Controller and scope
Select, Inc. (株式会社Select), represented by Toru Tano, at 2-5-1 Azuma, Tsukuba-shi, Ibaraki 305-0031, Japan, is responsible for the personal information it handles for ShogunAI. Contact info@shogunai.si for privacy requests. This notice covers our apps, websites, billing, support and waitlists. Processing depends on the features, permissions and settings you use; a local-first design does not mean every operation remains on your device. This notice describes processing, not blanket consent to optional processing. The service is not directed to persons under 18, and we do not knowingly collect their personal information.
Work information and local storage
Depending on permissions and enabled features, the app processes work text, application and website context, documents, prompts, meeting transcripts and related timing or source information. Work memory is stored locally in an encrypted database rather than uploaded as a whole. Optional visual recall can retain screen images locally for the selected retention period; extracted text and derived memory may have separate lifecycles. A screen image can include material outside the focused window. Capture exclusions, pause and deletion controls help manage collection but do not replace your responsibility to avoid capturing information you may not lawfully process.
AI, audio and connections
AI requests and enabled background processing send relevant prompts and context to the provider serving the function, directly or through our relay. Providers can temporarily retain request content, batch inputs and results under their processing terms; local storage is not a promise of zero retention by external providers. Meeting transcription can send audio to a speech provider and store the transcript locally; the app does not itself save raw meeting audio as an audio file. Connected email, calendar, model and other services receive information needed for authorised operations. For example, Gmail connects through the Google Gmail API. Enabled memory-sharing integrations can let authorised AI clients read local memory, and automatic connection settings can create supported read connections. Review these settings and revoke connections you do not want.
Account, usage and support records
We process contact details, account or device identifiers, plan and licence status, transaction references, usage quantities, request and security metadata, and communications you send us. Payment details are handled by Stripe; we do not receive your full card number. Network services necessarily process connection information such as IP addresses. Where enabled, product analytics uses a pseudonymous identifier and feature or technical events, rather than the contents of your work memory, to understand reliability and usage. Pseudonymous data is not necessarily anonymous. Desktop analytics can be disabled in settings. Websites use language preferences and essential storage; optional tracking, where offered, is subject to applicable consent controls.
Windows waitlist and email
For the Windows waitlist we record your email, selected language, registration time and Windows audience membership. We use this to confirm registration and send Windows release information you requested, not to enrol you in unrelated campaigns. Delivery and retry records, message references and unsubscribe preferences help deliver messages and prevent unwanted resend. Unsubscribing stops release messages but does not automatically erase registration or suppression records. Contact us to request deletion; we may keep the minimum information needed to honour an opt-out or meet legal obligations. Support correspondence is processed through our email providers.
Purposes and legal grounds
We use information to provide requested features, authenticate and administer access, process payments, respond to requests, deliver requested notices, maintain and improve reliability, prevent misuse and comply with law. Where data-protection law requires a legal basis, we rely as appropriate on performance of a contract or requested pre-contractual steps, legal obligations, legitimate interests in proportionate security and service administration, or consent for processing that requires it. We do not sell your work memory or use its contents to train our own general-purpose AI models. External processing remains subject to the provider arrangements and your chosen connections. We do not treat this notice as permission for unrelated advertising or new incompatible purposes.
Recipients and international processing
We use service providers for hosting and network security (Cloudflare), account and server records (including Supabase), payments (Stripe), email delivery (Resend and Google), product analytics where enabled (PostHog), and AI or speech processing (including OpenAI, Anthropic, Deepgram or a provider you select, depending on the feature). Only information relevant to their role is provided. These services and your own connections may process information outside Japan, including in the United States and other countries where they operate; not all processing is located in Japan. Transfers must meet applicable legal requirements, including information, consent or safeguards where required. Contact us for information about applicable recipients, transfer arrangements or safeguards. We may disclose information where legally required, necessary to establish or defend legal claims, or in a lawful business transfer subject to applicable protections.
Retention, deletion and security
Local retention follows the relevant feature settings and deletion controls; deleting an image does not necessarily delete separately retained text or derived records. Removing the app alone may leave local data or backups. Provider request and batch artifacts may persist temporarily after processing, including while cleanup is retried. Server billing, security, usage, support and waitlist records are retained as needed for their stated purposes, dispute handling and legal duties; not every record has an automatic deletion timer. Opt-outs and anti-abuse records may need longer retention. We use reasonable technical and organisational safeguards and restrict access according to purpose; no system can promise absolute security. You can request details or deletion of information we control, subject to lawful retention exceptions.
Choices, rights and updates
Use app settings to manage capture, connected clients, permissions, analytics and local deletion, and email links to unsubscribe from release notices. Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent or information about disclosures and safeguards. Withdrawing consent does not affect earlier lawful processing. We verify identity proportionately, respond within legally required periods and aim to respond within 30 days. You may complain to your competent data-protection authority, including Japan’s Personal Information Protection Commission where applicable. Contact info@shogunai.si; include enough information to identify the relevant record, not passwords or full payment credentials. We update this notice when processing changes, provide required notices and obtain any required consent before new processing. This update does not itself authorise a new incompatible use of existing data.