Replista Privacy Policy

Last Updated: December 28th, 2024

Welcome to Replista! This Privacy Policy explains how BIT Inc. (株式会社ビーアイティー) ("Replista," "we," "us," or "our") collects, uses, shares, and protects information about you when you use our AI chatbot service, our website at https://replista-website.web.app/, and any other online products and services (collectively, the "Services").

By using our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not use our Services.

1. Information We Collect

We collect information in a few different ways, which we categorize as follows:

A. Information You Provide to Us

• Account Information: When you register for an account, we collect information such as your name, email address, and password.
• Payment Information: For paid subscription plans, we collect billing information such as your name and billing address. We use a third-party payment processor, Stripe, Inc., to handle payment transactions. We do not directly collect or store your credit card number.
• Communications with Us: When you contact us for customer support or any other inquiry, we collect the content of your communications.

B. Information We Collect Automatically When You Use the Services

• Log and Usage Data: We log technical information about your use of the Services, including your IP address, browser type, operating system, device information, pages viewed, features used, and timestamps of your access.
• Information from Cookies and Similar Technologies: We use cookies and similar tracking technologies to help us operate and provide our Services. For example, we use them to keep you logged in, remember your preferences, and analyze the performance of our Services.

C. Information We Collect from Third Parties

• Information from Third-Party Services: When you choose to connect your Instagram account to our Services, we receive information from Meta Platforms, Inc. This includes your Instagram profile information (e.g., username, user ID, profile picture) and an access token necessary to provide our Services. We only collect information from these services that you authorize us to access.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide, Maintain, and Improve our Services: To create and manage your account, provide customer support, process payments, and develop new features.
• To Ensure Safety and Security: To monitor for and prevent fraudulent, unauthorized, or illegal activity and to enforce our Terms of Service.
• To Communicate with You: To send you technical notices, updates, security alerts, and administrative messages.
• For Marketing Purposes: To send you promotional communications about our products and services. You may opt out of receiving promotional emails at any time by following the instructions in those emails.
• To Comply with Legal Obligations: To comply with applicable laws, regulations, legal processes, or governmental requests.

3. How We Share and Disclose Your Information

We do not sell your personal information. We may share your information only in the following limited circumstances:

• With Your Consent: We may share your information with your consent or at your direction.
• With Our Service Providers (Sub-processors): We share information with third-party vendors and service providers who perform services on our behalf. Our core data communications occur between our server-side applications (hosted on Google Cloud Functions) and these services:
  • Cloud Infrastructure: Google LLC. Our Services are built on Google Cloud Platform and Firebase. All data you provide to us, including your account information and the content you manage, is stored exclusively on Firebase Firestore and Firebase Storage. We do not store your data outside of Google's secure infrastructure.
  • Platform Integration: Meta Platforms, Inc. We exchange data with the Instagram Graph API to enable the core functionality of our Services.
  • Payment Processing: Stripe, Inc. To process payments for our paid plans.
  • Communication Tools: Slack Technologies, LLC. To send service-related notifications and alerts.

  For a complete list of our primary service providers, please see our Service Providers page.

• For Legal Reasons: We may disclose your information if we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process, or governmental request.
• During a Business Transfer: If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Services. We may also retain your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information under applicable data protection laws (such as GDPR and CCPA/CPRA). These may include the right to:

• Access the personal information we hold about you.
• Request that we correct inaccurate information.
• Request that we delete your personal information.
• Restrict the processing of your personal information.
• Receive your information in a portable format.

You can exercise most of these rights through your account settings. For any other requests, please contact us using the details below. We do not "sell" or "share" your personal information as those terms are defined under the CCPA/CPRA.

6. International Data Transfers

Our Services are operated from Japan. If you are located outside of Japan, please be aware that your information will be transferred to, stored, and processed in Japan and other countries where our service providers are located (such as the United States).

We ensure that any such international transfers comply with applicable data protection laws by relying on appropriate transfer mechanisms, such as the Standard Contractual Clauses (SCCs), for transfers of data from the European Economic Area, the UK, and Switzerland.

7. Security

We take the security of your data very seriously. We implement and maintain appropriate technical and organizational measures to protect your personal information. Because all of your data is stored on Google Cloud Platform and Firebase, we leverage Google's world-class security infrastructure, including automatic at-rest encryption, strong access controls, and physical security of data centers.

8. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly.

9. Changes to This Privacy Policy

We may change this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on our website and, in some cases, by sending you an email notification. We encourage you to review the Privacy Policy whenever you access the Services to stay informed about our information practices.

10. Contact Us