"Personal Information" refers to "personal information" as defined in the Act on the Protection of Personal Information — information about a living individual that can identify the specific individual through descriptions such as name, date of birth, address, phone number, email address, etc.
We collect the following information when providing the Service:
| Category | Items | Method |
|---|---|---|
| Account info | Name, email, password hash | At signup |
| Google integration info | Google account ID, email, display name | At Google sign-in |
| Payment info | Stripe customer ID, subscription ID, charge history (we don't store card numbers) | When subscribing to a paid plan |
| Payout info | Stripe Connect account ID (bank info held by Stripe) | When registering for creator payouts |
| Usage info | Agent settings, chat history, token usage, IP address, browser info, login history | While using the Service |
| Agent Store info | Listing content, reviews/ratings, favorites | When using Agent Store |
| Group chat info | Group join history, member list, invite token, host ID, message reactions, read positions | When using group features |
| Transfer info | Group transfer amount, timestamp, sender/recipient ID | When using "Send to group" |
| Referral info | Referral code, referrer/referee ID, granted balance history | At signup via referral link |
| Integration info | Google access token (when Sheets integration is enabled), Chrome extension device token | When integrations are enabled |
| Mobile device info | FCM/APNs push token, OS, app version | While using the mobile app |
We use collected personal information for the following purposes:
We do not provide personal information to third parties without user consent, except in the following cases:
The Service uses the following entities as service providers, and they handle personal information to the extent necessary for operations:
| Entity | Use | Country |
|---|---|---|
| Anthropic, PBC | AI inference (Claude API) | USA |
| Stripe, Inc. | Payment processing / payouts | USA |
| Supabase, Inc. | Database | USA |
| Render Services, Inc. | Server hosting | USA |
| Resend, Inc. | Email delivery | USA |
| Google LLC | OAuth authentication | USA |
Each provider takes appropriate safeguards for cross-border transfer of personal information.
The Service uses cookies and localStorage to maintain authentication state, analyze usage, etc. If you refuse cookies, some features (such as staying signed in) may not work. For users in the EU/UK, we display a consent banner on first access and do not place analytics cookies without consent.
This Policy may be changed without notice to users. Changes take effect when posted on the Service.
For questions about this Policy, please contact:
| Entity | PROTOCOL Inc. |
|---|---|
| Personal info officer | Kota Takeuchi, Representative Director |
| kota.takeuchi@protocol.ooo |