Privacy policy

privacy-2026-09-13-v1 · 2026-09-13

This policy covers accounts, purchases, production and storage on the official website and supported apps. Material changes are announced here.

Your email address, password and language are sent to Supabase for registration, verification, login and recovery. Resend delivers authentication emails. Do not include passwords in support messages.

Stripe processes live payments. Private records include order ID, buyer account ID, product, amount, currency, transaction status, terms version and acceptance time for payment verification, ticket delivery, refunds, fraud prevention and legally required records. Our servers do not store card numbers or CVC; Stripe processes them. Order data is not included in browsing analytics.

When you start production, selected reference images, generation text and instructions, and work/image/request identifiers are sent to services including Supabase, OpenAI's image-generation API and RunPod GPU processing for generation, finishing, status checks and delivery. Production assets and completed characters are stored in private cloud storage and retrieved through the owner's account. Necessary diagnostic records include request IDs, stages, status and error categories. Camera video and microphone audio are not sent to production APIs. PC camera tracking is processed locally. OBS recording and streaming follow your settings.

Images, drafts, production history and output settings are stored on your device. Trash provides account-specific hiding and restoration, not permanent erasure of local or cloud originals. Contact us for access, correction or deletion of stored data or account information. After identity verification we respond under applicable law. Records are retained as needed for service delivery, support, fraud prevention, legal obligations and disputes; when handling deletion requests we explain applicable retention duties and backups. We do not acquire source-material copyright or obtain blanket consent for AI training through this policy. Cloud providers may process data outside Japan.

The form sends your reply address, category, subject, message and preferred language to the operator through Resend. Messages are not published. They are kept as needed to respond and maintain the support record. Contact the address below for deletion or account-data requests. We may need to verify your identity.

Only with your permission, we measure pages, language, broad device type and referrer category. Random identifiers are hashed; identifiers and measurement records are retained for up to 30 days. Change your choice at the bottom of a page. Declining does not prevent registration or contact. Analytics do not contain emails, passwords or support messages.

The site uses Cloudflare for delivery and storage infrastructure. Supabase provides authentication and Resend delivers email. These providers may process connection information such as IP addresses for delivery and abuse prevention. Our rate-limit records use expiring hashes rather than raw IP addresses.

Operator: 益坂吏輝

Contact: startvtuber.official@gmail.com