Privacy Policy

1. Who We Are

The Keigo service (keigo.tokyo) is published by I-TECH2, a French simplified joint-stock company (SASU) registered under SIREN 930 686 456, with its registered office at 161 Avenue du Bois de Verrieres, 92160 Antony, France. I-TECH2 is the data controller for the personal data described below, and Imed Telili is the publication director.

If you have a question about your data, or want to exercise one of the rights listed further down, write to hello@keigo.tokyo. We answer every request within 30 days.

2. What Data We Collect

We only collect what the service actually needs. Most of Keigo — the guides, the calculators, the directories — works without an account, and we collect no personal data from you when you simply read a page.

Account data, only if you create an account:

• Your email address, used to sign you in, verify your account and send you service messages.
• Your display name, if you give one.
• If you sign in with Google: the email address, name and profile picture (avatar) that your Google account shares with us. We never receive your Google password, and we do not read your Gmail, Drive, Contacts or Calendar.
• A hashed password, if you signed up with an email and a password instead of Google.
• Your language preference, your plan and your purchase history.

Usage data:

• Pages viewed, features used, approximate country, and the device or browser type — collected only after you accept analytics cookies.
• An anonymous page counter that needs no cookie and no consent because it cannot identify you: the page viewed, the site you came from, the language of the interface and whether the device is a phone or a computer — never your IP address, an identifier or a session. It only tells us which guides help and where readers come from.
• Technical logs (IP address, timestamps, error traces) kept for security, abuse prevention and debugging.

Documents you store in the Vault, only if you subscribe and upload them:

• The files you upload — residence cards, tax slips, contracts, letters from your city office and similar paperwork.
• The text our AI extracts from those files, plus the labels, dates and reminders derived from it, so the Vault can name, sort and remind you about each document.
• The resume and career documents you generate with the CV Pack, and the text you type into them.

We deliberately do not collect some things: your card number goes straight to Stripe and never touches our servers, and we ask for no special-category data such as health or religion beyond whatever you choose to store in your own Vault.

3. Why We Use It

Every category has one defined purpose, and we do not reuse it for anything else:

• Account data: to create and secure your account, sign you in, and let you recover access.
• Purchase data: to take payment, manage your subscription, issue receipts and meet our accounting obligations.
• Vault documents and the text extracted from them: to store, name, sort, search and display your documents, to produce the deadline reminders and checklists you asked for, and to write the resume or letters you request.
• Usage data: to see which pages help people and which do not, so we can improve the guides and tools.
• Technical logs: to keep the service running, detect abuse and investigate incidents.
• Your email address: to send transactional messages (verification, password reset, receipts, expiry reminders) and, only if you asked for it, our newsletter — every newsletter carries a one-click unsubscribe link.

We do not sell, rent or trade your personal data. We do not use your documents, your resume or the text you type to train AI models, and we never use them for advertising.

4. Legal Basis and Applicable Law

If you live in the European Economic Area or the United Kingdom, we process your data under the GDPR on these bases:

• Performance of a contract: your account, your Vault, your subscription and the documents we generate for you.
• Your consent: analytics cookies and the newsletter. You can withdraw it at any time from the cookie settings or the unsubscribe link, and that does not make what we did before unlawful.
• Our legitimate interest: keeping the service secure, preventing fraud and abuse, and fixing bugs.
• A legal obligation: keeping invoices and accounting records for the period the law requires.

If you live in Japan, we handle your data in line with the Act on the Protection of Personal Information (APPI): we state the purpose of use before collecting, we stay within that purpose, and we do not hand your data to a third party without your consent except where the law allows it.

5. Cookies and Similar Technologies

Essential cookies and local storage keep you signed in, remember your language and theme, and protect our forms against abuse. They cannot be turned off without breaking the service, and they carry no advertising identifier.

Analytics cookies (PostHog and Google Analytics 4) are only set after you accept them in the cookie banner. You can change your mind at any time; when you withdraw consent, both tools are shut down and stop collecting.

We run no advertising network, no retargeting pixel and no cross-site tracking. Our fonts are served from our own servers, so no font provider ever sees your IP address.

