Privacy Policy

We collect the following types of information: - Account information: name, email address, and authentication credentials (Google account or email/password) - Usage data: API call logs, query patterns, feature usage, and performance metrics - AI processing logs: records of data cleansing, normalization, masking, and vectorization operations - Technical data: IP address, browser type, device information, and access timestamps

We use collected information for the following purposes: - Service operation: providing, maintaining, and improving NW DB - Billing: processing payments and managing subscriptions via Stripe - Security: detecting and preventing fraud, abuse, and security incidents - Improvement: analyzing usage patterns to improve the service and develop new features - Communication: sending service-related notices, updates, and support messages

All customer data is stored in Google Cloud Platform (GCP) asia-northeast1 region (Tokyo, Japan). Data is encrypted at rest using AES-256 encryption. Data in transit is encrypted using TLS 1.3. Enterprise plan customers may opt for Customer-Managed Encryption Keys (CMEK) for additional control.

NW DB uses AI agents for automated data processing including cleansing, normalization, masking, vectorization, and metadata extraction. AI processing is performed using Google Vertex AI (Gemini models and Embeddings API). Your data processed by AI agents is NOT used for model training by Google or any third party. You can disable individual AI agents at any time through the dashboard.

NW DB uses the following third-party services: - Google sign-in: user authentication (Google account or email/password) - Polar Software, Inc. (Merchant of Record): payment processing and subscription management for self-serve plans (Hobby / Pro / Team / Scale) - Stripe: payment processing for Enterprise plans (custom invoicing) - Google Cloud Platform: infrastructure, compute, storage, and AI services - Google Analytics 4: anonymized visitor analytics (IP anonymized, no ad signals, only after the user accepts cookies) - Google Search Console: site ownership verification and indexing metrics (public-page metadata only) Each third-party service has its own privacy policy governing the use of your data.

Data associated with active accounts is retained for the duration of the account. Upon account deletion or service termination, data is available for export for 30 days. After 30 days, all data is permanently and irreversibly deleted from our systems and backups. Usage logs and audit records are retained for 90 days for Standard plan and configurable for Enterprise plan.

You have the following rights regarding your data: - Access: request a copy of your personal data - Correction: request correction of inaccurate data - Deletion: request deletion of your data and account - Export: export your data in standard formats (JSON, CSV, SQL dump) - Portability: receive your data in a machine-readable format To exercise these rights, contact us at nupwhite@nupwhite.com.

NW DB is compliant with the EU General Data Protection Regulation (GDPR) and the Japanese Act on the Protection of Personal Information (APPI). We serve as a data processor for customer data stored in NW DB. For GDPR purposes, NUP WHITE Inc. is the data controller for account and usage data. Data Processing Agreements (DPA) are available for Enterprise plan customers.

NW DB uses the following cookies: [Essential cookies — used without consent] - Locale preference: stores your language preference (en/ja) - Authentication session: maintains your login state - Consent state: stores your cookie consent choice [Optional cookies — only with consent] - Google Analytics 4 (_ga, _ga_*): anonymized visitor analytics. IP anonymization enabled, advertising signals disabled. Consent Mode v2 compliant — no signals are sent until you accept. A cookie banner appears on first visit so you can choose Accept / Reject. You can change this choice anytime by clearing site data. We never use advertising cookies, tracking identifiers, or sell data to third parties.

NW DB is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child under 16 has provided us with personal information, please contact us at nupwhite@nupwhite.com.

We may update this Privacy Policy from time to time. We will provide at least 30 days notice of material changes via email to the address associated with your account. The updated policy will be posted on this page with a new "Last updated" date.

If you have questions about this Privacy Policy or our data practices, please contact us: NUP WHITE Inc. Email: nupwhite@nupwhite.com