BYULBIT LLC (the "Company") establishes this Privacy Policy (the "Policy") to govern the handling of Users' personal information in connection with the Service. Article 1 (Personal Information Collected) The Company collects the following personal information from Users: Account information such as email address and password Payment-related information (credit card details are obtained via payment processors) Files uploaded by Users (PDFs, images, etc.) Information optionally provided through inquiries (name, company, phone number, etc.) Article 2 (Purpose of Use) The Company uses collected personal information for the following purposes: Providing and operating the Service (OCR processing, storage, etc.) Account management and identity verification Billing and payment processing Responding to inquiries Analytics for service improvement and quality enhancement (this excludes your images and extracted values — see "How We Handle Your Data") Compliance with laws and prevention of fraudulent use Article 3 (Third-Party Disclosure) The Company does not disclose Users' personal information to third parties except in the following cases: When the User has consented When disclosure is required by law When entrusting processing to external vendors within the scope necessary for service provision Article 4 (External Vendors) The Company entrusts processing to the following external vendors for service provision: Payment processing: Stripe, Inc. (United States), GMO Payment Gateway, Inc. (Japan) Cloud infrastructure: Google LLC (United States) — Cloud Run (Tokyo, asia-northeast1), Firebase Realtime Database (Singapore, asia-southeast1), Firebase Storage (United States, us-east1) OCR analysis / AI processing: Google LLC (United States) — Cloud Vision API, Gemini API (on a paid tier, Tier 1 or above, so content sent is not used to improve their models) Countries and storage regions for each subprocessor are listed in "How We Handle Your Data". Article 5 (Retention Period) Account and payment information is retained until the User deletes registration. Files uploaded through the web app, and the values extracted from them, remain in the Company's storage until the User deletes them or until this service is discontinued. Users may delete them at any time, and deletion takes effect immediately. Images and extracted values received through the API (POST /ocr/fields and similar) are not retained at all. See "How We Handle Your Data" for details. Upon a User's request for deletion, the Company will respond promptly. Article 6 (Security) The Company implements reasonable safeguards — including SSL encryption, access control, and log monitoring — to prevent leakage, loss, or damage of personal information. Article 7 (Disclosure / Correction / Suspension) Users may request disclosure, correction, deletion, or suspension of use of their personal information held by the Company. Requests are accepted via the contact in Article 9. Article 8 (Cookies) At present the Company does not collect personal information via cookies. If cookies or analytics tools are used in the future, this Policy will be revised and Users will be notified. Article 9 (Contact) Inquiries about this Policy should be directed to: BYULBIT LLC Managing Member · Yongha Hwang 2-16 Higashi-Gokencho, DeLCCS Kagurazaka 1F, Shinjuku-ku, Tokyo 162-0813, Japan Phone: +81-3-4400-9771 Email: oisidonut@gmail.com Article 10 (Revision) The Company may revise this Policy as necessary. Revisions take effect upon posting on the Company's website.