Wolves LLC ("we," "us," or "our") handles user information in knot ai and related services (the "Service") as described below, in accordance with Japan's Act on the Protection of Personal Information and other applicable laws.
1. Business information
Business operator: Wolves LLC
Person responsible for personal information: Shizuka Kimura
Address: 2-16-18-201 Inazu, Otsu, Shiga 520-2271, Japan
2. Information we collect
We may collect the following information to the extent needed to provide the Service.
- Account information: name, display name, email address, organization, a one-way hash of your password, and information related to authentication and password resets (we never store your password in plain text)
- Subscription and payment information: your plan, amounts billed, billing dates, payment status, card brand, the last four digits of your card, and similar details. Your card number and security code are processed directly by Stripe, and we do not store them.
- Content: prompts, uploaded images, settings, generated images, API requests, and related metadata
- Usage and device information: IP address, browser and operating system, device identifiers, access times, referrers, activity history, API usage, and error and security logs
- Inquiry information: the content of your inquiries, your correspondence with us, and information needed to verify your identity
- Other information: information you choose to provide, or information we lawfully obtain in accordance with applicable law
3. How we use information
We use the information we collect for the following purposes:
- Verifying your identity, creating accounts, authenticating users, and providing the Service
- Processing image generation, storing data, measuring usage, and managing plans
- Billing, payments, refunds, accounting, and preventing fraudulent charges
- Responding to inquiries, handling outages, and sending important notices
- Improving quality, usability, performance, and security
- Detecting, preventing, and investigating unauthorized access, violations of our terms, and illegal or harmful use
- Aggregating and analyzing usage (including creating statistical information that does not identify individuals)
- Complying with legal obligations, exercising our rights, and handling disputes
- Other purposes to which you have consented
4. Input data, generated data, and AI models
- To provide image generation, your input data is sent to the AI model you select on Cloudflare Workers AI. If we add other model providers in the future, we will let you know in this policy or within the Service.
- If you submit personal or confidential information about third parties, you must obtain any required consent, provide any required notice, or have another lawful basis for submitting it.
- To prevent illegal or harmful use, respond to security issues, or comply with the law, we may use automated detection or human review to the minimum extent necessary.
5. Payment information
We use Stripe to process payments for paid plans. Card information you enter on the checkout page is collected and processed directly by Stripe and handled in accordance with Stripe's privacy policy. We may receive from Stripe the payment results, customer identifiers, card brand, last four digits, and other details needed to manage subscriptions, reconcile payments, issue refunds, and prevent fraud. For details, see Stripe's Privacy Policy.
6. Sharing with third parties
We do not provide personal data that can identify you to third parties except in the following cases:
- With your consent
- When required by law
- When necessary to protect a person's life, body, or property and it is difficult to obtain your consent
- When especially necessary to improve public health or promote the healthy development of children and it is difficult to obtain your consent
- When we need to cooperate with a national or local government body carrying out duties prescribed by law, and obtaining your consent could interfere with those duties
- In connection with the succession of a business through a merger, company split, business transfer, or similar event
7. Service providers and handling outside Japan
To the extent needed to achieve the purposes above, we entrust the handling of information to service providers including Cloudflare (web delivery, authentication, databases, image storage, AI image generation, and security), Stripe (payments and subscription management), and Resend (email address verification, password resets, and contact form emails). We select our service providers carefully and review their contracts, security measures, and handling practices as needed.
If a service provider's servers are located outside Japan, your information may be handled outside Japan. In accordance with applicable law, we put contractual safeguards in place, review our providers' systems and security measures, and take other necessary steps.
8. Cookies, access logs, and data sent to third parties
- The Service may use cookies or browser storage as needed to keep you signed in, maintain security, save settings, and for similar purposes.
- Our public website is delivered through Cloudflare, and your IP address, request information, device and browser information, and similar data may be sent to Cloudflare for security and delivery.
- When you use the checkout page, the information needed for payment and fraud prevention is sent to Stripe.
- When you sign up, reset your password, or use the contact form, the email address, name, and notification or inquiry content needed to send the email are sent to Resend. We never send your password to Resend.
- As of the last updated date of this policy, our public website does not use advertising cookies or behavioral targeting ads. If we introduce them in the future, we will provide the required notice, obtain consent, and update this policy.
9. Security measures
We take reasonable security measures appropriate to the nature of the information and the risks involved, including access controls, credential management, encrypted communications, log monitoring, oversight of service providers, and incident response procedures. However, we cannot fully guarantee the security of communications or storage over the internet.
10. Retention
We keep information only for as long as necessary to fulfill the purposes of use, meet contractual obligations, maintain security, handle disputes, and comply with legal retention requirements, after which we securely delete or anonymize it. Retention periods vary depending on the type of information, your settings, your plan, and legal requirements.
11. Requests for disclosure, correction, and suspension of use
Under applicable law, you may request that we notify you of the purposes for which we use your retained personal data; disclose it; correct, add to, or delete it; stop using or erase it; stop providing it to third parties; or disclose records of its provision to third parties. To make a request, please email support@knot-ai.xyz. After verifying your identity, we will respond in accordance with the law. If we cannot fulfill a request under the law, we will explain why.
12. Minors
If you are under 18, please obtain the consent of a parent or other legal guardian before using the Service. If we learn that we have collected information from a minor without a legal guardian's consent, we will take appropriate action.
13. Changes to this policy
We may revise this policy if laws, the Service, or our handling of information change. We will notify you of significant changes before they take effect, by posting a notice in the Service, by email, or by another appropriate method. Where the law requires consent, we will obtain it in the prescribed manner.
14. Contact
Business operator: Wolves LLC
Email: support@knot-ai.xyz