Kachilu Privacy Policy

Last updated: June 30, 2026

Effective date: June 30, 2026

Kachilu Inc. ("Kachilu," "we," "us," or "our") handles personal information in connection with the Kachilu website, desktop application, dashboard, accounts, workspaces, profiles, workflow generation and execution, analytics, payments, customer support, and related services (collectively, the "Service") as described in this Privacy Policy.

This Privacy Policy applies to users, customers, prospective customers, website visitors, inquiry senders, and other individuals who interact with Kachilu or the Service.

1. Operator

Kachilu Inc.

Representative: Ryutaro Imai

Address: 3-4-1 Wakaba, Shinjuku-ku, Tokyo 160-0011, Japan

Email: support@biz-db.com

2. Information We Collect

We collect the following categories of information, depending on how you use the Service.

Account and contact information

  • name;
  • company or organization name;
  • department, role, or title;
  • email address;
  • phone number;
  • login and authentication information;
  • account settings;
  • inquiry and support content.

Billing and subscription information

  • plan, subscription status, trial status, workspace count, billing history, and payment-related metadata;
  • payment information processed by Stripe. We do not intentionally store full credit card numbers unless explicitly stated.

Website, analytics, and device information

  • IP address;
  • device identifiers, browser type, operating system, app version, language, timezone, and approximate location derived from technical information;
  • pages viewed, referring URLs, links clicked, timestamps, cookie identifiers, and Google Analytics events.

Workspace, profile, and usage information

  • workspace settings, members, permissions, and usage records;
  • profile names, profile settings, SNS logins, cookies, browser state, connected-service session information, task settings, execution history, and related metadata;
  • task status, action counts, workflow logs, diagnostics, error reports, and performance information.

Customer Content and workflow information

  • prompts, instructions, target URLs, workflow settings, messages, templates, form submissions, posts, target lists, business context, generated workflows, generated outputs, screenshots, page text, and execution context;
  • other information you submit to or process through the Service.

Connected-service information

  • account identifiers, authorization scopes, access tokens, refresh tokens, metadata, and content necessary to connect and operate external services, if you choose to connect them;
  • information retrieved from connected services only to the extent authorized by you and necessary for the relevant Service function.

3. How We Collect Information

We collect information

  • directly from you when you create an account, subscribe, contact us, configure workspaces or profiles, enter prompts, create tasks, or use the Service;
  • automatically through the website, desktop app, dashboard, cookies, logs, Google Analytics, diagnostics, and similar technologies;
  • from external services that you connect or authorize;
  • from Stripe, support providers, analytics providers, infrastructure providers, and other service providers;
  • from other lawful sources where permitted by law.

We do not obtain personal information by deception or other wrongful means.

4. Purposes of Use

We use personal information for the following purposes

  • provide, operate, maintain, secure, and improve the Service;
  • create and manage accounts, workspaces, profiles, subscriptions, trials, billing, payments, and support;
  • generate, execute, monitor, pause, resume, and troubleshoot browser-based workflows;
  • connect to external services authorized by users;
  • process prompts, instructions, URLs, messages, outputs, and execution context;
  • maintain task history, dashboards, logs, and usage records;
  • detect and prevent abuse, fraud, unauthorized access, security incidents, and violations;
  • provide customer support, respond to inquiries, and communicate about the Service;
  • analyze usage, performance, reliability, and product improvement opportunities;
  • send service notices, legal notices, billing notices, security notices, and administrative messages;
  • send marketing communications, product updates, event information, or promotional information where permitted by law;
  • comply with law, legal process, regulatory requests, and audit obligations;
  • enforce our Terms of Service and protect rights, property, safety, and trust;
  • create aggregated, anonymized, or statistical data that does not identify individuals.

We will not use personal information beyond the scope necessary for these purposes unless permitted by law or with your consent.

5. Cookies and Google Analytics

We use Google Analytics to understand website and Service usage, measure performance, improve user experience, and evaluate marketing effectiveness. Analytics data may include cookie identifiers, device information, page views, events, referrers, approximate location derived from technical information, and timestamps.

You can manage or disable cookies through your browser settings, but some website or Service features may not function properly.