6. Who Processes Data For Us

Keigo is a small team, so we rely on a short list of named providers. Each one receives only the data it needs, under a contract that forbids using it for its own purposes:

• Amazon Web Services (AWS), Tokyo region (ap-northeast-1) — hosting for the application, the PostgreSQL database, the Redis cache and the encrypted object storage that holds your Vault files.
• Stripe — payment processing and subscription billing. Your card details go straight to Stripe.
• Google — sign-in with Google (OAuth), the Gemini AI models that read and label the documents you upload, and Google Analytics 4, which only runs after you consent.
• Anthropic — the Claude AI models used to draft and translate resumes, letters and polite Japanese.
• PostHog (servers in the European Union) — product analytics, which only runs after you consent.
• Amazon SES (AWS) — transactional emails and the newsletter.
• Sentry — error monitoring, which may capture technical traces containing your user identifier.

AI providers process your text to return a result. Under our agreements they do not keep it to train their models and delete it after the request.

7. YouTube API Services

Keigo Studio, our internal publishing tool, uses the YouTube API Services to upload and manage the videos of the Keigo channel. Because of that, Keigo Studio is subject to the Google Privacy Policy (https://policies.google.com/privacy) and to the YouTube Terms of Service (https://www.youtube.com/t/terms).

Only the Keigo team signs in to that tool, and it acts on our own YouTube channel and nothing else. We collect no YouTube user data from visitors of keigo.tokyo and we store none: no watch history, no subscriptions, no YouTube identifiers.

You can review and revoke the access that Keigo Studio, or any other application, has to your Google account at any time on the Google security settings page: https://security.google.com/settings/security/permissions.

8. Where Your Data Goes

Keigo is hosted in Japan (AWS Tokyo). Some of our providers process data elsewhere: Stripe, Google, Anthropic and Sentry operate in the United States and the European Union, and PostHog stores our analytics in the European Union.

For transfers out of the European Economic Area we rely on the European Commission's Standard Contractual Clauses, or on an adequacy decision where one exists — Japan has held an adequacy decision from the European Commission since 2019.

9. How Long We Keep It

• Account data: as long as your account exists, then deleted within 30 days of account deletion.
• Vault documents and the text extracted from them: until you delete the document, or within 30 days of account deletion. Deleting a document removes both the file and its extracted text.
• Payment and invoice records: 10 years, because French accounting law requires it. These records hold amounts and dates, never card numbers.
• Technical and security logs: 90 days.
• Analytics data: 14 months, then aggregated or deleted.
• Newsletter subscription: until you unsubscribe, plus a suppression record so we do not email you again by mistake.

You can delete your account yourself from your account settings. Deletion is permanent — we cannot bring the documents back, so export them first if you still need them.

10. Your Rights

At any time you can:

• Access the personal data we hold about you.
• Correct anything inaccurate.
• Export your data, including your Vault documents, as a ZIP archive.
• Delete your account and everything attached to it.
• Object to, or ask us to restrict, certain processing.
• Withdraw your consent for analytics or the newsletter.

Most of this is one click away in your account settings. For anything else, write to hello@keigo.tokyo — we reply within 30 days and never charge for a request. If you are in the European Union and our answer does not satisfy you, you may complain to your national data protection authority (in France, the CNIL). In Japan, you may contact the Personal Information Protection Commission (PPC).

11. How We Protect It

All traffic runs over HTTPS. Passwords are hashed with a modern algorithm and never stored in clear text. Vault files are encrypted at rest in object storage and served through signed links that expire, so a copied URL does not stay usable. Database access is restricted to the application, rate limiting and Content Security Policy headers are in place, and backups are encrypted.

No system is perfect. If a breach ever affects your data, we will notify you and the competent authority within the deadlines the law sets.

12. Children

Keigo is built for adults handling paperwork in Japan and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, write to hello@keigo.tokyo and we will delete it.

13. Changes to This Policy

We may update this policy as the service evolves. The date at the top always reflects the current version, and we announce any material change by email to account holders before it takes effect.

14. Contact

Questions about this policy, or a request about your data: hello@keigo.tokyo.

I-TECH2 — 161 Avenue du Bois de Verrieres, 92160 Antony, France.