Privacy - Privacy Policy

Tachikoma AI Inc. (“Tachikoma AI”, “we”, “us”) is the data controller for personal data processed through this website.

Registered office: 1-42-11 Uehara, Shibuya-ku, 151-0064 Tokyo, Japan. EU contact address: 78, Avenue des Champs-Élysées, 75008 Paris, France.

For any privacy-related question or to exercise your rights, contact us at privacy@tachikoma-ai.com.

We try to collect as little personal data as possible. The categories below cover everything this website processes.

• Analytics data — aggregated, cookieless statistics about pages viewed, referrers, country, device category, and browser. We do not use these to identify you.
• Technical data — IP address, user agent, and timestamps, processed transiently by our hosting and analytics providers for security and to render the site.
• Contact form data — the name, email address, company, and message you submit on /contact, used solely to respond to your inquiry.
• Email correspondence — anything you send to our contact, support, careers, or press email addresses.

• To operate and secure the website — legal basis: legitimate interest (GDPR Art. 6(1)(f)) in providing a stable, secure service.
• To measure aggregate audience — legal basis: legitimate interest. Because our analytics are cookieless and do not profile individual visitors, we rely on this basis rather than consent.
• To respond to your inquiries — legal basis: steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)) and/or your consent (Art. 6(1)(a)) given by submitting the form.

This site does not set advertising or tracking cookies. The analytics tools we use (Plausible Analytics, Vercel Web Analytics, and Vercel Speed Insights) are configured to operate without cookies and without cross-site identifiers.

For a full breakdown of the small number of strictly necessary items stored in your browser, see our Cookies Policy.

We share personal data only with vetted processors acting on our instructions under a Data Processing Agreement.

• Vercel Inc. — website hosting, edge delivery, and audience/speed analytics. Data may be processed in the EU and the United States under Standard Contractual Clauses and the EU-US Data Privacy Framework.
• Plausible Insights OÜ — privacy-friendly, cookieless web analytics. Data processed in the EU (Germany).
• Google Workspace — email infrastructure for our @tachikoma-ai.com mailboxes. Data may be processed in the EU and the United States under Standard Contractual Clauses and the EU-US Data Privacy Framework.

We do not sell personal data, and we do not share it with advertising networks or data brokers.

Where personal data leaves the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses and, where applicable, on adequacy decisions such as the EU-US Data Privacy Framework, together with supplementary technical measures (encryption in transit and at rest).

• Analytics — aggregated and retained for up to 24 months. No individual visitor profiles are kept.
• Server and security logs — up to 30 days.
• Contact form submissions and emails — kept for as long as needed to handle your inquiry and to comply with our legal obligations (typically up to 24 months after last contact).

Under the GDPR and equivalent laws, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data (“right to be forgotten”);
• restrict or object to our processing of your data;
• request portability of data you provided to us; and
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, email privacy@tachikoma-ai.com. You also have the right to lodge a complaint with your local supervisory authority — for example, the CNIL in France or your national data protection authority elsewhere in the EU.

We protect personal data with TLS encryption in transit, encryption at rest with our processors, access controls on internal systems, and the principle of least privilege. No method of transmission over the Internet is 100% secure, but we regularly review and improve our safeguards.

We may update this policy to reflect changes in our practices or for legal reasons. Material changes will be announced on this page along with an updated “Last updated” date.