Cotoa-inLEGALCotoa-inLEGALEffective: June 5, 2026 / Provider: CoreVista-Japan, Inc.
This is a reference English translation. The authoritative version is the Japanese text; if there is any discrepancy, the Japanese version prevails.
CoreVista-Japan, Inc. (the “Company”) sets out the handling of personal information in the voice interpretation service “Cotoa Interpreter” (the “Service”) as follows.
Audio data is temporarily processed for translation, speech recognition, and speech synthesis. The Company does not store audio data beyond the purpose of translation. However, external service providers may temporarily process or retain data for abuse prevention, security, or incident response under their respective terms.
Audio or text processed by the Service may contain special-care-required personal information such as health, medical, disability, welfare, living circumstances, or consultation content. The user understands this possibility and uses the Service with consent. When processing audio containing such information of a counterpart or third party, the user shall explain it to that person and obtain the necessary consent.
To the extent necessary to provide the Service, the Company may provide personal data to the following third parties located abroad.
OpenAI, L.L.C. (United States)
For speech recognition, translation, speech synthesis, and AI processing, audio data, text, target information, and related technical information may be transmitted.
Stripe, Inc. (United States)
For credit-card payment, purchase history, payment processing, abuse prevention, and refunds/reconciliation, information needed for payment is handled. Card numbers and similar data are processed by Stripe and are not retained on the Company’s servers.
Email delivery provider
An email delivery provider may be used for recovery emails, purchase notifications, and important notices. If such a provider is used in production, the Company will publish its name, location, the information transmitted, the purpose, and protective measures in this Policy or a separate schedule before use. If these are not published, the email recovery feature will not be offered.
The United States does not have a comprehensive federal law equivalent to Japan’s Act on the Protection of Personal Information; personal information is regulated by sector-specific federal laws and state laws. The Company refers to information published by the Personal Information Protection Commission of Japan and the recipients’ published privacy policies, data-processing terms, and security documents, and provides users with necessary information.
The Company reviews recipients’ contract terms, security documents, data-processing terms, and privacy policies, and supervises them appropriately under the Act. The Company takes contractual, technical, and operational measures so that recipients do not use the data beyond the purpose of providing the Service.
The Company may outsource all or part of the handling of personal information for provision of the Service, payments, email delivery, server operation, maintenance, and inquiry handling, and supervises outsourcees appropriately under the Act.
The Service may transmit: (1) audio/text to OpenAI for recognition, translation, and synthesis; (2) payment-related information to Stripe; (3) account keys, consent state, and settings stored on the device (localStorage, etc.); and (4) logs to the Company’s servers for incident response, abuse prevention, and usage-time management. These are used for providing the Service, payments, balance management, abuse prevention, and safety. If the Company newly introduces advertising, behavioral targeting, or external analytics tags, it will publish the recipient, the information transmitted, and the purpose in this Policy or a separate schedule.
The Service may store account keys, consent state, language, and display settings in the device’s localStorage, etc. On a shared device, please log out or clear browser data.
Except where required by law, where the person consents, where necessary for outsourcing, or where otherwise permitted by the Act, the Company does not provide personal information to third parties.
The Company takes necessary and appropriate measures—access control, encryption, log management, permission management, and outsourcee management—to prevent leakage, loss, damage, unauthorized access, and falsification of collected information.
The Company retains personal information for the period necessary to achieve the purpose of use, the period required by law, or a period reasonably necessary for dispute response and abuse prevention, and deletes or anonymizes unnecessary information by reasonable means.
Users may request disclosure, correction, addition, deletion, suspension of use, erasure, or suspension of third-party provision of their own personal information held by the Company, in accordance with law. To request, contact the address below; identity verification information may be required.
Minors must use the Service with the consent of a parent or legal representative.
The Company may revise this Policy in response to legal amendments, changes to the Service, changes to recipients, or operational needs. For material revisions, notice is given via display within the Service or other reasonable means.
CoreVista-Japan, Inc.
Personal Information Protection Manager: Taketoshi Nakao
Email: info@corevista-japan.com
Terms ・ Specified Commercial Transactions ・ Back to the Service