Privacy Policy

1. Scope and personal information handler

This policy explains how personal information and other user information are handled in Koyu's architectural planning service, related websites, APIs and connected features. The personal information handler is the Koyu operator identified in, or disclosed by the method described in, the Specified Commercial Transactions Act Disclosure.

Koyu does not sell or rent personal information or User Content and does not use tracking technology for advertising. Privacy inquiries and requests to exercise rights are accepted through our contact desk.

2. Information we collect

Accounts and teams

• Email addresses, display names, authentication methods and user and team identifiers
• Login, session, membership, permission and plan records
• Document versions, acceptance revisions, choice timestamps and collection screens if a consent-recording feature is introduced

Sites, projects and plans

• Project and plan names, muro files, floors, rooms, drawings, 3D views, area schedules, saved versions and exports
• Design policies, instructions, conversations, uploads, evaluations and inquiry content
• Site polygons, coordinates, addresses and place names, map extents, road access, zoning and other planning conditions

AI generation and revision records

• Design policies, generation and revision instructions, and the current muro files and conversations needed for generation
• Models, reasoning depth, speed, attempt counts, token usage, duration, cost estimates and execution status
• Diagnostic codes, written layers, applied and rejected edits, completion status, design decisions and reasoning summaries
• Generated files, saved versions, subsequent revisions and evaluations of generation results

Usage, devices, payments and support

• Page views, feature usage, performance and aggregated service analytics
• IP addresses, browser and device types, timestamps, requests, errors, security and abuse prevention records
• Customer identifiers, subscriptions, invoices, payment and refund status and limited card information where paid features are offered
• Support communications and information users include in them

3. Sources of information

Koyu obtains information from users, members of the same team, browsers and devices during use, and authentication and payment providers selected by users. Maps, addresses, zoning and regulatory information based on addresses or coordinates may be obtained from the Geospatial Information Authority of Japan, the Ministry of Land, Infrastructure, Transport and Tourism, other public sources or Koyu's regulatory service.

4. Purposes of use

Changes to purposes of use are limited to purposes reasonably related to the previous purposes, with necessary notice. For new purposes beyond that relationship, we seek new notice or consent as required by law.

5. AI processing, internal evaluation and training

When users explicitly start generation or revision, Koyu sends the information necessary for that processing to commercial AI providers. Simply viewing a page, drawing a site or opening a saved plan does not initiate a generation request.

Koyu retains the generation records described in Section 2 to save and return results, keep generation budgets and billing accurate, investigate failures and evaluate quality and safety. Authorized personnel may review generation records as necessary for support, incident and security response or documented quality and safety evaluation. Routine analysis prioritizes aggregated, minimized or pseudonymized information.

Ordinary use does not add User Content to Koyu's training datasets. Internal quality evaluation and model training or further training are different uses. Details are described in the AI & Data Policy.

6. A future Koyu Loop

Koyu Loop is the name of a voluntary mechanism under consideration for using contributed architectural plan examples to improve Koyu's design intelligence. We are not currently accepting training data contributions. If it is launched, we will request an explicit choice in advance, separate from ordinary terms acceptance or acknowledgment of a privacy notice, after specifying the project portions, dataset version, purposes, training methods, models, recipients, retention periods and limitations on withdrawal.

Stopping future use distinguishes removing raw contributed data from subsequent datasets from whether its influence can be removed from an already trained model. These technical limitations will be displayed before a choice is made, rather than after contribution.

7. Storage and processors

Processors handle information under their contracts with Koyu and may use subprocessors. Koyu may also disclose information where legally required, to protect people or services, to investigate fraud or security incidents, or for a business transfer with appropriate safeguards.

8. Processing outside Japan

The main project database is configured in a Japan region, but providers and their subprocessors may process information in Japan, the United States or other countries. Before starting material overseas processing, Koyu reviews the provider, purpose, information about processing countries, contractual protections and available data controls. The legal systems of processing countries may differ from those of a user's country of residence.

9. Browser and device-local information

Koyu may store device-local plans, unsynchronized changes, display settings, selected teams and authentication-state indicators in browser storage. Plans held only on a device are not added to an account until the user chooses server-side processing such as saving, synchronization, generation or screening. Koyu cannot remotely erase browser storage on another device.

Requests for map tiles, address searches, reverse geocoding, zoning or regulatory information are sent to their respective providers, which may receive the specified map extent or coordinates and ordinary network information. Device location is not used unless a future feature requests permission at that time.

10. Retention and deletion

• Active accounts and personal teams: Retained while the Service is provided and deleted from the active database when account deletion is completed.
• Shared teams: Retained under team control when a member leaves or deletes an account, with corresponding creator identifiers removed where the data structure permits.
• Generation and usage ledgers: Retained with the team to audit usage limits, refunds, quality and security. Deleted when a personal team is deleted; shared team records remain with that team.
• Encrypted disaster recovery backups: Expire automatically within a maximum of 30 days after deletion and are not used to restore individual accounts.
• Security and abuse prevention records: Generally no more than 90 days, but retained as necessary while addressing an incident, legal requirement or specific claim.
• Aggregated analytics that do not identify individuals: Generally no more than 12 months.
• Payment and tax records: The statutory periods for accounting, tax, payments and disputes.
• Future Koyu Loop contributions: The period specified on the separate choice screen.

Account deletion requests are accepted through our contact desk. Identity verification, shared team management rights, unpaid amounts, legal retention obligations or specific disputes may prevent immediate deletion of some information. In that case, we restrict its use and delete or minimize it after the reason no longer applies.

11. Security measures

Koyu uses encrypted communications, account and team access controls, database row-level policies, server-only administrative credentials, provider access controls and logging. However, no service can guarantee absolute security. Protect your credentials, check recipients of public links and exports, and report suspicious events promptly.

12. User choices and rights

Depending on applicable law, users may request disclosure of personal information, notification of purposes, correction, addition, deletion, suspension of use, erasure, cessation of third-party provision or provision in electronic form. Koyu verifies identity and explains any inability to comply fully or partially due to records controlled by other teams, third-party rights, legal exceptions or similar reasons.

13. Children's information

Koyu is not a service directed at children. Minors may use it only with the involvement and consent of a parent or equivalent person as required by law. Do not submit children's personal information to AI features without necessity, a legal basis and appropriate authority.

14. Changes and inquiries

Each published version has a document version and effective date, and previous versions remain at version-specific URLs. Material changes to information handled, purposes, AI providers, overseas processing or retention periods are notified within the Service or by email before taking effect where necessary. We request a new choice before applying a materially different training purpose to previously collected User Content.

Inquiries, complaints and requests to exercise rights may be sent to our contact desk; service and security matters may be sent to our contact desk.

Company website inquiries and analytics