6. AI Processing

The Service may use Codex, OpenAI services, or other AI providers to generate, plan, analyze, or execute workflows. To provide these features, we may transmit prompts, instructions, URLs, Customer Content, outputs, workflow context, screenshots, page text, logs, and related metadata to AI providers selected or required for the Service.

Users are responsible for ensuring that Customer Content can be lawfully processed through the Service and any connected AI provider.

7. Sharing and Third-Party Disclosure

We may share personal information with

  • service providers that process information on our behalf, such as infrastructure, hosting, storage, security, logging, analytics, support, payment, email, monitoring, and AI providers;
  • Stripe for payment and subscription management;
  • external services that you authorize or instruct us to use;
  • AI providers, including Codex, OpenAI services, or related providers, where necessary to generate or execute workflows;
  • professional advisors, auditors, insurers, lawyers, and accountants;
  • government agencies, courts, regulators, law enforcement, or other parties where required or permitted by law;
  • parties involved in a merger, acquisition, financing, reorganization, business transfer, bankruptcy, or sale of assets;
  • third parties with your consent or at your direction.

8. Outsourcing

We may outsource all or part of personal information handling to service providers within the scope necessary to achieve the purposes described in this Privacy Policy. We exercise necessary and appropriate supervision over such service providers.

9. International Transfers

We may process and store information in countries or regions outside Japan, including through cloud, infrastructure, support, analytics, payment, and AI service providers. Data protection laws in those countries may differ from Japanese law. Where required, we take measures required by applicable law for cross-border transfers.

10. User Responsibilities

Users must

  • obtain and maintain all rights, permissions, notices, and legal bases required to submit, process, or use Customer Content through the Service;
  • use personal information, Customer Content, outputs, and workflows only for lawful and appropriate business purposes;
  • comply with privacy, data protection, telecommunications, employment, anti-spam, advertising, platform, and cybersecurity laws and rules;
  • comply with correction, deletion, suppression, restriction, and other legally required data-handling notices communicated by Kachilu;
  • avoid collecting or using sensitive personal information unless they have a valid legal basis and all required consents;
  • review generated messages, outputs, target lists, and automated actions before use where compliance or accuracy matters.

11. Retention and Deletion

We retain personal information for as long as necessary to provide the Service, maintain accounts, support users, comply with law, resolve disputes, enforce agreements, secure systems, and maintain business records.

Retention may differ depending on the data category

  • account and billing records may be retained as required by law;
  • logs may be retained for security, debugging, and audit purposes;
  • workspace and profile data may be retained while the workspace, profile, or account is active;
  • connected-service tokens are deleted or invalidated after disconnection unless retention is legally or operationally necessary;
  • Customer Content and execution history may be deleted or anonymized after account deletion, termination, or expiration of applicable retention periods.

12. Security Control Measures

We use reasonable organizational, human, physical, and technical measures to protect personal information. These may include access controls, encryption in transit, least-privilege access, logging, monitoring, vendor review, confidentiality obligations, backup controls, incident response procedures, and internal rules.

Users are responsible for protecting their devices, local environments, credentials, profiles, connected-service accounts, and External Service sessions.

13. Individual Rights and Requests

To the extent provided by applicable law, you may request disclosure, correction, addition, deletion, suspension of use, erasure, suspension of third-party provision, disclosure of records of third-party provision, or other handling of your personal information.

Please send requests to support@biz-db.com. We may verify your identity and may decline requests where permitted by law, such as where disclosure would seriously interfere with our business, harm rights or interests of third parties, violate law, or compromise security.

14. Marketing Communications

You may opt out of marketing emails by using the unsubscribe link in the email or contacting us. Even if you opt out of marketing emails, we may still send transactional, security, legal, billing, or service-related communications.

15. Children's Privacy

The Service is not directed to children. We do not knowingly collect personal information from children without required consent. If you believe a child has provided personal information to us without required consent, contact us.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify users by posting the updated policy on the website, in the Service, by email, or by another appropriate method. The updated policy becomes effective on the effective date stated above or in the notice.

17. Contact

Kachilu Inc.

Personal Information Inquiry Desk

3-4-1 Wakaba, Shinjuku-ku

Tokyo 160-0011, Japan

Email: support@biz-db.com