Privacy Policy

Last updated: 15 August 2026

This is a reference translation of the Japanese original. If the two differ, the Japanese version governs.

1. Introduction

MONET LLC (the "Company") sets out this Privacy Policy (the "Policy") on how it handles users' personal information in Kizuna (the "Service").

2. Information we collect

In providing the Service, the Company collects the following information.

Information users provide when registering (name, email address, organisation name and similar)
Where a user signs in with a Google account, the information that service provides with the user's consent (email address, name or display name, profile image, account identifier)
Usage history of the Service (access date and time, features used, IP address and similar)
Information obtained through cookies and similar technologies
Content users post or register in the Service (the content of retrospectives, check-in records and similar)
Where the voice chat function is used, audio data and connection information (see "6. About voice chat")
Information entered in the enquiry form (name, email address, company name, number of users, the content of the enquiry)
Billing information where a paid plan is used (the Company does not hold payment details such as credit card numbers; the payment processor obtains and processes them directly)

3. Purposes of use

The Company uses the personal information it collects for the following purposes.

To provide, maintain, protect and improve the Service
To respond to enquiries from users
To notify users of changes to the terms and similar documents for the Service
To send newsletters, announcements and similar material about the Service
To bill for paid plans, process payments and carry out other accounting work
To provide the voice chat function
To generate impressions and other text about retrospectives automatically with AI and provide them to users
To identify users who breach the Terms of Service, or who attempt to use the Service for improper purposes, and to refuse them use
To analyse how the Service is used and apply that to new features and improvements
Purposes incidental to the above

4. Provision to third parties

The Company does not provide personal information to third parties without the user's consent, except where any of the following applies.

Where required by law
Where necessary to protect a person's life, body or property, and it is difficult to obtain the person's consent
Where particularly necessary to improve public health or promote the sound growth of children, and it is difficult to obtain the person's consent
Where it is necessary to cooperate with a national agency, a local authority or a party entrusted by them in carrying out duties prescribed by law, and obtaining the person's consent may impede those duties
Where personal information is passed to a successor as a business is succeeded through merger, company split, business transfer or another cause

The Company may also entrust the handling of personal information to outside parties, within the scope necessary to achieve the purposes of use. In that case the Company enters into an appropriate contract with the contractor and supervises them as necessary and appropriate.

5. External services we use

The Service uses the following external services. For how each service handles personal information, please see its own privacy policy.

Authentication: Google OAuth (Google LLC, United States)
Payments: Stripe (Stripe, Inc., United States / Stripe Payments Japan K.K.)
Database and authentication platform: Supabase (Supabase, Inc., United States)
Hosting and delivery: Vercel (Vercel Inc., United States)
Voice chat: LiveKit Cloud (LiveKit, Inc., United States)
AI features (automatic generation of impressions): Google Gemini API (Google LLC, United States)
Fraud prevention: Google reCAPTCHA (Google LLC, United States)
Analytics: Google Analytics (Google LLC, United States)

As set out above, the Company may provide personal data to businesses located outside Japan. Under Article 28 of the Act on the Protection of Personal Information, the Company confirms the personal information protection regime of the country where the recipient is located and the protection measures the recipient takes, and takes the necessary steps. For information on each country's regime and details of the recipients' security measures, please ask the contact in "13. Company information and contact".

6. About voice chat

The Service provides a function that lets participants talk to each other by voice during a session. When this function is used, audio data is handled as follows.

Audio data passes through LiveKit Cloud servers, which relay the call.
The Company does not record or store the audio of calls. The audio data is gone when the call ends.
When you use voice chat, the browser asks for permission to access your microphone. If you do not grant it, you cannot use voice chat, but the other features work as usual.
The call connects automatically when you enter the lobby, but the microphone starts muted. Your voice is not sent to other participants until you turn the microphone on. The host may also choose "with voice chat" or "without voice chat" at the start of a session.
Records of when calls connected and disconnected, who took part, and connection quality (none of which include the content of the audio) may be stored to handle faults and improve quality.
The function that lets you check your own voice before a call records audio briefly and plays it back. That recording is kept only inside the browser and is not stored on the Company's servers.

If a function to record or transcribe calls is added in future, this Policy will be revised and the method of collection and the purposes of use will be explained again.

7. About the AI features

The Service provides functions that automatically generate impressions and other text from the content of retrospectives and similar material. When these functions are used, information is handled as follows.

To generate impressions, the posts and similar content of the retrospective in question are sent to the generative AI service Google Gemini API (provider: Google LLC, United States). Registration details such as names and email addresses are not sent beyond what is needed for generation.
For paid use of the Gemini API, Google LLC states that input and output sent through the API are not used to improve or train its generative models. The Company provides these functions on that basis, on paid use.
What is sent may be retained by Google LLC for a certain period, for purposes such as preventing misuse.
The output of the AI is not guaranteed to be accurate or complete. Please do not use it as the basis for personnel evaluation or other decisions that significantly affect a person's rights or interests.

8. Disclosure of personal information

Where a user asks the Company to disclose their personal information, the Company will disclose it to that user without delay. However, where disclosure would fall under any of the following, the Company may withhold all or part of it, and will notify the user without delay if it decides to withhold.

Where there is a risk of harm to the life, body, property or other rights and interests of the user or a third party
Where there is a risk of significant interference with the proper conduct of the Company's business
Where disclosure would otherwise breach the law

9. Correction and deletion of personal information

Where the personal information the Company holds about a user is incorrect, the user may request the Company to correct, add to or delete it (a "correction") through the procedure the Company specifies.

Where the Company receives such a request and judges that it should be met, it will make the correction without delay.

For information that is shared with other participants by design, such as content posted within a team, the Company may be unable to meet a request for correction, depending on what is asked.

10. Suspension of use of personal information

Where a user asks the Company to suspend use of, or erase, their personal information on the grounds that it is being handled beyond the scope of the purposes of use, or that it was obtained by improper means, the Company will carry out the necessary investigation without delay.

11. Use of cookies

The Company uses cookies to improve the quality and convenience of the Service. A cookie is a small text file that a website sends to a user's computer.

Users may refuse cookies in their browser settings. In that case some functions of the Service, including signing in, may become unavailable.

The Company uses Google Analytics to understand how the Service is used. Google Analytics collects information using cookies, but this does not obtain information that identifies an individual. If you wish to disable this collection, you can use the opt-out add-on Google provides (https://tools.google.com/dlpage/gaoptout). For the terms of service and privacy policy of Google Analytics, please see Google's site.

12. Changes to this Policy

Except for matters prescribed by law or otherwise provided in this Policy, the content of this Policy may be changed without notice to users.

Unless the Company provides otherwise, the changed Privacy Policy takes effect when it is posted on this website.

13. Company information and contact

For questions about how personal information is handled, and for requests such as disclosure, please contact us below.

Company name: MONET LLC
Representative: Eiji Kajihara
Address: 3-2-11-16 Mikage, Higashinada-ku, Kobe, Hyogo 658-0047, Japan
Personal information protection manager: Eiji Kajihara
Enquiry form: https://kizuna-rs.work/enterprise-inquiry
Hours: Weekdays 10:00–17:00 JST (excluding weekends, public holidays and the year-end break)