GotoAI Inc. (“GotoAI,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you entrust to us. This Privacy Policy explains how we collect, use, share, and protect personal information in connection with our website at https://gotoai.com (the “Site”) and our AI consulting and product services (collectively, the “Services”), in accordance with Japan’s Act on the Protection of Personal Information (“APPI”) and other applicable laws.
1. Scope
This Policy applies to personal information we handle as a business operator when we determine the purposes and means of its processing — for example, information collected through our Site and inquiries. Where we handle personal information on behalf of a client under a services agreement (for example, data processed during an AI consulting engagement), that agreement governs our handling, and the client remains responsible as the controlling business operator (see Section 7).
2. Definitions
“Personal information” means information relating to a living individual that can identify that individual, as defined under the APPI, including information that can be readily collated with other information to identify an individual. “Personal information” does not include anonymized or aggregated information that cannot be attributed to an identifiable individual.
3. Information We Collect
We collect personal information only by lawful and fair means, limited to what is necessary for the purposes below.
- Information you provide directly. When you contact us through our inquiry form or by email, we collect your name, email address, subject, and the content of your message, and any other information you choose to include.
- Information from consulting or business relationships. Business contact details (such as name, company, job title, email, and telephone number) exchanged in the course of proposals, engagements, and communications.
- Information collected automatically. When you visit the Site, our analytics tool records limited technical information such as pages viewed, approximate location derived from IP address, referring pages, browser and device type, and dates and times of access (see Section 5).
We do not intentionally collect sensitive personal information (special care-required personal information under the APPI) through the Site. Please do not submit such information through the inquiry form.
4. Purposes of Use
We use personal information for the following purposes:
- To respond to inquiries, requests, and communications;
- To provide, operate, maintain, and improve our Services;
- To manage our business relationships, including proposals, contracts, invoicing, and related communications;
- To send information about our Services that may be of interest, where permitted (you may opt out at any time);
- To understand and improve how the Site is used, through aggregate analytics;
- To ensure the security of the Site and Services and to prevent fraud or unauthorized use;
- To comply with applicable laws, regulations, and legitimate requests from public authorities.
If we intend to use personal information for a purpose beyond those stated above, we will notify you or obtain your consent as required by law.
5. Cookies
At present, this website does not use cookies. We currently do not use cookies or similar technologies to collect information about, identify, or track visitors to our Site, and we have no plans to introduce them. Our website analytics are provided by self-hosted analytics tools that run on our own infrastructure and are currently configured to operate without cookies. Analytics data is aggregated, is not used to identify individual visitors, and is not shared with any third-party advertising network. We do not engage in third-party targeted or cross-context behavioral advertising.
Should future changes in technology, functionality, or legal requirements make the use of cookies or similar technologies appropriate, we will update this Policy accordingly and, where required by law, obtain your consent before doing so.
6. Provision to Third Parties
We do not sell personal information, and we do not provide personal information to third parties except in the following cases:
- With your consent;
- When we entrust the handling of personal information to service providers to the extent necessary to achieve the purposes of use (see below);
- When required or permitted by law, or in response to a lawful request from a public authority;
- When necessary to protect the life, body, or property of a person and obtaining consent is difficult;
- In connection with a business succession such as a merger or transfer of business.
Entrustment. To operate our Site and Services, we may entrust the handling of personal information to trusted service providers — such as cloud hosting, email, and analytics infrastructure — to the extent necessary. In such cases we provide only the information necessary, bind those providers by contract to protect it, and exercise necessary supervision over them.
We do not currently engage in “joint use” of personal information.
7. Personal Information Handled on Behalf of Clients
In the course of AI consulting and development engagements, we may handle personal information provided by or on behalf of a client. In such cases, we handle that information only as instructed under the applicable services agreement and solely for the purposes of the engagement, and we do not use it for our own purposes. The client remains responsible for that personal information as the controlling business operator.
8. Use of Personal Information in AI and Machine Learning
Consistent with our Responsible AI Principles, we do not use any data collected through this Site — including inquiries you submit — to train any machine-learning models, whether large language models (LLMs) or other models. Personal information processed within a client engagement is used only for that engagement and only as agreed with the client.
9. International Data Transfers
We primarily store and process personal information in Japan. Where a service provider processes personal information outside Japan, we take the measures required under the APPI and other applicable laws to ensure a comparable level of protection, including appropriate contractual safeguards.
10. Security Measures
We implement reasonable and appropriate organizational, personnel, physical, and technical security measures to protect personal information against unauthorized access, loss, destruction, alteration, and leakage. These include internal handling rules, access controls and least-privilege access, staff confidentiality obligations, and encryption of data in transit. Only authorized personnel and supervised service providers may access personal information.
11. Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Policy and to meet our legal and contractual obligations. Inquiry records are retained for three (3) years, after which we delete or anonymize them by appropriate means, unless a longer period is required by law or an ongoing business relationship.
12. Your Rights
Subject to applicable law, you may request that we disclose, correct, add to, or delete your retained personal information, suspend its use, or cease providing it to third parties. To make a request, please contact us using the details in Section 14. We will verify your identity and respond within a reasonable period in accordance with the APPI.
13. Children
Our Site and Services are not directed to children. We do not knowingly collect personal information from children under 15. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.
14. Contact — Personal Information Inquiry Desk
For questions about this Policy or to exercise your rights, please contact:
GotoAI Inc. — Personal Information Inquiry Desk
Roppongi KS Bldg. 5F, 3-16-12 Roppongi, Minato-ku, Tokyo 106-0032, Japan
Representative: Congwei Dang, Representative Director and CEO
Email: contact-us@gotoai.com
15. Changes to This Policy
We may update this Policy to reflect changes in our practices or applicable law. We will post the updated Policy on this page with a revised effective date.
This Policy is originally written in Japanese. In the event of any discrepancy between the Japanese and English versions, the Japanese version shall prevail.
Effective date: 2026-08-24
Last updated: 2026-08-24