PRIVACY
Privacy Policy
LiDetour sets out this policy for its handling of personal information, drawings, and other user data in taokiho.
The Japanese version of this Policy is the authoritative version. This English version and any other translation are provided for reference only. If there is any discrepancy, the Japanese version prevails to the extent permitted by applicable law.
ENACTED AND EFFECTIVE / 2026-07-29
1. Scope and controller
This Policy applies to the taokiho web service (the “Service,” https://taokiho.com) provided by LiDetour (“we,” “us,” or “our”).
We process personal information under Japan’s Act on the Protection of Personal Information and other applicable laws. Mandatory laws based on a user’s location may also apply when the Service is used outside Japan.
2. Information we collect
We may collect the following information to provide the Service. If you use the Service for an organization, we may also receive information from its administrators.
- Account information: Firebase user ID, email address, display name, authentication method, display language, and account settings
- Organization and access information: organizations, workspaces, projects, members, roles, invitations, and permission settings
- User Content: uploaded PDF, PNG, JPEG, and other drawings; filenames and file attributes; dimensions, geometry, and warnings extracted from drawings; generated code; 3D previews; STEP files; and other outputs
- Processing information: model and version used, processing time, token count, duration, errors, retries, validation results, and other generation history
- Contract and billing information: plan, credit balance and usage, Stripe customer, subscription, and invoice identifiers, purchase history, payment status, billing details, and tax information
- Support information: messages, attachments, and support history
- Usage and device information: IP address, user agent, referrer, access time, screens viewed, product events, cookies and similar identifiers, device and browser information, and technical logs
3. Sources and payment information
We obtain information directly from users, organization administrators, automatic transmissions from devices or browsers, and integrations with providers such as Google and Stripe.
Firebase Authentication or Stripe generally handles passwords and payment credentials, including full card numbers, directly. We do not store plaintext passwords or full payment card numbers.
4. Purposes of use
- Authenticate accounts, manage organizations and permissions, and provide the Service
- Analyze drawings; quote complexity; generate, validate, store, and deliver 3D models, STEP files, and related outputs
- Manage plans, credits, contracts, billing, taxes, and payments
- Send essential account, authentication, billing, and service communications
- Provide support, verify identity, and handle disputes
- Analyze use and improve quality, accuracy, usability, and features
- Prevent, detect, and investigate fraud, abuse, unauthorized access, and security incidents
- Comply with laws and lawful requests from courts and public authorities
- Create statistics that do not identify individuals and perform business analysis
5. Generative AI processing
To analyze drawings and assist CAD generation, the Service sends rendered drawing images, extracted information, and generation instructions to Vertex AI (Gemini) on Google Cloud.
We do not use User Content to train or fine-tune our or a third party’s general-purpose AI models unless the user expressly agrees. Google Cloud’s terms apply to its processing and state that Google will not use customer data to train AI/ML models without prior permission or instruction. Google may retain limited logs for safety and abuse monitoring under its terms.
6. Service providers
We engage the following providers and send information to them only as needed to operate the Service. Providers may be added or changed as our features and contracts change.
| Provider | Purpose | Main information processed |
|---|
| Google LLC (Firebase / Google Cloud) | Authentication, hosting, database, storage, backend, and logging | Account, organization, User Content, usage, and technical information |
| Google LLC (Vertex AI / Gemini) | Drawing analysis, geometry and dimension structuring, and CAD generation assistance | Drawing images, extracted information, generation instructions, model output, and usage |
| Google LLC (Firebase Analytics) | Usage measurement and improvements to quality and usability | User ID, screens, product events, and device and browser information |
| Stripe, LLC and affiliates | Payments, billing, tax calculation, fraud prevention, and subscription management | Email, billing details, payment method, transaction and subscription information, and device information |
7. Disclosures and international transfers
We do not disclose personal data to third parties except with the user’s consent, to processors as needed for the stated purposes, in a business transfer, when required by law, to protect life, physical safety, or property, or as otherwise permitted by applicable law.
Information may be processed or stored by providers or on infrastructure in the United States and other countries outside Japan. We use contractual protections, provider reviews, and other necessary and appropriate measures under applicable law. We will provide legally required information about foreign privacy systems and provider safeguards upon a valid request.
8. Cookies, analytics, and advertising
The Service uses cookies, local storage, and similar technologies for authentication, security, preference storage, usage measurement, and improvement. Browser settings can restrict these technologies, but some features may stop working.
We use Firebase Analytics to process page views, product events, device information, and a user ID assigned by us. We do not use an email address as the Analytics user ID.
As of the effective date, we do not sell personal information for money or disclose it for cross-context behavioral advertising or targeted advertising. If this changes, we will update this Policy and provide notice and opt-out methods required by applicable law.
9. Retention and deletion
Uploaded drawings and generated files are generally deleted or made inaccessible according to the retention period shown for the user’s plan: Free 7 days, Starter 30 days, Pro 180 days, Business 365 days, and Enterprise as agreed by contract. A new upload, plan change, or contract termination may update the expiration date.
We retain account, organization, contract, billing, credit, audit, and anti-abuse information as needed to perform contracts, comply with law, meet accounting and tax obligations, handle disputes, and maintain security. Backups and technical logs may remain for a limited period until their normal overwrite or deletion cycle is complete.
If we receive a deletion request, we will delete or deidentify relevant personal information within a reasonable period, except where law or a legitimate retention need requires us to keep it.
10. Security
We use reasonable safeguards, including access restrictions, credential controls, encryption in transit, storage access controls, signed URLs, logging, provider oversight, and vulnerability response. No internet transmission or storage system can be guaranteed to be completely secure.
Before uploading trade secrets, personal information, export-controlled information, or other sensitive data, users must assess whether use is appropriate in light of the Service’s features, storage locations, and their legal duties. Contact us before uploading if a separate NDA, data processing agreement, or special security terms are required.
11. Privacy rights
Under applicable law, users may have the right to request notice of purposes, access or disclosure, correction, addition, deletion, restriction, cessation of third-party disclosure, or a copy of their personal information. We may verify the requester’s identity or an agent’s authority before responding.
Residents of certain U.S. states may also have rights to know the information we collect, use, and disclose; access, correct, delete, or obtain a portable copy; opt out of sale, sharing, or targeted advertising; appeal a refusal; and not receive discriminatory treatment for exercising privacy rights. To appeal a refusal, contact the same address and state “Privacy Appeal” in the subject line.
We may deny a request in whole or in part where an exception applies, the request would infringe another person’s rights, identity cannot be verified, or another lawful basis permits denial.
12. Children’s privacy
The Service is not directed to anyone under 18, and people under 18 may not use it. If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it unless retention is legally required. A parent or guardian may contact us below.
13. Third-party information in User Content
If User Content contains another person’s personal information, the user is responsible for providing required notices and obtaining consent or another lawful basis for us to process it. Do not upload unnecessary personal information, government identifiers, health information, financial account credentials, or other sensitive information.
14. Changes to this Policy
We may update this Policy when laws, the Service, or our data practices change. We will give advance notice of material changes through the Service, by email, or through another reasonable method. We will obtain consent separately if applicable law requires it.
15. Contact and request procedure
For questions, complaints, or privacy requests, email info@lidetour.com. Use the subject “taokiho Privacy Request” and include the account email and requested action. We may request additional information to verify identity.
Personal information handling business operator: LiDetour. Representative: Hikaru Ono. Address: Wizard Building 402, 1-4-3 Sengencho, Nishi-ku, Yokohama, Kanagawa 220-0072, Japan.