Privacy Policy
Last updated: August 2, 2026
Moon Technica Inc. (the "Company") respects your privacy and handles personal information in accordance with Japan's Act on the Protection of Personal Information (APPI). This Privacy Policy explains how we collect, use, and share personal information in connection with Gitlas (the "Service").
1. Business Operator
Name: Moon Technica Inc.
Address: 1-21-1-608 Shimocho, Omiya-ku, Saitama-shi, Saitama 330-0844, Japan
Representative: Takanori Itabashi
2. Personal Information We Collect
Account information: your GitHub profile (username, display name, avatar) and email address obtained through GitHub authentication.
Usage data: projects, issues, documents, messages, and other content you create in the Service, together with operation logs.
Payment information: billing details processed by Stripe. We do not store full credit card numbers on our servers.
AI inputs: prompts and related data you submit to AI features.
Device and access data: IP address, browser and device information, and cookies.
3. Purposes of Use
We use personal information to: provide, maintain, and improve the Service; authenticate users and manage accounts; process payments and manage subscriptions; provide AI-assisted features; send notifications and respond to inquiries; detect and prevent fraud or abuse; and comply with legal obligations.
4. Provision to Third Parties
We do not provide personal information to third parties without your consent, except where permitted by law (for example, to comply with legal obligations or to protect life, body, or property).
5. Service Providers
We entrust part of the processing of personal information to the following service providers in order to operate the Service:
Supabase, Inc. — database, authentication, and storage.
GitHub, Inc. — authentication and repository integration.
Stripe, Inc. — payment processing.
LiveKit, Inc. — voice and video calls.
OneSignal — push notifications.
Functional Software, Inc. (Sentry) — error monitoring.
Resend, Inc. — email delivery.
OpenAI and other AI providers — AI feature processing.
Vercel Inc. — application hosting.
Google LLC — access analytics (Google Analytics).
6. Cross-Border Transfer
Some service providers are located outside Japan, including in the United States. When transferring personal information to third parties in foreign countries, we take the measures required by the APPI.
7. Cookies and Analytics
The Service uses cookies and Google Analytics to understand usage and improve the Service. You can disable cookies in your browser settings and opt out of Google Analytics using Google's opt-out browser add-on. Google Analytics collects data under Google's own privacy policy.
8. Security Measures
We implement reasonable organizational, physical, and technical measures to protect personal information against loss, misuse, and unauthorized access.
9. Disclosure, Correction, and Deletion
You may request the disclosure, correction, addition, deletion, suspension of use, or cessation of provision of your retained personal data. Please contact us via the inquiry form; after verifying your identity, we will respond in accordance with applicable law.
10. Retention Period
We retain personal information only for as long as necessary for the purposes above or as required by law, and delete or anonymize it thereafter. Deleting your account removes the associated personal data, except where retention is legally required.
11. Minors
If you are a minor, please use the Service with the consent of a parent or guardian.
12. Contact
For questions or requests regarding personal information, please contact our inquiry desk via the form: https://forms.gle/S6riJiTQJqHJosBN9
13. Changes to this Policy
We may update this Privacy Policy. The updated version takes effect when posted within the Service or on our website.