Privacy Policy — Murasaki

1. Introduction

Murasaki (“we”, “our”, or “us”) refers to Murasaki Italia K.K. (茈イタリア株式会社), a company organized under the laws of Japan, which operates murasaki.ai and app.murasaki.ai.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information: When you create an account, we collect your email address and, if you use Google sign-in, your Google profile name and email.

Usage Data: We collect information about how you use the service, including chat messages, channels/profiles you add, and projects you create.

Payment Information: If you subscribe to a paid plan, payment is processed by Stripe. We do not store your full credit card number. Stripe's privacy policy governs payment data.

Automatically Collected: We may collect IP addresses, browser type, and device information through standard web server logs.

3. How We Use Your Information

Provide, maintain, and improve the service
Process transactions and send related information
Send technical notices and support messages
Respond to your comments and questions
Monitor and analyze usage trends

4. Third-Party Services

We use the following third-party services that may process your data:

Supabase: Database and authentication (data stored in US)
Stripe: Payment processing
Vercel: Hosting and deployment
OpenRouter / OpenAI: AI model inference (chat messages are sent to AI models to generate responses; these providers may process your messages in accordance with their own privacy policies)
YouTube Data API: Fetching public channel and video metadata
Cohere: Search result reranking for improved response quality

We do not sell your personal data to any third party. Third-party services receive only the minimum data necessary to perform their function.

5. Publicly Available Content from YouTube and Instagram

Murasaki processes publicly available content from YouTube and Instagram to power its learning and accessibility features. This section explains what we collect, what we store, and our legal basis for doing so.

What we collect and store:

Text transcripts of publicly available videos and reels
Video metadata (titles, descriptions, publish dates, thumbnail URLs)
Channel or profile metadata (name, description, subscriber/follower counts)
Processed text indexes and embeddings derived from transcripts for search functionality

What we do NOT collect or store:

The original video or audio files
Private, unlisted, or paywalled content
Content from accounts that are not publicly accessible
Personal data of content creators beyond what is publicly displayed on their channel or profile page

Legal basis:

Japanese Copyright Act, Article 30-4: The processing of publicly available transcripts through computational analysis (chunking, embedding, indexing) constitutes non-enjoyment purpose use (思想又は感情の享受を目的としない利用) — specifically data analysis (item ii) and computer data processing not perceived by human senses (item iii) — as authorized under the Japanese Copyright Act
Japanese Copyright Act, Article 47-5: The display of minor excerpts from transcripts in AI-generated answers constitutes minor exploitation (軽微利用) as part of an information analysis service, as independently authorized under Article 47-5
Legitimate interest: Processing publicly available content to provide an accessibility and learning service that benefits users who cannot consume content in its original video/audio format
Publicly available data: All content processed is publicly available material that creators have chosen to publish openly on public platforms
U.S. fair use (supplementary): For users in the United States, the Service's transformative use additionally qualifies under Section 107 of the U.S. Copyright Act

Content creators retain all intellectual property rights to their original content. Murasaki does not claim ownership of any third-party content. We do not sell, license, or redistribute creator content to third parties. AI-generated responses cite the original source videos to direct users back to the creator's content.

6. How AI Processes Your Data

When you send a chat message, the following processing occurs:

Your message is used to search our index of stored transcripts to find relevant content
Relevant transcript excerpts, along with your message and conversation history, are sent to third-party AI models (via OpenRouter) to generate a response
Your conversation history is stored in our database to enable follow-up questions and session continuity

We do not use your chat messages or conversation data to train AI models. Third-party AI providers may have their own data processing policies, which we encourage you to review.

7. Cookies

We use essential cookies for authentication (Supabase session cookies). We do not use advertising or third-party tracking cookies.

8. Data Retention

Account data: Your data is retained as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Account data is deleted within 30 days of a deletion request.

Public content data: Processed transcripts and metadata from publicly available content may be retained independently of individual user accounts, as this data serves multiple users and is derived from publicly available sources.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate personal data
Request deletion of your personal data
Object to or restrict processing of your personal data
Request portability of your personal data

To exercise any of these rights, contact us at hello@murasaki.ai. We will respond to all requests within 30 days.

10. Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication, row-level security policies on database tables, rate limiting on API endpoints, and access controls. However, no method of transmission over the Internet is 100% secure.

11. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

12. International Data Transfers

The Service is operated by a Japan-based entity. Your data may be processed and stored in Japan and the United States (where our infrastructure providers operate). By using the Service, you consent to the transfer of your information to Japan and the United States, which may have different data protection laws than your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date.

14. Contact Us

If you have questions about this Privacy Policy, contact us at hello@murasaki.ai.