Return to service

DIRECTUNE · SERVICE INFORMATION

Privacy Policy

MAZARIBA合同会社 (the “Company”) handles user information in providing DirecTune(β) in accordance with Japan's Act on the Protection of Personal Information and other applicable laws.

1. Information we collect

  • Identifiers, verified email addresses, and display names obtained through Google sign-in; account permissions and access status; and sign-in dates and times.
  • When you choose YouTube linking: channel information, upload records, and an encrypted refresh token. The refresh token is used only for upload linking and is deleted when you disconnect.
  • Project editing data; uploaded and generated photos, videos, music, and text; media names and sizes; storage dates and times; and deletion status.
  • Prompts entered for AI, generation requests and request IDs, usage history, external API charges, Credit grants, usage, reservations and expiry dates, and monthly subscription status.
  • Inquiry details; records of administrative actions, incidents, and safety checks; request identifiers; and browser and other operational information.
  • IP addresses, cookies, device information, and access information processed by hosting, authentication, and analytics providers for communications and abuse prevention.

We do not collect Google passwords. Eligibility is limited to Japanese nationals accessing the service from within Japan, but we do not currently have a system that routinely collects passport or identity document images from all users.

2. Purposes of use

We use information for authentication and account management; video editing, storage, and export; uploading to the YouTube channel you choose; AI generation and writing assistance; Credit calculations; prevention of fraudulent or harmful use; management of storage capacity and expiry; device checks; incident investigation; responses to inquiries; service improvement; and legal compliance.

3. Information sent to AI and external services

We send and store information with the following providers to the extent necessary to perform the features. Obtain any required authorization and consent before entering third-party personal information or confidential information.

Provider and purposeMain information handled
Remotion: verification of video export feature usageWhen creating preview or final videos in the browser, usage information such as the IP address, domain name, development or production environment, and output type is sent. Video and audio content and media names are not sent. This transmission is part of rendering and is separate from GA4 analytics. For details, see Remotion's explanation.
Google: authenticationAuthentication requests, Google account information, authentication cookies, and related information.
OpenAI: safety checksInput prompts and the content of uploaded and generated images. Images are sent from the server without creating public links.
fal and generation model providers: video, image, and narration generationGeneration prompts, settings, results, request IDs, and usage charges.
OpenRouter and the selected model providers: writing assistance and music generationEntered text, editing instructions, generation settings, model responses and music, request IDs, and usage charges.
OpenAI Sites and Cloudflare: hosting and storageStored account, project, media, Credit, and other data; communications information; and operational logs.
Google Analytics 4: usage analyticsWith consent, page types, viewing times, browser and device information, analytics cookies, and related information.

These processes may involve facilities or providers in the United States or other countries outside Japan, where different personal information protection rules may apply. We provide information, obtain consent, supervise service providers, and take other measures as required by law. For each provider's current practices, see Google、OpenAI API data controls、fal、OpenRouter、Cloudflare. We do not guarantee that all providers have the same retention periods or terms for use of data in training.

4. Cookies and analytics

We use cookies and browser storage necessary to maintain sign-in, authenticate users, and store preferences. Pre-use checks such as WebGL checks are used to enable editing and configure previews.

GA4 is managed through the Google tag (gtag.js). We load the tag only when users allow analytics, and measure homepage views, registration, the start of video creation, and actions to download finished videos. You can create videos even if you decline analytics. Change your choice under “Analytics preferences.” To prevent duplicate measurement of registration and video creation starts, we store the operation time and submission acceptance status in our database. Unsent events are accepted for submission only within 24 hours of occurrence and only when analytics is allowed. The measurement events we send do not include email addresses, prompts, media names, project IDs, or URL query parameters. We do not enable Google signals for advertising or ad personalization.

We use Google Search Console to verify site ownership and understand search performance. The verification meta tag itself is not a tracking tag that collects visitors' personal information.

5. Retention and deletion

Free-plan media becomes unavailable 7 days after storage and is deleted progressively. Physical deletion may take time to complete. Monthly subscribers are not subject to this expiry. As a rule, a 7-day grace period applies when returning from a monthly subscription to Free. Project editing information and deletion records may remain after media is deleted.

As a rule, diagnostic logs are pruned to a maximum of 7 days or the latest 10,000 entries. Image safety checks record media identifiers, hashes, decisions, and check times; image content and prompts are not recorded in diagnostic logs. Account information, Credit and usage history, inquiries, and audit records are retained for as long as needed to provide the service, address abuse, resolve disputes, meet legal retention requirements, and fulfill other necessary purposes. Information no longer needed is deleted appropriately. Information already sent to external services is also subject to their terms.

6. Security and disclosure to third parties

We take measures including authentication, owner and administrator permission checks, encrypted communications, separation of secrets from source code, and records of operations and incidents. Administrators access information to the extent necessary for operations. Except for the service-related processing described in this policy, we do not provide personal data to third parties without the individual's consent unless permitted by law.

7. Access, correction, suspension of use, and account closure

Contact us below to request access to, correction, suspension of use, or deletion of your information, or to close your account. We verify your identity and respond in accordance with applicable law. If some information cannot be deleted for accounting, abuse prevention, or other reasons, we explain the scope and reasons. Do not email more identity documents than necessary.

8. Policy changes and inquiries

If our practices change, we announce the changes and their effective date through the service and seek consent where necessary.

Operator:MAZARIBA合同会社
Representative: 内田 勉
Address: 4-15-7 Sengoku, Bunkyo-ku, Tokyo 112-0011
Contact:uchida@mazariba.co.jp
Company information:MAZARIBA合同会社 official site