Privacy Policy
Last updated: March 19, 2026
えなが ("Operator") establishes this Privacy Policy ("Policy") regarding the handling of users' personal information in V-Mentor("Service").
Article 1 — Information Collected and Purposes of Use
The Service collects and uses the following information:
① IP Address
- How collected
- Automatically retrieved by the server at API request time (e.g., via X-Forwarded-For header)
- Purpose
- Rate-limit management (3 reviews/day — abuse prevention)
- Storage
- Supabase (PostgreSQL)
usage_logstable - Retention
- Automatically deleted 90 days after collection
② Review History (Input & AI Output)
- How collected
- Saved by the server when a review is submitted (character profile, plan draft, and AI output)
- Purpose
- Providing the review history feature
- Storage
- Supabase (PostgreSQL)
review_historytable (linked to IP address) - Retention
- Most recent 20 entries retained; older entries are automatically deleted
⚠ Your liver name and character settings are used in AI reviews. Please do not enter real personal information (full name, address, phone number, etc.) in lore or profile fields.
③ Character Profile
- Storage
- Stored only in your browser's localStorage (never on our servers)
- Note
- Sent to the server when a review is submitted. The liver name is stored in the DB alongside review history; concept, lore, and other fields are not stored in the DB.
④ Voice Data
- How collected
- Processed on-device via the browser's Web Speech API — converted to text locally
- Storage
- Never sent to or stored on our servers (on-device only)
Note: When using Chrome, the Web Speech API may route voice recognition through Google's servers. Please refer to Google's Privacy Policy for details.
Article 2 — Cookies
The Service does not currently use tracking cookies. However, the following browser storage features are used:
- ▸localStorage: Stores your character profile. Persists across browser sessions.
- ▸Session storage etc.: Minimal technical data required by the Next.js framework.
If analytics or tracking tools are introduced in the future, this Policy will be updated accordingly.
Article 3 — Third-Party Services
The Service uses the following third-party services. Data is processed in accordance with each service's privacy policy.
| Service | Purpose | Data Sent |
|---|---|---|
| Anthropic (Claude API) | AI review processing | Input content (character profile & plan draft) |
| Supabase | Database (usage logs & review history) | IP address, review history |
| Vercel | Hosting | Request logs (auto-collected by Vercel) |
| Stripe | Payment processing | Payment info (collected & managed directly by Stripe) |
| Sentry | Error monitoring | Error info & masked screen state (text inputs masked) |
| Google Forms | Beta applications | Information entered in the application form |
Your data is not used to train AI models
Data sent to Anthropic (Claude API) — including character profiles and plan drafts — is never used to train or improve Anthropic's AI models. This is guaranteed by the Anthropic Commercial Terms ("B. Customer Content").
Except as required by law, the Operator will not share your personal information with any third parties beyond those listed above.
Article 4 — Data Security
- ✓Supabase is accessed using service role keys that are never exposed to the client side.
- ✓Environment variables (API keys, etc.) are managed server-side only and never sent to the browser.
- ✓All communications are encrypted via HTTPS (TLS).
- ✓The Supabase database is protected with Row Level Security (RLS).
Article 5 — Your Rights
You have the following rights. To exercise them, please contact us.
- ▸Right to request disclosure of your personal information
- ▸Right to correct, add, or delete your personal information
- ▸Right to request deletion of your review history
- ▸Right to request suspension or erasure of data processing
Character profiles stored in localStorage can be deleted at any time from your browser settings (Settings → Clear site data).
Article 6 — Changes to This Policy
The Operator may update this Policy in response to legal changes or service updates. Revised policies take effect upon publication on this page. Users will be notified of significant changes through the Service.
Contact
For questions about this Policy or personal data handling requests, please contact us via the Operator's X (Twitter) DM.
X (Twitter): @enaga7561