Kabuken is operated by Intellics K.K. (インテリクス株式会社), corporate number 3011001142918. Registered address: Shibuya Mark City W 22F, 1-12-1 Dogenzaka, Shibuya-ku, Tokyo. Representative: Yury Leonychev. Contact for privacy requests: [email protected].

Account data: your name and email address, received from Google when you sign in with Google, or the email address you register for email and password sign-in. Passwords are handled by Firebase Authentication and are not stored by us. Plan and payment data: your plan, and billing identifiers and invoice records from Stripe. We do not receive or store your card number. Service use data: the companies and portfolios you save, and usage counts used to apply your plan's limits. The web app also has a chat feature that is no longer being developed; if you use it, the messages you send are processed by Cloudflare Workers AI to create a reply and are kept with your account. Technical data: our hosting provider, Cloudflare, processes the IP address, browser or client type and timestamp of each request to deliver the service and protect it from abuse. We also record the time of each request and usage patterns, that is, which pages, tools and companies are requested and how often, in the funnel analytics (section 5) and in per-account usage counts, to apply plan limits and to improve the service. We do not use this data to build profiles or to track you across other services. Analytics data: see section 5. Connected AI assistant data: see section 4. Data-issue reports: if you ask a connected AI assistant to send us a report about a figure in our data, we store the text of the report, the company code, the document ID, concept ID and period (context) reference if the report includes them, the time, and your account. We also keep a status and an internal note for each report. We do not store your email address or IP address with a report. Do not put personal data, passwords, API keys or confidential information in a report.

We use personal data only to: (a) create and authenticate your account; (b) provide the data you request, including through connected AI assistants; (c) apply your plan's limits and process payments; (d) send service and account notices; (e) answer support requests; (f) keep the service secure and prevent abuse; (g) understand how the service is used and improve it, using the analytics described in section 5; (h) check and correct our financial data, when you send a data-issue report; (i) meet legal obligations. We do not sell personal data. We do not use your data to train AI models.

You can connect Kabuken to an AI assistant such as ChatGPT or Claude. When you do, we receive the requests the assistant sends to Kabuken on your behalf: which tool is called, the inputs of the request (for example a company name, an EDINET code or a document ID), and the time. We do not receive your conversation with the assistant, your other messages or your files. The one exception is a data-issue report: if you ask the assistant to send one with the report_data_issue tool, we receive the report text that the assistant sends, and nothing else from the conversation. We store: the authorization you grant (sign-in grant and token records, kept as hashes); an API key if you create one (kept as a hash, with the time it was last used); usage counts per account, used to apply your plan's limits; and the data-issue reports you send (section 2). We keep funnel analytics about each request (section 5). They contain the tool name and the company code, but not the other inputs of the request. The assistant provider (for example OpenAI or Anthropic) receives the results of the requests it makes for you and handles them under its own privacy policy.

We do not use advertising cookies, and we do not sell or share data for advertising. We use Google Analytics for visit statistics, as described below. Funnel analytics: we count events such as page views, sign-ups, upgrade clicks, key creation, connected-assistant requests and payments, using Cloudflare Workers Analytics Engine, our own analytics store operated for us by Cloudflare (section 6). An event contains the event name, the part of the service (web, API, assistant connection, billing), the page or section (including documentation), language, plan, the campaign tags (UTM) of the link you came from, the host name of the site that linked to us (for example news.example.com, not the full address of the page), the tool or button, a company code, the result, the response time, and a random visitor ID or, when you are signed in, a keyed hash of your user ID. It does not contain your name, email address, IP address or free text. The documentation site (kabuken.intellics.ai/docs) sends its page views to this store as well as to Google Analytics. Purpose: to measure visits and the sign-up and upgrade funnel, and to see which sites and campaigns bring visitors. Retention: up to 13 months (section 9). Sign-up attribution: when you create an account, we store in your account record the campaign tags (utm_source, utm_medium, utm_campaign) of the link that first brought you to Kabuken, and the address of the external page you came from at sign-up, if there was one (addresses on our own site are not stored; at most the first 256 characters are kept). We use this only to see which campaigns and sites lead to sign-ups. It is kept with your account data and deleted with it (section 9). Browser storage: the web app stores a random visitor ID (kabuken_aid) and campaign tags in your browser's local or session storage, together with the sign-in session set by Firebase Authentication. You can clear them in your browser settings. Website analytics: the web app loads Cloudflare Web Analytics, which gives us page-view and performance statistics. Cloudflare states that it does not use cookies or track individuals across sites. Google Analytics: the web app, the documentation and Labs use Google Analytics 4, a service of Google LLC (United States). It sets a pseudonymous cookie ID (cookie domain .intellics.ai, shared across our sites) and sends to Google: that ID, the pages you view, events (page view, clicks on main buttons, pricing view, sign-up, checkout start, connecting an AI assistant, starting a tutorial in the documentation, joining a Labs waitlist), approximate location derived from your IP address, and device and browser type. We do not send your name, email address, user ID or other account data to Google, and advertising features and advertising personalization are off. Purpose: to measure visits and the sign-up and upgrade funnel, and to improve the service. Retention in Google Analytics: 14 months. Choice and opt-out: in the EEA, the United Kingdom and Switzerland analytics stays off until you press Allow on the banner: nothing is sent to Google before that, and you can decline. Elsewhere analytics is on by default. You can also install the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout) or block cookies in your browser. Disclosure of external transmission (Japan, Telecommunications Business Act): recipient: Google LLC; information sent: cookie ID, viewed pages, events, approximate location, device and browser information; purpose: access analysis and service improvement.

