), new daily-report submissions, draft saving, additions to the roster, settings changes and other writes are paused, while approving or returning daily reports awaiting approval, viewing and exporting existing daily-report records, and removing people from the roster remain available (renewing resumes them right away).
Terms of use (full text)
Article 1 (About these Terms)
These Terms set out the conditions for using norolu PDCA (the "Service"), provided by 株式会社狼煙 (Norolu) (the "Company"). The "Consent for Use" shown on the Service's screen forms part of these Terms. If the text of the on-screen "Consent for Use" differs from these Terms, these Terms prevail.
Article 2 (Definitions)
- "Customer" means a person who has applied for a paid plan of the Service. "Administrator" means the person the Customer has registered as an administrator in the Service. "Users" means the Administrator and the employees listed on the roster.
- "Customer Data" means what the Customer enters into the Service, such as daily reports, business plans, goals and results, and settings such as the roster and policies.
Article 3 (Application and formation of the contract)
- Paid plans are sold, and payment is processed, by Polar Software Inc. (Merchant of Record) as the seller. Payment conditions are as shown by Polar on the checkout screen and in Polar's terms.
- The contract to use the Service is formed between the Customer and the Company when payment is completed and the paid features become available.
- The number of seats (users) is chosen at the time of application and can be increased or decreased later.
Article 4 (Fees and payment)
- Fees and billing units are as shown on the pricing page and in the Commercial Transactions Disclosure (https://pdca.norolu.com/pricing).
- For monthly contracts, payment is due at the time of application and on each renewal date thereafter.
- The Company bears the generative AI usage costs, which are included in the fees.
Article 5 (Handling of data)
- The Customer is the controller of Customer Data, and the Company handles it within the scope of the Customer's instructions. For details of the conditions, see the DPA page (https://pdca.norolu.com/dpa).
- The substance of daily reports is stored in a spreadsheet on the Customer's own Google Drive. The original data on the Company's servers can be viewed for up to 24 hours after submission, and is deleted immediately upon approval.
- What is sent to AI, subcontractors, and transfers abroad are as described in the Privacy Policy and the Security page. AI output is a draft, and evaluations and judgments are made by Users (including the "weekly AI summary (draft evaluation)"). The Service does not decide evaluations.
- Before adding or changing a subcontractor, the Company updates the DPA page in advance.
Article 6 (Cancellation and end of the contract)
- You can cancel or change your payment method at any time from Polar's customer portal. If you cancel before the next renewal date, billing stops from the next renewal.
- For a department past the end of its contract period (or past the grace period for late payment, where one applies), writing such as submitting new daily reports stops, but approving or returning pending daily reports, viewing and exporting records, and removing people from the roster remain possible. Everything returns immediately when the contract is renewed.
- Refunds: Per the refund section of Polar's Buyer Terms (https://polar.sh/legal/checkout-buyer-terms). As a monthly digital service, refunds for reasons of personal convenience are generally not provided (pro-rata settlement when you reduce seats is separate). For subscriptions, you can stop further charges by cancelling before the next renewal date.
Article 7 (Data after the contract ends)
- Employees' email addresses and display names, settings such as the roster and policies, and business plans, goals and results are deleted automatically once 90 days have passed since the end of the contract is confirmed.
- The Administrator's email address is kept after cancellation for billing and contract records and for login upon re-subscribing. It is deleted on request.
- Daily reports remain on the Customer's Google Drive.
Article 8 (Scope of liability)
- AI output is a draft and may contain errors. Changes to the specifications of external APIs may cause temporary malfunctions.
- The Company is liable, in accordance with law, for damage caused to the Customer by reasons attributable to the Company.
Article 9 (Contact)
kakehashi@norolu.jp
Article 10 (Changes to these Terms)
When these Terms are changed, the changes and the date they take effect will be posted on the Service's pages in advance.
Article 11 (Governing law)
Japanese law governs. The Japanese version prevails.