Grantline — 助成金インテリジェンス

Foundry Labs K.K. ("we", "us", or "the Service") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our grant application advisory platform.

1. Information We Collect

1.1 Information You Provide

Account information: Name, email address, password (hashed).
Organization data: Company name, corporate number (法人番号), address, founding date, employee count, capital amount, revenue, and other business information you enter during onboarding.
Application content: Grant application text, business plans, financial documents, and other materials you upload or create within the Service.
Profile information: Mission statements, product descriptions, industry classifications, technology areas, and other profile data.

1.2 Information Collected Automatically

Usage data: Pages visited, features used, timestamps, and interaction patterns.
Device information: Browser type, operating system, IP address, and device identifiers.

2. Purpose of Use

We use the collected information for the following purposes:

Providing and maintaining the grant application advisory service.
Matching your organization with eligible grant programs.
Generating AI-assisted draft content for grant applications.
Facilitating advisor review and feedback on applications.
Improving our service through aggregated analytics.
Communicating important service updates, deadline reminders, and notifications.
Ensuring security and preventing unauthorized access.

3. Sharing of Information

We do not sell your personal information. We may share information in the following cases:

Assigned advisors: Your organization and application data is shared with advisors assigned to assist you.
AI processing: Application content may be processed by third-party AI services (e.g., OpenAI, Anthropic) for draft generation and analysis. We use these services under strict data processing agreements.
Legal requirements: When required by law, regulation, or legal process.
Service providers: With trusted cloud infrastructure providers (Google Cloud Platform, Supabase) who process data on our behalf under appropriate safeguards.

4. Data Retention

Account and organization data is retained for the duration of your account plus 3 years after account deletion.
Application data (including versions and documents) is retained for 7 years to comply with Japanese record-keeping requirements for subsidy-related documents.
Usage logs are retained for 1 year.
You may request deletion of your data at any time, subject to legal retention requirements.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption in transit (TLS) and at rest.
Access controls and authentication.
Regular security reviews and monitoring.
Data processing agreements with all sub-processors.

6. Your Rights

Under the Act on Protection of Personal Information (APPI) and applicable laws, you have the right to:

Request disclosure of the personal information we hold about you.
Request correction or deletion of inaccurate information.
Request suspension of use of your personal information.
Withdraw consent for data processing.
Export your data in a portable format.

7. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

8. International Data Transfers

Your data may be processed in servers located outside Japan (primarily in the Google Cloud Asia-Northeast1 region in Tokyo). Where data is transferred internationally, we ensure appropriate safeguards are in place in compliance with APPI.

9. Children's Privacy

The Service is intended for business use and is not directed at individuals under 18 years of age.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the Service or by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, please contact us at:
Email: info@foundrylabs.co.jp