Privacy policy
WELLSHARE Co., Ltd. (“we”) explains here how we handle personal data in Jidosei, our AI assistant service, including the website jidosei.com, the web app app.jidosei.com and the mobile apps (the “Service”). We comply with Japan's Act on the Protection of Personal Information (“APPI”) and, where it applies, the EU General Data Protection Regulation (“GDPR”) and other applicable laws.
1. Controller
WELLSHARE Co., Ltd. (Toeikazoku Group)
Contact: [email protected]
Representative Director: XU Zheng (許 征)
Address: Shinko Building 202, 4-7-28 Fujimi-cho, Tachikawa-shi, Tokyo 190-0013, Japan
Phone: +81 42-808-8061 (weekdays 9:00–17:00 JST)
2. Data we collect
- Account data: email address, display name, password (stored only as a one-way hash), passkey public-key data, language and display settings.
- Content: your conversations with the AI, instructions, files and images you send, outputs the AI creates, memory, tasks and skill settings.
- Cloud computer data: files created or stored on your dedicated cloud computer, and browser sign-in states there.
- Third-party credentials: website sign-ins you choose to save. They are stored encrypted and used only to act on your instructions.
- Usage and billing: token usage, free allowance and balance, redemption codes used, and in future payment data (processed by a payment provider; we do not hold card numbers).
- Technical data: IP address, browser and device type, access times, error logs and security records.
- Enquiries: what you send us by email or other channels.
3. Purposes and legal bases
| Purpose | Legal basis under GDPR |
|---|---|
| Providing the Service (answering you, running tasks, operating your cloud computer, keeping memory) | Contract (Art. 6(1)(b)) |
| Authenticating accounts, preventing abuse and attacks, keeping the Service secure | Legitimate interests (Art. 6(1)(f)); contract |
| Measuring usage and managing allowances and charges | Contract; legal obligation (Art. 6(1)(c)) |
| Important service notices and replying to enquiries | Contract; legitimate interests |
| Investigating faults and improving the Service (including non-identifying statistics) | Legitimate interests |
| Website preference cookies (language and display mode) | Consent (Art. 6(1)(a)) |
We do not provide your conversations or outputs to ourselves or any third party to train AI models.
4. AI processing
To answer your instructions, we send the relevant conversation content and attachments to AI model providers for processing, limited to what is needed to produce the response. AI output can be wrong; please check anything important yourself. We ask for your consent to AI data processing when you start using the Service.
5. Processors and disclosure
We do not disclose personal data to third parties without your consent except where the law requires it. We use the following kinds of service providers under contracts that require appropriate safeguards:
- server and data-centre providers (Tokyo, Japan)
- AI model providers (generating responses)
- content delivery and security providers (CDN and bot protection, e.g. Cloudflare, Inc.)
- email delivery providers (verification codes and notices)
- storage providers (backups and file storage)
- payment providers (once paid plans are introduced)
6. International transfers
Service data is mainly stored and processed on servers in Japan, which the European Commission has recognised as providing an adequate level of protection. Where a provider processes data outside Japan and the EEA (for example in the United States), we use the Standard Contractual Clauses or other appropriate safeguards. On request we provide the information required under the APPI about transfers to third parties in foreign countries, including the country and its data protection system.
7. Retention
- Account data and content: while your account is active. After you ask us to delete it or delete your account, we delete it within 30 days as a rule (copies in backups are erased when those backups expire).
- Billing and usage records: for the period required by law (accounting records up to 7 years).
- Technical logs and security records: 90 days as a rule.
8. Security
We use organisational, personnel, physical and technical measures, including encryption in transit, encryption at rest for conversations, credentials and memory, separation of each customer's data and cloud computer, least-privilege access and audit logs.
9. Your rights
You may ask us to disclose, correct, add to or delete your personal data, to stop or erase its use, or to stop disclosing it to third parties, and, where the GDPR applies, to receive it in a portable format, restrict processing, object to processing and withdraw consent. You can view and delete most conversations, memory and files directly in the app. For other requests, contact us at the address above; we will verify your identity and respond without undue delay as the law requires.
If you live in the EU or EEA, you also have the right to lodge a complaint with the data protection authority in your country.
10. Children
The Service is not intended for anyone under 16. If we learn that we hold personal data of someone under 16, we delete it promptly.
11. Cookies
For cookies on the website, see our cookie policy. The web app uses only the cookies needed to keep you signed in and secure.
12. Changes
We publish any change to this policy on this page and announce significant changes in the Service or by email. If a change requires new consent to AI processing, we will ask you again.