Privacy Policy
This Privacy Policy explains how Dunkit K.K. (Dunkit株式会社, “Dunkit”, “we”, “us”) handles personal information when you use DraftClick AI (the “Service”). We handle personal information in accordance with Japan’s Act on the Protection of Personal Information (APPI) and other applicable laws.
1. Information we collect
- Account information — your email address and name used to sign in.
- Connected-mailbox metadata — the mailbox address, provider, and connection status of each inbox you connect.
- Message snippets — sender, subject, language, and short excerpts of processed mail, shown in your activity log. Full message bodies are processed transiently to generate a draft and are not persisted on our servers.
- Style profiles — a description of how you write (tone, phrasing, sign-offs, per-contact voice), learned from your sent mail to external recipients.
- Usage statistics — draft counts, outcomes, and similar operational metrics.
- Billing information — handled by Stripe; we never receive or store your full card number.
2. Purposes of use
- Providing the Service, including generating reply drafts
- Learning and applying your writing style
- Account management, billing, and important notices
- Customer support
- Improving and securing the Service using aggregate, non-content metrics
- Compliance with legal obligations
3. No AI training on your mail
Customer mail content is never used to train AI models — neither ours nor our vendors’. Draft generation uses vendor APIs under agreements that exclude the use of submitted content for model training. Style profiles exist solely to draft your replies and are never shared across customers.
4. Subprocessors
We use the following subprocessors to operate the Service. Each is bound by contractual data-protection obligations.
| Subprocessor | Location | Purpose |
|---|---|---|
| Unipile SAS | France | Mailbox connectivity |
| OpenAI | United States | Draft generation |
| Supabase | AWS Tokyo, Japan | Database and authentication |
| Stripe | United States | Payment processing |
| Resend | United States | Transactional email |
| Vercel / Fly.io | United States | Hosting |
5. International transfers
Some subprocessors are located outside Japan. For Unipile SAS (France), the EU is designated under the APPI as a jurisdiction with an equivalent level of personal-information protection. For subprocessors located in the United States, we rely on contractual safeguards (data processing agreements requiring APPI-equivalent handling). Information about the data-protection regimes of these countries is available on request.
6. Retention and deletion
- Full message bodies are not persisted — they are processed in memory and discarded once the draft is created.
- Account data, mailbox metadata, snippets, style profiles, and usage statistics are retained while your account is active.
- When you delete your account, this data is deleted. To request deletion or for questions about retention, contact admin@dunkit.jp.
7. Security
We take reasonable organizational and technical measures to protect personal information, including encryption in transit, access controls, and least-privilege mailbox permissions (the Service holds no send permission for your mailbox).
8. Your rights
Under the APPI you may request disclosure, correction, addition, deletion, or suspension of use of your personal information, and may object to certain handling. Send requests to admin@dunkit.jp; we will respond without undue delay after verifying your identity.
9. Cookies
The Service uses cookies necessary for sign-in sessions and for remembering your language preference. We do not use third-party advertising cookies.
10. Changes to this policy
We may update this policy from time to time. For material changes we will notify you by email or in the app before they take effect.
11. Contact
Dunkit K.K. (Dunkit株式会社)
Tokyo Tatemono Yaesu Sakura-dori Bldg. 3F, 1-5-20 Yaesu, Chuo-ku, Tokyo 103-0028, Japan
admin@dunkit.jp