1. Scope and operator
IMAKAI Inc. operates Shotvero and this website. This policy explains how we handle information. Contact info@imakai.co.jp with privacy questions.
2. On-device image and video processing
Screenshots, videos, annotations, and OCR inputs and results are processed on your device by default. There is no feature that uploads these files to our account server or an external AI service. OCR models are bundled with the extension. Local history is off by default. If enabled, it keeps up to seven days, 50 items, or 200 MiB in total, pruning older entries. Files you save separately are not affected by that cleanup.
3. Sharing
When you start a share, encrypted files transfer to the recipient over WebRTC. Our signaling service handles room information, expiry, authentication data, and connection negotiation, but does not store the image or video file. Room information expires after about 10 minutes. Your IP address and connection details may be visible to the peer and connection-assistance services. We cannot recover or delete a copy already saved by a recipient.
4. Accounts, billing, and support
For login we handle your email, user ID, code-verification records, and hashed session information. For paid subscriptions we store Stripe customer, subscription, and payment identifiers, subscription status, and expiry. Card details are handled on Stripe’s checkout page; Shotvero does not store card numbers. Support inquiries include your contact details and message.
5. Purposes and safeguards
We use this information to authenticate users, deliver features, manage subscriptions, payments and refunds, prevent abuse, resolve issues, answer inquiries, and meet legal obligations. Identifiers derived from connection information such as IP addresses help limit abusive requests. We apply access controls and encryption where appropriate, but cannot promise that every incident can be prevented. OCR detection is not a guarantee that an image contains no sensitive information.
6. Service providers
We use Cloudflare for website delivery, APIs, databases, signaling and Turnstile; Resend for login email; and Stripe for payment and subscription management. P2P connection setup also uses a STUN service. Providers process information necessary for their services and may process it outside your country. We do not sell images, videos, or personal information for advertising. This website has no advertising trackers or analytics tags.
7. Retention and deletion
Login codes expire after 10 minutes and sessions after seven days. Expired authentication records are cleaned up periodically; webhook deduplication records are removed after about 90 days. We retain account, billing, and support records only as needed to deliver the service, resolve disputes, or meet accounting and legal obligations. Subscription cancellation and account deletion are separate requests.
8. Your choices and rights
For access, correction, deletion, or restriction of your personal information, contact info@imakai.co.jp. We verify the requester and respond under applicable law. You can delete local history in the extension. We may need to retain certain records where required by law. Mandatory rights under applicable privacy law are not limited by this policy.
9. Updates
We publish changes on this page and announce significant changes through the website or service. Please also consult each external provider’s privacy policy for its own processing.