Privacy policy

1. What we collect

Your account email, payment records, the videos, images and voices you make, files you put in My files, the Stock items you publish, the faces, voices and products you register, and usage and error logs. Usage logs include when you sign in and out, how you signed in (email code or Google), which app you used, your device type (operating system and browser), your country, and your IP address. In the sign-in history, a daily job deletes the IP address once it is older than 90 days and keeps only its range, with the last part removed. Separate security logs used to investigate abuse also keep IP addresses; their IP addresses are deleted 30 days after you delete your account. We also record which screens you open, how long each screen is shown, and key actions; these screen records contain no IP address. We do not record the text you type, file names or search terms. We also record the videos you play (on which screen, how far you watched and where you paused).

2. How we use it

To run the service, bill you, prevent abuse and improve quality. We never sell it to third parties for advertising. We use sign-in and usage records to learn which features are used and how much, so we can improve the service, and to detect suspicious sign-ins. We store the bank account information registered to receive referral program rewards (bank and branch, account type and number, account holder name, and invoice registration number) encrypted, and use it only to pay those rewards and to check payouts (section 11 of the referral program terms).

3. Companies that process data for us

To run the service, we have the following companies handle part of your personal data (their role and the main country where they handle it in brackets): Amazon Web Services (servers and databases, United States), Cloudflare (file storage, email delivery, usage records, United States), Modal (assembling videos, generating video and reading Japanese aloud, United States), RunPod (generating video made in batches and finishing 3D videos, United States), OpenAI, Google and fal (generating text, images, video and voice with AI, United States), Google (access analytics with Google Analytics, United States; the external transmission in section 10), xAI (reading X posts and search queries, United States), ElevenLabs (cloning your own voice, United States; processed in the United States and Asia), Kling AI (video when you choose Kling, people included, and registering a voice when you choose Kling 4 to have an avatar speak in its own voice, Singapore; run by China’s Kuaishou group), ByteDance (video when you choose Seedance; run by a Chinese group), Higgsfield (video when you choose Genjutsu, images with faces included, United States; run by Higgsfield Inc., and data may go to its contractors in other countries), TypeSafe (checks by Jev; receives your text, display name, scripts and transcripts, and AI-written descriptions of images, video and audio, United States), Tripo (generating 3D models; the countries where it handles data are not published; run by Holymolly Ltd in Hong Kong and developed by China’s VAST; receives data through fal), Meta (cutting out images and video, United States), Stripe (payments, United States) and Sentry (error records, United States; no email address or name is sent).

We send AI providers only what is needed to make your work. Providers may keep what we send for a limited time to watch for abuse (for example, up to 30 days at OpenAI; as section 5 of the terms says, ElevenLabs keeps a cloned voice for up to 3 years). Services you connect yourself (such as Slack, TikTok or YouTube) receive only what you tell us to send. We do not send data to advertising tools. We use Google Analytics for access analytics (section 10).

We use no cookies for the usage records we keep ourselves, only your browser’s local storage. Access analytics (Google Analytics) sets cookies that tell browsers apart (names starting with _ga, for up to 2 years) on the app, this site and the help site (section 10). On this company site (takepilot.ai), the only cookie we set is when you ask for a pre-registration code (signing in to the app sets its own cookies to keep you signed in): it makes the code work only in the browser that asked for it (named __Host-tpwl, it expires after an hour), and it is never used for advertising or analytics.

4. Transfers to third parties in other countries

Most of the companies in section 3 are outside Japan, and your data is handled mainly in their countries (Tripo does not publish its countries; see the Hong Kong and China paragraph below). Every one of them is bound, directly or through fal, by contract (terms of service or a data processing agreement) not to use the data beyond the purpose we give it and to keep it secure. We check, through those contracts and their published policies, that each company has a system that takes measures equivalent to those required by Japan’s Act on the Protection of Personal Information. We use Tripo through fal and have no direct contract with Tripo; for Tripo, we check through our contract with fal and the terms Tripo publishes.

