PRIVACY
POLICY

• 01

  Information you provide directly

  Name, email address, phone number, affiliation (company name, department, title), industry, employee size, business challenges, inquiry details, form input information, and business information shared during interviews or meetings.

• 02

  Information collected automatically through use

  Access logs (IP address, browser information, access timestamps), cookie data, page views and performance data, and error information. Collected for the purpose of improving service quality and preventing unauthorized use.

• 03

  Information generated or stored through AI features

  AI prompts and outputs (summaries, requirement reviews, proposal drafts, chat histories, etc.), intermediate data generated through AI-assisted operations, and text from documents you share for analysis.

• 04

  Payment information (upon future introduction of payment features)

  If we introduce online payment features in the future, credit card information will be processed directly by the payment processor and not stored on our servers. We will only retain customer IDs and contract IDs.

When we share

When you consent / when required by law / when necessary to protect life, body, or property and consent is difficult to obtain / when provision to processors is necessary.

Principal processors (located in the United States)

Vercel, Inc. (hosting, object storage, and analytics) / Neon, Inc. (database) / Clerk, Inc. (authentication) / Resend, Inc. (email delivery) / Anthropic, PBC (AI model provider) / OpenAI, LLC (AI model and speech provider) / Upstash, Inc. (rate limiting and caching). All entities are located in the United States.

Principal processors (located in Japan)

Google Workspace (Google Cloud Japan G.K.: operational infrastructure and email) / other processors such as accounting and labor management as necessary.

Oversight

We review processors' published DPAs, terms, and security information, and maintain a register of applicability to our plan, data categories, and retention and deletion conditions.

• 01

  AI models used

  We primarily use Anthropic Claude, and supplementarily OpenAI GPT series. The providers and models used by our AI features may be changed without prior notice for service-quality improvement.

• 02

  Information transmitted to AI providers

  When you use AI features, prompts you enter, related business information, and text from documents you share are transmitted to AI providers to the extent necessary.

• 03

  Use of data for AI model training

  We operate AI features so that, under each AI provider's API terms, data transmitted via API is not used for training AI models. Providers may retain data for a certain period for the purpose of detecting and preventing abuse.

• 04

  Human verification and final decision-making

  We never use AI output as-is for decisions. For important decision-making areas — contracts, sales judgments, and operational improvement decisions — our design requires that final decisions be made by humans. See also our Security Policy for details.

• 01

  Organizational safety management measures

  Appointment of a Personal Information Protection Manager, maintenance of rules concerning the handling of personal data, and conduct of periodic inspections and audits.

• 02

  Human safety management measures

  Education and training on personal information protection for employees and processors, and the establishment of work rules and service contracts imposing confidentiality obligations.

• 03

  Technical safety management measures

  TLS encryption of all communications, database access control, environment-variable management of API keys and secrets, webhook signature verification, and permission design based on the principle of least privilege.

• 04

  Awareness of the external environment

  We investigate the personal-information-protection regimes (such as the U.S. CLOUD Act) of the jurisdictions in which personal data is stored (cloud services located in the United States) and conduct risk assessments.

• 01

  Right to disclosure

  You may request disclosure of your personal information that we hold. You may specify the method of disclosure (provision of electromagnetic records or delivery of paper documents).

• 02

  Disclosure of third-party provision records

  You may request disclosure of records of provision to third parties or records of receipt from third parties.

• 03

  Correction, deletion, and suspension of use

  You may request correction, deletion, suspension of use, or suspension of third-party provision of your personal information.

• 04

  Data export and account deletion

  You may export your data and request deletion of your account and related data from the account settings screen. Access is suspended after a deletion request, and deletion follows identity and retention-obligation checks.

For the above requests, please contact hello@zerobizax.com. After identity verification, we will respond within a reasonable period (in principle, within two weeks).

The Japanese version of this document is the legally binding version. The English translation is provided for reference only.

Last updated: July 18, 2026