Privacy Policy

1. Information We Collect

1-1. Information You Provide

• (a) Email Address: The email address you provide when registering for the Waitlist.
• (b) Support Communications: Information you provide when contacting us, including the content of your communications.

1-2. Information Collected Automatically

• (a) Log Data: IP address, browser type, access times, and referring URLs when you visit the Website.
• (b) Cookies and Similar Technologies: The Website may use cookies and similar technologies to collect basic browsing data for analytics purposes.

2. How We Use Your Information

The Company shall use your information for the following purposes:

• (a) Waitlist Management: To register and manage your place on the Waitlist.
• (b) Communications: To send you service launch notifications, updates, and related communications about Mori Journaling AI.
• (c) Analytics: To understand how the Website is used and to improve the Website. Such analytics shall be conducted using aggregated, de-identified data only.
• (d) Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.

3. Data Security

The Company implements appropriate security measures to protect your Personal Data:

• (a) Encryption in Transit: All data transmitted between your browser and the Website shall be encrypted using TLS.
• (b) Access Controls: Access to Personal Data shall be restricted to authorized personnel only.

Notwithstanding the foregoing, while the Company takes commercially reasonable measures to protect your data, no method of electronic transmission or storage is completely secure. The Company cannot and does not guarantee absolute security of your Personal Data, to the fullest extent permitted by applicable law.

4. Data Retention

The Company shall retain your email address for so long as you remain on the Waitlist or until you request deletion. If you unsubscribe from the Waitlist or request deletion of your data, the Company shall delete your Personal Data within thirty (30) days, except to the extent retention is required by applicable law.

5. How We Share Your Information

The Company does not sell your Personal Data. The Company may disclose your information in the following circumstances:

5-1. Service Providers

The Company may share your email address with third-party email service providers solely for the purpose of sending communications related to the Waitlist and service launch. All Service Providers are bound by contractual obligations to process Personal Data only as instructed by the Company and in accordance with this Policy.

5-2. Legal Requirements

The Company may disclose your information where required to do so by law, regulation, legal process, subpoena, court order, or governmental request.

5-3. Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of all or substantially all assets, or other similar transaction, your information may be transferred as part of that transaction. The Company shall provide notice to Users of any such change in accordance with applicable law.

6. Cross-Border Data Transfers

franky, Inc. is headquartered in Tokyo, Japan. Your Personal Data may be transferred to, and processed in, countries other than your country of residence, including Japan and the United States.

The Company shall ensure that appropriate safeguards are in place for all cross-border data transfers, including contractual protections with Service Providers requiring compliance with applicable data protection laws.

7. Your Rights and Choices

7-1. All Users

• (a) Access: Request a copy of the Personal Data we hold about you.
• (b) Correction: Request correction of inaccurate or incomplete Personal Data.
• (c) Deletion: Request deletion of your Personal Data.
• (d) Opt-Out of Communications: Unsubscribe from Waitlist communications at any time by using the unsubscribe link in our emails or by contacting us.

7-2. European Economic Area Residents (GDPR)

If you are located in the European Economic Area (“EEA”), you have additional rights under the General Data Protection Regulation (“GDPR”):

• (a) Right to Access: You have the right to request a copy of the Personal Data the Company holds about you.
• (b) Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data.
• (c) Right to Erasure: You have the right to request deletion of your Personal Data (“right to be forgotten”).
• (d) Right to Restrict Processing: You have the right to request that the Company restrict the processing of your Personal Data.
• (e) Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format.
• (f) Right to Object: You have the right to object to the processing of your Personal Data.

To exercise your rights, please contact us at support@mori.to. The Company shall respond within thirty (30) days of receipt.

7-3. California Residents (CCPA/CPRA)

If you are a resident of the State of California, you have additional rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”):

• (a) Right to Know: You have the right to request information regarding the categories and specific pieces of Personal Data the Company has collected about you.
• (b) Right to Delete: You have the right to request deletion of your Personal Data.
• (c) Right to Opt-Out of Sale/Sharing: THE COMPANY DOES NOT SELL YOUR PERSONAL DATA.
• (d) Right to Non-Discrimination: The Company shall not discriminate against you for exercising any of your rights under the CCPA.

To exercise your rights, please contact us at support@mori.to. The Company shall verify your identity prior to processing your request and shall respond within forty-five (45) days of receipt.

7-4. Japanese Residents (APPI)

If you are a resident of Japan, you have rights under the Act on the Protection of Personal Information (Act No. 57 of 2003, as amended; “APPI”):

• (a) Right to Disclosure: You may request disclosure of the Personal Data the Company holds about you.
• (b) Right to Correction: You may request correction, addition, or deletion of your Personal Data if it is inaccurate.
• (c) Right to Cease Use: You may request that the Company cease using or delete your Personal Data.
• (d) Right to Cease Third-Party Provision: You may request that the Company cease providing your Personal Data to third parties.

To exercise these rights, please contact us at support@mori.to. The Company shall verify your identity and respond within two (2) weeks.

8. Children's Privacy

The Website and Waitlist are not directed to children under the age of thirteen (13). The Company does not knowingly collect Personal Data from children under thirteen (13). If you are a parent or guardian and believe your child has provided Personal Data to the Company, please contact us at support@mori.to. Upon verification, the Company shall promptly delete such information.

9. Changes to This Privacy Policy

The Company reserves the right to modify or update this Policy from time to time in its sole discretion. The Company shall notify Users of material changes by posting the updated Policy on the Website and, where appropriate, by sending a notification via email. Your continued use of the Website following the posting of any changes shall constitute your acceptance of the updated Policy. If any provision of this Policy is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

10. Contact Us

If you have questions, concerns, or requests regarding this Policy or the Company's data practices, please contact us:

• Email: support@mori.to
• Website: mori.to