United States: there is no general federal privacy law; there are federal laws for specific sectors and state laws (such as the California Consumer Privacy Act). The Federal Trade Commission (FTC) acts against unfair or deceptive practices.

Singapore: there is the Personal Data Protection Act (PDPA). Hong Kong: there is the Personal Data (Privacy) Ordinance (PDPO). China: there is the Personal Information Protection Law (PIPL), and the government may require companies to hand over data under the law. Kling AI is a Singapore company run by China’s Kuaishou group. Tripo is run by Holymolly Ltd in Hong Kong and developed by China’s VAST. Tripo does not publish the countries where it handles data, so we cannot name them; your data may be handled in Hong Kong or China.

Details of each country’s system are in the survey of foreign personal information protection systems published by Japan’s Personal Information Protection Commission. To learn more about the measures each company takes, ask through the procedure in section 7.

5. Storage and deletion

When you delete your account, access stops at once. After 30 days we delete your faces, voices and videos. Payment records are kept, with your name removed, for as long as the law requires. Sign-in and usage records are deleted after 2 years (the IP address in the sign-in history is deleted after 90 days, keeping only its range). If you delete your account, we delete the sign-in history we keep for administration 30 days later. Other usage records (including copies of sign-in records kept for analysis) stay under an ID that contains no email address or name until the end of each record’s 2-year retention period, but after deletion we exclude them from analysis and do not match them with other information. The record of your acceptance of the terms and this policy (account ID, version and time) stays after you delete your account.

6. How we keep data secure

We have a basic policy and rules for handling personal data, a person in charge, and a reporting line for leaks and similar incidents. Our staff and contractors are bound to confidentiality. We keep no data in our office: it is stored in the data centers of the companies in section 3 (mainly in the United States), encrypted in transit and at rest. Only a limited set of people can open the admin screens, and their actions are logged. We take these measures after checking the systems of the countries where the data is stored.

7. Requests about your data

You can ask us to tell you how we use your personal data, to disclose it (including records of what we provided to third parties), to correct, add to or delete it, to stop using or erase it, or to stop providing it to third parties. Send your request through the contact page from your registered email address. We send a confirmation code to that address, confirm it is you, and answer without delay by electronic means. There is no fee. For a request from an agent, we confirm the agency with a power of attorney or similar document. You can delete your account at any time in the app’s settings.

8. If a leak happens

If personal data leaks or a similar incident happens and the law requires it, we report it to the Personal Information Protection Commission and tell you.

9. Operator and contact

The operator is Baltoon Inc. We will disclose its address and representative without delay on request. Send questions or complaints about this policy, and the requests in section 7, through the contact page.

10. External transmission of user information

Under Article 27-12 of Japan’s Telecommunications Business Act, we publish what your browser sends to the following companies when you open the app (app.takepilot.ai), this company site (takepilot.ai) or the help site (docs.takepilot.ai).

Google LLC (Google Analytics and Google Tag Manager): which kind of screen you open (its address without ids or search terms), the name of the site you came from, your device and browser type, screen size, language, approximate region, the names of key actions (such as registering something or opening the purchase screen), the videos you play and how far, and a cookie ID. We do not send your email address, name, account ID, the text you type or file names. The purpose is access analytics to improve our screens and features. How Google uses this information is described in “How Google uses information from sites or apps that use our services” (https://policies.google.com/technologies/partner-sites). If you turn on Do Not Track or Global Privacy Control in your browser, we send nothing. You can also use the Google Analytics opt-out add-on (https://tools.google.com/dlpage/gaoptout).

Functional Software, Inc. (Sentry): the content of errors in the app, the screen where they happened, and your device and browser type (no email address or name). The purpose is to find and fix bugs.

Cloudflare, Inc. (Turnstile): on this site’s contact and pre-registration pages, information about your device and browser and how you use the page. The purpose is to stop automated submissions.

YouTube (Google LLC), Instagram and Threads (Meta Platforms, Inc.), TikTok and X (X Corp.): when you open a work posted to a social network in the gallery, that network’s official player loads, and your device and browser information and that company’s cookies go to it. The purpose is to show the posted video. Each company’s own policy covers how it uses this information.