Operator information
- Operator: KIZUNA Creation (responsible person / Kazumoto Takeshi)
- Representative: Kazumoto Takeshi
- Location: Japan (as a sole proprietorship, the full address is not displayed at all times; it is disclosed without delay upon request, as described in the Specified Commercial Transactions Act notice)
- Contact: support@banto-roumu.com
1. Information we collect
Banto collects the following information:
- Email address (at account creation)
- Company profile and chat consultation content
- Attributes/memory extracted by the AI (e.g., standard working hours, holidays, status of internal rules)
- Personal information of your employees, officers and other related persons that you (the company) enter into the Service (name or label, department, work/employment status, background of the consultation). Given the nature of labor-related consultations, this may include sensitive personal information (e.g., leave of absence, illness or injury, harassment reports).We handle such data as a processor entrusted by you (see Terms of Service, Section 5; Japanese text only).
- Service usage (anonymous statistics)
When creating long-term memories from conversations, we instruct the AI not to retain raw full names, addresses or national identification numbers in the subject label, and to use initials or roles instead (as this is performed by an AI model, automatic pseudonymization cannot be guaranteed). Please do not enter Japanese Individual Numbers (My Number) or documents containing them.
2. Purpose of use and legal basis
- Providing and improving the Service (performance of contract)
- Generating company-specific answers (performance of contract)
- Providing the long-term memory feature (performance of contract)
- Sending notification emails (legitimate interest; opt-out available)
- Security and fraud prevention (legitimate interest)
3. Disclosure to third parties
We use the following services, which may involve data being sent to them:
- Anthropic (Claude API): receives your consultation content to generate AI responses. Anthropic Privacy Policy
- Supabase: database/authentication (US). Supabase Privacy Policy
- Vercel: hosting (US)
- Plausible Analytics: anonymous, cookie-free analytics (EU). Plausible Data Policy
- Resend: notification email delivery (US)
- Dify: lookups against a legal knowledge base (US). Question text related to laws/regulations may be sent.
- OpenAI: vectorization for semantic memory search (US). Summary text of memories is sent. Data sent via the API is not used for model training by default. OpenAI API Data Usage Policy
- Stripe: payment processing for paid plans (US). Card data is handled directly by Stripe and is not stored on Banto's servers. Stripe Privacy Policy
Disclosure to these third parties is limited to what is necessary to provide the Service. For EU/EEA residents: the above international transfers rely on Standard Contractual Clauses (SCCs) under GDPR Article 46.
Under Japan's Act on the Protection of Personal Information (cross-border provision to third parties): all vendors listed above are located in the United States. The basis for handling differs depending on the information concerned:
- Personal information of your employees and related persons that you enter: handled on the basis of entrustment (outsourcing) by you as the company (see Terms of Service, Section 5; Japanese text only). Provision to the vendors above occurs as sub-processing, limited to what is necessary to provide the Service, and we have confirmed through contractual safeguards (data processing agreements, SCCs, etc.) that each vendor maintains appropriate ongoing measures for handling personal information. Notice to, and where required consent of, the individuals concerned is the responsibility of you as the entrusting company. Individuals should direct requests for disclosure, correction or suspension of use to their employer first.
- Information about the registered user (e.g., email address): at sign-up, you provide explicit consent to this Privacy Policy (and the Terms of Service) via an active checkbox, and this information is handled on the basis of that explicit consent. To withdraw consent or request details, please contact us at the address below.
4. Data retention period
Data is retained for as long as your account exists. All data is deleted at the same time as account deletion. If there is no login activity for 2 years, we will notify you by email in advance before deleting your account and data.
5. Opting out of emails
You can stop notification emails at any time via the unsubscribe link at the bottom of the email, or via the unsubscribe page.
6. Cookies
The Service uses a session cookie to keep you logged in. We do not use cookies to track individuals. Analytics is provided by Plausible Analytics, which is cookie-free and collects only anonymous pageview-style statistics.
7. Your rights
- Requesting disclosure, correction, or deletion of personal information
- Restriction of processing / objection (for GDPR data subjects)
- Data portability (for GDPR data subjects)
To exercise the above rights, please contact support@banto-roumu.com.
8. Security
Row-Level Security (RLS) ensures that each company/user can only access their own data. Communications are encrypted via HTTPS/TLS. For details, see Security & data protection.