Privacy Policy

1. Introduction

Sedgewater View Inc. ("Sedgewater View," "we," "us," or "our") operates the Sedgewater View platform, accessible at sedgewaterview.com and through our associated applications (collectively, the "Service"). We are headquartered at 4-8-2 Nakamiya, Asahi-ku, Osaka 535-0003, Japan.

This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our Service. It also explains the rights you have regarding your personal data and how to exercise them.

We are committed to protecting your privacy with the same care and intentionality that we bring to designing our AI companions. The nature of our Service — which involves personal, often deeply private conversations — means that privacy is not a compliance checkbox for us. It is a core value that shapes every product and engineering decision we make.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

We collect information you provide directly, information generated by your use of the Service, and certain technical information from your devices.

Account Information: When you register for an account, we collect your full name, email address, date of birth (for age verification), and a hashed version of your password. If you choose to log in through a third-party authentication provider, we receive your name and email address from that provider.

Conversation Data: Messages, responses, and interactions between you and AI characters on the platform are stored to enable the Service's core functionality, including memory and relationship continuity features. Conversation data is encrypted at rest and in transit.

Profile and Preference Data: Choices you make about your preferred characters, communication styles, notification settings, and subscription tier are recorded to personalize your experience.

Device and Technical Information: We automatically collect certain information when you access the Service, including your IP address, browser type and version, operating system, device identifiers, and general geographic region (country or city level). This information is used to ensure service reliability and security.

Usage Analytics: We collect aggregated and anonymized data about how users interact with the platform — such as which features are used, session duration, and navigation patterns — to improve the Service. This data is processed in a manner that cannot be linked back to individual users.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To create and maintain your account, enable conversations with AI characters, and provide subscription services you have purchased.
• Memory and Personalization: To allow AI characters to remember your preferences, past conversations, and important details you have shared, creating continuity and relationship depth over time.
• Service Improvement: To analyze usage patterns, identify bugs and performance issues, and develop new features. We use anonymized, aggregated data for this purpose.
• Safety and Integrity: To detect and prevent fraud, abuse, violations of our Terms of Service, and other harmful activities on the platform.
• Communications: To send you essential service notifications, security alerts, and — where you have opted in — product updates and newsletters.
• Legal Compliance: To meet our obligations under applicable Japanese law, GDPR where applicable, and other relevant legal frameworks.

4. Data Storage and Security

All user data is stored on servers physically located in Osaka, Japan, operated by certified data center providers that meet or exceed ISO 27001 standards for information security management.

We implement the following technical and organizational security measures:

• End-to-end encryption for all conversation data, using AES-256 encryption at rest and TLS 1.3 in transit.
• Strict role-based access controls, ensuring that only authorized personnel can access user data, and only when necessary to provide support or fulfill legal obligations.
• Regular third-party security audits and penetration testing, conducted at least twice per year.
• ISO 27001 certification for our information security management systems, with annual recertification.
• Automated anomaly detection and intrusion prevention systems monitoring our infrastructure around the clock.
• Secure deletion protocols that render data unrecoverable within 30 days of an account deletion request.

While no system can guarantee absolute security, we invest heavily in maintaining industry-leading protections and we respond to security incidents with urgency and transparency.

5. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. Period. This is a foundational commitment, not a conditional one.

We share data only in the following limited circumstances:

• Service Providers: We engage a small number of vetted third-party service providers to assist with specific functions, including payment processing, email delivery, and cloud infrastructure. These providers are contractually prohibited from using your data for any purpose other than providing their specific service to us, and they are subject to strict data protection obligations.
• Legal Requirements: We may disclose information when required by applicable law, court order, or government request. We will notify affected users of such requests to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, user data may be transferred as part of that transaction. Users will be notified in advance and given the option to delete their accounts before any transfer occurs.
• Safety: We may share information when we believe in good faith that disclosure is necessary to prevent imminent harm to a user or others.

6. Your Rights

You have meaningful control over your personal data. Depending on your location, you may have the following rights:

• Access: You can request a copy of all personal data we hold about you at any time.
• Correction: You can update or correct inaccurate personal information through your account settings or by contacting us.
• Deletion: You can request deletion of your account and all associated personal data. We will fulfill deletion requests within 30 days and confirm when the process is complete.
• Export: You can download your conversation history and account data in a portable, machine-readable format (JSON) from your account settings.
• Opt-Out: You can opt out of marketing communications at any time using the unsubscribe link in any email we send, or through your account notification settings.
• Restriction: You may request that we restrict the processing of your data in certain circumstances, such as while a dispute about accuracy is resolved.
• Objection: Where we process data based on legitimate interests, you may object to that processing.

To exercise any of these rights, contact our Privacy Team at hello@sedgewaterview.com with the subject line "Privacy Rights Request." We respond to all valid requests within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to operate and improve the Service. Our use of these technologies is intentionally minimal.

Essential Cookies: Required for the platform to function, including session management and authentication. These cannot be disabled without breaking the Service.

Functional Cookies: Remember your preferences, such as language settings and display options. You can disable these through your browser, though some features may not work as expected.

Analytics Cookies: Help us understand how the Service is used in aggregate. We use a privacy-preserving analytics solution that does not track users across sites and does not share data with third-party advertising networks. You can opt out through your account settings.

We do not use advertising cookies or participate in behavioral advertising networks. We do not allow third parties to place tracking technologies on our platform.

8. Children's Privacy

The Sedgewater View platform is strictly for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18 years of age.

All users are required to confirm their age at registration. Where we have reason to believe a user may be under 18, we will suspend the account pending age verification and delete all associated data if verification cannot be confirmed.

If you believe a minor has created an account on our platform, please contact us immediately at hello@sedgewaterview.com so we can investigate and take appropriate action.

9. International Transfers

Sedgewater View is headquartered in Japan and our primary data storage infrastructure is located in Osaka. Japan's Act on the Protection of Personal Information (APPI) governs our data handling practices as a baseline.

For users in the European Union or European Economic Area, we comply with the General Data Protection Regulation (GDPR). Our legal basis for processing personal data is primarily the performance of a contract (providing the Service you have subscribed to), with your consent for optional processing such as marketing communications.

When personal data is transferred from the EU/EEA to Japan for processing, we rely on the European Commission's adequacy decision for Japan, which recognizes Japan as providing an adequate level of data protection. Where additional safeguards are required, we implement Standard Contractual Clauses (SCCs) approved by the European Commission.

For users in other jurisdictions, we apply the standards set by Japan's APPI as a floor and comply with any additional applicable local requirements.

10. Contact Information

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact our Privacy Team:

• Email: hello@sedgewaterview.com (subject line: "Privacy Inquiry")
• Postal Address: Privacy Team, Sedgewater View Inc., 4-8-2 Nakamiya, Asahi-ku, Osaka 535-0003, Japan

We take all privacy inquiries seriously and commit to responding within 5 business days. For formal rights requests (access, deletion, export), our response time is 30 days.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make significant changes, we will notify you by email (using the address associated with your account) and by posting a prominent notice on the platform at least 14 days before the changes take effect.

For minor changes that do not materially affect your rights, we may update the policy with less notice. The "Last updated" date at the top of this document will always reflect when the policy was most recently revised.

Your continued use of the Service after a policy update constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should discontinue use of the Service and may request deletion of your account.