Privacy policy

1. Operator and contact

As required by Article 32 of Japan's Act on the Protection of Personal Information (APPI), the operator is as follows. We are forming a Japanese company in Kanagawa and will update this section once it exists.

• Operator: Banana Stand Technologies LLC
• Address: available on request from hello@narai-ai.jp
• Representative: available on request from hello@narai-ai.jp
• Contact: hello@narai-ai.jp

2. What this policy covers

This policy covers this site only. The Narai application (each organization's site and the demo) has its own privacy policy for the information it handles.

The site has no accounts and no sign-in.

3. Information we collect

• What you enter in the contact form: your name, organization, role, email address, the area you're interested in (universities, companies serving visitors, or other), whether you want a pilot or a demo, your message, and the language you were viewing the site in.
• Technical information from visiting the site, such as your IP address, browser and device type (user agent), the pages you request and the time. Our hosting provider processes this to deliver and protect the site.
• Analytics: pages viewed, the referring site and general device type, counted in a way that does not identify you (see “Cookies and local storage”).

Your inquiry is emailed to us. It is not stored in a database on the site. To stop abuse, the form counts submissions per IP address briefly in server memory; we do not keep that as a record.

4. Why we use it

We use this information only for the following purposes (APPI Article 21).

• To reply to your inquiry and to arrange a demo or discuss a pilot
• To prepare proposals and quotes and to work toward a contract
• To prevent abuse and attacks and keep the site secure
• To count how the site is used, in aggregate, and improve it

We will ask for your consent before using your information for any other purpose. We do not sell personal information or use it for advertising. We do not give it to third parties without your consent unless the law requires it, apart from the service providers listed in “Service providers and processing outside Japan”.

5. Cookies and local storage

The site uses no advertising or tracking cookies. It stores only these display preferences on your device:

• Language (cookie “narai-lang”): set when you use the language switch, so the site opens in the same language next time. It lasts one year.
• Light or dark mode (browser local storage “narai-theme”): remembers which you chose.

You can delete both in your browser settings; the site works normally without them.

We use Fathom Analytics, which counts visits without cookies, and only on the live domains (narai-ai.jp and narai-ai.com). See Fathom's explanation of how it handles data.

6. Service providers and processing outside Japan

We use the following providers to run the site. Each handles information only to do its part.

The United States is not a country that Japan's Personal Information Protection Commission recognizes as having an equivalent system. For personal data provided to providers in the United States, we rely under APPI Article 28 on each provider having a system that meets the Act's standards, secured by its terms of service and data-processing terms. We review these arrangements regularly. On request we will explain the measures we take and the destination country's system.

According to the Commission's survey, the United States has no comprehensive federal privacy law; personal information is protected by sector-specific laws such as the Electronic Communications Privacy Act (ECPA) and by state laws such as California's Consumer Privacy Act (CCPA), and the United States participates in the APEC Cross-Border Privacy Rules (CBPR) system. See the Commission's survey of the United States (Japanese).

See also the providers' own policies: Vercel, Resend and Fathom.

7. Security measures

We take the following measures, in proportion to what the site does.

• Organizational: only the people at our company who answer inquiries can read them.
• Personnel: they are bound by confidentiality and use inquiries only to respond to them.
• Physical: we do not print inquiries or keep them on shared devices.
• Technical: all traffic uses HTTPS. Inquiries are not stored in a database, and the key used to send email is kept on the server only. The form has spam protection and a limit on how often it can be sent.
• External environment: processing by providers outside Japan is described in the previous section.

8. How long we keep it

• We keep inquiries in our mailbox for as long as we need them for the conversation and any follow-up, and delete them about two years after the last contact, or sooner if you ask.
• Our email provider (Resend) and hosting provider (Vercel) keep delivery and access logs for a period under their own terms.
• Analytics totals are kept as statistics that do not identify anyone.

9. Your requests

You can ask us to tell you how we use your personal data, to disclose it, to correct, add to or delete it, to stop using it or erase it, to stop providing it to third parties, or to disclose our records of providing it to third parties. Email hello@narai-ai.jp.

To confirm it's you, please write from the email address you used to contact us. We may ask for further confirmation if needed. You don't need to email identity documents.

We aim to acknowledge your request within two weeks and handle it without undue delay, as the law requires. We charge no fee. If we can't do what you ask, we'll explain why.

You can also raise concerns with Japan's Personal Information Protection Commission.

10. AI notice

This site does not process visitors' information with AI, and it does not send contact-form messages to any AI provider.

The Narai application uses AI providers in the United States (OpenAI and Anthropic) to give feedback on what learners write and say. Its own privacy policy, and a notice shown before a learner first uses an AI feature, explain what is sent and to whom. Organizations considering Narai can ask us for the application's privacy policy and its list of sub-processors.

AI feedback is for practice. Teachers and trainers set the goals and decide final assessments.

11. Changes to this policy

When we change this policy we will post it here with a new version number and effective date, and point out material changes clearly on the site. Where a change of purpose needs your consent, we will ask first.