1. Who we are
This policy explains how 株式会社HENSHU (HENSHU Inc., "we", "us") handles information when you use HENSHU.
Registered address: Level 3, Mitsuhashi building, 1-3-3 Kita-aoyama, Minato-ku, Tokyo 107-0061, Japan
Contact: privacy@henshu.io
2. Information we collect
- Account: email, password (hashed), display name (optional).
- Content: audio files, thumbnails, and music you upload.
- Usage & diagnostics: device/browser data and site interactions (via Google Analytics).
- Billing: payment information is processed by Stripe; we don't store card numbers.
3. How we use your information
- Provide, maintain, and secure the service (including storage and processing of your files).
- Authenticate users and prevent fraud/abuse.
- Process payments and manage subscriptions via Stripe.
- Send transactional emails; occasional marketing emails (you can opt out).
- Comply with legal obligations and enforce our Terms.
We do not use your files to train AI models. We contractually require our processors to do the same and configure providers to disable data-for-training.
Legal bases for processing (EU/UK)
- Contract: to provide and support the service you request.
- Legitimate interests: to keep HENSHU secure, improve features, and prevent abuse.
- Consent: for analytics cookies (where required) and marketing emails.
- Legal obligation: to comply with tax, accounting, and regulatory duties.
5. Storage & retention
- Free plan: 5 hours of audio storage.
- Standard plan: unlimited storage (fair use). We reserve the right to prevent abuse.
We keep account data while your account is active. After closure, we delete or anonymize personal data within 30 days, unless we must retain it for legal reasons (e.g., tax, fraud prevention). Derived technical artifacts (e.g., waveforms, peaks) are deleted when the related file is deleted.
6. Children's privacy
HENSHU isn't directed to children under 13 (or the equivalent age of consent in your region). If you believe a child provided personal data, contact us and we'll delete it.
7. Your rights
Depending on your location (e.g., EU/EEA, UK, California), you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact us at privacy@henshu.io. You can opt out of marketing emails by using the unsubscribe link or contacting us.
For California residents: we do not "sell" or "share" personal information as defined by the CPRA. You can request access, deletion, or correction by emailing privacy@henshu.io.
8. Security
We use industry-standard measures to safeguard data, including encryption in transit (TLS) and at rest, access controls, regular backups, and security monitoring. However, no method of transmission or storage is completely secure.
9. Data breach notification
If we become aware of a data breach affecting your personal data, we will notify you and relevant authorities when required by law.
11. International data transfers
We operate globally using providers such as AWS, Firebase, Google, and Stripe. Your data may be processed in countries outside your own. When we transfer data internationally, we use appropriate safeguards, such as Standard Contractual Clauses (EU/UK) or other lawful transfer mechanisms.
12. Payments
Payments are handled by Stripe. Please see Stripe's privacy notice for details on how they process your data.
We do not store any payment information on our servers. All payment information is processed by Stripe.
13. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll notify you in-app or by email and update the effective date. Continued use after changes constitutes acceptance.
14. Contact
Questions or requests? Email us at privacy@henshu.io.