Privacy Policy (English)

This policy describes how Iwato Labs (Ryota Oiwa, "we") handles information in "Iwato Labs Analytics Assistant" (the "Service"). If the Japanese and English versions differ, the Japanese version prevails.

1. Information we collect

When you sign in, we receive your Google account email address and name from Google. We use them only to check whether your account is allowed to use the Service.

2. Access to Google user data

With your consent, the Service uses the following read-only scopes:

• Google Analytics (analytics.readonly): to list the properties you can view and to read aggregated reports such as users, sessions, traffic sources and events
• Search Console (webmasters.readonly): to list your sites and read aggregated search data such as queries, impressions, clicks and positions
• YouTube (youtube.readonly, yt-analytics.readonly): to read your own channel and video information and aggregated analytics such as views and watch time

Data retrieved from Google APIs is used only to answer the question you ask the AI assistant at that moment, and is not stored on our servers. We store only the encrypted Google OAuth tokens needed to keep you signed in and the ID of the property you selected.

3. Compliance with the Google API Services User Data Policy

The Service's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sell it, use it for credit assessment, or use it to train AI models.

4. Sharing with third parties

We do not share or sell your information to third parties, except as required by law. Aggregated results are sent to the AI assistant you use (such as ChatGPT or Claude) only in response to your own questions.

5. Storage and security

Sign-in information is stored encrypted on Cloudflare's servers, and all communication is encrypted in transit.

6. Deletion

You can revoke the Service's access at any time from "Third-party apps & services" in your Google Account. When your contract ends, or upon your request, we promptly delete the stored sign-in information.

7. Contact

For questions about this policy, contact support@iwato.app.

Effective date: October 31, 2026