We share personal data with: (a) our service providers: Google (Firebase Authentication), Cloudflare (hosting, database, storage, AI processing, bot protection with Turnstile, analytics, email delivery), Google LLC (Google Analytics) and Stripe (payments); (b) the AI assistant provider you connect, as described in section 4; (c) authorities, when the law requires it. We do not sell personal data to third parties. Only Intellics staff read the text of data-issue reports. We do not share the report text with other third parties.

Our service providers and the AI assistant providers you connect process data outside Japan, mainly in the United States. The United States has no comprehensive federal privacy law equivalent to Japan's Act on the Protection of Personal Information (APPI). We choose providers that take security measures equivalent to those APPI requires, and we bind them by contract. You can ask us for information about these measures at [email protected].

Financial data displayed on Kabuken originates from statutory disclosure documents (such as annual securities reports) that Japanese listed companies are legally required to file. These filings are published on EDINET, the electronic disclosure system operated by Japan's Financial Services Agency; the Agency publishes the filings but does not author their contents. This is not personal information about our users.

Account data: while your account exists, and deleted within 30 days after you ask us to delete it. Request records from connected assistants, usage counts and funnel analytics: up to 13 months. Google Analytics data: 14 months. Revoked or expired sign-in (OAuth) records: 90 days. API keys and active sign-in tokens: until they expire, are replaced or are revoked. Payment and invoice records: 7 years, as Japanese tax rules require. Financial data from EDINET: kept without a time limit, because it is public information. Data-issue reports: kept while the report is open, and deleted 1 year after it is fixed or rejected.

You can disconnect Kabuken in your AI assistant's settings at any time. On your account page (https://kabuken.intellics.ai/account) you can generate a new API key, which replaces the previous one. To have a sign-in grant or key revoked, to delete your account and personal data, or to stop service emails, write to [email protected]. We process deletion requests within 30 days. To delete one data-issue report, write to [email protected] and give the report ID (it starts with DIR-) that the assistant showed you. When your account is deleted, all your reports are deleted too. Under APPI you can ask us to disclose, correct, stop using or delete your personal information. Write to [email protected]. We may need to confirm your identity first.

We protect personal data with HTTPS for all traffic, hashing of API keys and sign-in tokens, access control on our systems, and Cloudflare Turnstile bot protection when an account is created.

Kabuken is for people aged 18 or older. Registration requires you to be 18 or older. We do not knowingly collect personal data from children under 13.

We may update this Privacy Policy. We will post the new version on this page with a new date, and tell you in the platform about material changes. Questions: [email protected]. Changes in 2026-10: added the operator details, connected AI assistants, analytics and browser storage, recipients, transfers outside Japan, retention periods, security measures and children. Removed the statement that no analytics are used. Changes in 2026-10-14: added Google Analytics (data sent, purpose, 14-month retention, consent and opt-out, disclosure of external transmission). Changes in 2026-10-20: added data-issue reports (what we collect, purpose, the exception in section 4, who reads them, retention, deletion). Registration is for people aged 18 or older (section 12). Changes in 2026-11-04: section 5 now states that funnel events include the host name of the referring site, that the documentation site sends page views to our own analytics as well as to Google Analytics, and that the account record stores the first campaign tags and the sign-up referrer address.