Privacy Policy
Last updated: 2026-09-11
日本語Controller
株式会社Connect Piece (Connect Piece Inc.) operates Poprica. We explain below how we handle personal information and uploaded content.
1. Information collected
Account details: name, email, company/store and authentication information. Consent details: document versions and acceptance dates. Generation details: inputs, images, logos, references, brand kits, outputs and usage history. Payment details: identifiers and transaction records; we do not hold card numbers. Technical details: IP address, browser, device, cookies, access times and security logs. Communications: contact details, inquiries, cancellation/deletion reasons and optional comments.
2. Purposes
We process information to register and authenticate accounts; generate, save and deliver work; manage payments, coins, contracts and refunds; prevent fraud and investigate incidents; respond to inquiries and legal obligations; handle cancellation/deletion and improve service quality. Advertising and email distribution follow applicable law and the choices presented.
3. Service providers and AI
OpenAI processes images and text needed for generation/editing. Supabase provides authentication, database and storage for account, generation and brand information. Stripe processes payment identifiers and transaction information. Vercel hosts the application and processes technical access information and logs. Resend is used for operational emails, including relevant names, email addresses and message content. Google Analytics, configured Google Ads tags and Vercel Analytics process optional measurement data as described in our Cookie Disclosure.
We send only information needed for those purposes. We do not submit content for AI model training. OpenAI API input/output is not used for training by default under its published policy; abuse-monitoring retention may depend on the endpoint and settings. This is not a promise of zero retention.
4. International processing
See the international-processing details below, including the verified Supabase primary region and its current DPA. Contact our privacy office for information about particular transfers, safeguards and recipient countries.
5. Retention and deletion
Outputs and input images become eligible for deletion after 7 days on Free, 30 on Light, 90 on Standard and 180 on Business. Brand-kit logos and references remain until you delete them or the account. Account deletion makes associated generation data, images and brand kits eligible for deletion. Consent records, transactions and logs may remain for legal retention, fraud prevention, disputes or necessary backup recovery.
6. Public works and comments
Work you agree to publish may appear with its title, industry, purpose, supplied text conditions and creation time in public pages, search engines and external shares. Source images require separate permission. External caches may persist after withdrawal or deletion. Public works are exempt from ordinary retention expiry but may be removed for account deletion, rights complaints or other stated reasons. We process public works and comments for display, search, sharing, moderation, fraud prevention and rights handling. Publication consent is not AI-training consent.
7. Cookies and measurement
Necessary cookies and processing support authentication, security and payment. Optional analytics and advertising measurement load only after acceptance. Use Cookie settings to change your choice. Rejecting optional measurement does not prevent use of Poprica. See the Cookie Disclosure for recipients, information and purposes.
8. Security
We apply safeguards appropriate to the information, including encrypted transport, access management and provider selection/supervision. See our security information and contact us for details of relevant safeguards.
9. Individual requests
Subject to applicable law and identity verification, you may request access, correction, deletion or restriction of your personal information. Where applicable, you also have rights to object, data portability, withdraw consent without affecting prior lawful processing, and complain to a competent supervisory authority. Contact the privacy office for procedures and any applicable fees. We address requests under the laws that apply to you.
10. Changes
We may revise this policy for changes in law or service. Material changes will be announced through the service.
11. Company and privacy contact
株式会社Connect Piece / Connect Piece Inc. Representative: 野﨑 拳多. Privacy office: 1-2-5 Yanagihara, Kita-ku, Nagoya, Aichi 462-0845, Japan. support@poprica.app.
Our Supabase project uses the Sydney, Australia primary region (AWS ap-southeast-2). Its current DPA is incorporated into its terms without a separate signature and covers purpose-limited processing, confidentiality, access controls, security and subprocessors. Support, logs and subprocessors may involve other countries; not all processing is confined to Australia.
Other providers may process information in the United States and other countries where they or their subprocessors operate. Hosting location and recipient company location are distinct. Transfers are limited to the purposes described here. We address contractual safeguards, provider supervision and information requests under applicable law. Contact our privacy office for the recipient countries, safeguards and basis for a particular transfer; we do not represent that every provider uses the same arrangement.