← Home

Privacy Policy

Last updated: 2026-08-12

This Privacy Policy explains how Tokuyosi LLC (“we,” “us”) collects, uses, and protects personal information in connection with AIrtive (the “Service”). It applies to all users of the Service. By using the Service you agree to the practices described here.

1. Information We Collect

  • Account information. When you sign up via our identity provider (AWS Cognito, with optional Google or Apple federation), we receive your email address, a unique user identifier, and authentication metadata. We do not store your password.
  • Creation content. Prompts, uploaded reference media, generation settings, and generated outputs may be stored so you can access your creations and reuse materials.
  • Payment information. Subscriptions and credit packs are processed by Stripe. We receive a Stripe customer ID, subscription ID, and the result of each payment. We do not store full payment card numbers; Stripe handles card data subject to its own privacy terms.
  • Device and usage data. We log technical information necessary to operate and secure the Service: IP address, user-agent, request paths and timings, error traces, and a correlation ID per request.
  • Cookies / local storage. We use first-party cookies and browser storage to keep you signed in and to remember a local session identifier. We do not use advertising cookies.

2. How We Use Information

  • Provide, secure, and improve the Service;
  • Authenticate you and prevent fraud and abuse;
  • Process payments, deliver subscriptions and credits, and issue receipts;
  • Enforce our Terms and Content Policy, including responding to abuse reports and legal requests;
  • Communicate operational, transactional, and security notices;
  • Comply with legal obligations (tax, accounting, law enforcement).

3. AI Processing

Your prompts and reference media are sent to AI providers to generate requested output. Current providers include OpenAI and fal.ai. We require providers to process your inputs only to return a response and not to train their models on them where the provider exposes that option. We do not enable third-party training on identifiable user content.

4. Service Providers

We rely on the following infrastructure and service providers to run AIrtive. Each is contractually required to protect your information and is used only for the listed purpose:

  • Amazon Web Services — compute, database, secrets, identity (Cognito);
  • Cloudflare — content delivery, security (WAF, bot management), object storage (R2);
  • Stripe — payment processing, subscription management;
  • OpenAI and fal.ai — AI model inference;
  • Amazon SES — transactional email.

5. Sale or Sharing

We do not sell your personal information and do not share it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).

6. Retention

We keep account information for as long as your account is active. We keep uploaded materials and generated outputs according to the creation and account retention controls available in the Service. Payment, tax, and abuse-investigation records may be retained longer where required by law.

7. Your Choices

  • Access and deletion. Sign in and use the in-app account controls to view your data and delete your account. You can also email us to request access or deletion.
  • Japan (APPI). If you are in Japan, you may request notification of the purpose of use, and the disclosure, correction, addition, deletion, suspension of use, erasure, or suspension of third-party provision of your retained personal data. Contact us at the address in section 12; we will verify your identity and respond as required by law.
  • CCPA / CPRA (California). You have the right to know, to delete, to correct, and to limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights.
  • GDPR / UK GDPR. If you are in the EEA or UK, you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. Our legal bases are contract (to provide the Service), legitimate interests (to secure and improve it), and consent where required.

8. Children

The Service is not directed to and is not available to anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. International Transfers

We are a company established in Japan, and we run the Service on infrastructure located in the United States. By using the Service you understand that your information will be processed in the United States and other countries that may have data protection laws different from those in your country. Where required, we rely on standard contractual clauses or other approved transfer mechanisms.

10. Security

We use industry-standard administrative, technical, and physical safeguards (TLS in transit, encryption at rest, access controls, audit logging). No system is perfectly secure; we cannot guarantee absolute security.

11. Changes

We may update this Policy from time to time. Material changes will be posted on this page with a revised “Last updated” date and, where appropriate, communicated to you through the Service.

12. Contact

Tokuyosi LLC · [email protected]