Legal

Privacy Policy

How MRAG collects, uses, stores, and protects personal information.

Effective date
May 8, 2026
Last updated
May 8, 2026
Version
v1.0

1. Scope

This policy applies to MRAG website visitors, prospects, and customer organizations using the service.

It explains what personal information is processed, why it is processed, and how requests are handled.

2. Data we process

We may process account contact details (such as email addresses), operational logs, support interactions, and configuration metadata needed to deliver the platform.

Customer-uploaded business content — including documents, queries, and knowledge base materials — is handled under customer instructions and contract terms.

We do not sell, rent, or share personal data with third parties for advertising or profiling purposes.

3. Usage and retention

Data is used for service delivery, security operations, abuse prevention, and product reliability.

Retention periods vary by contract, legal obligation, and operational necessity. Customers may request deletion at any time through their account representative.

We retain account contact data for the duration of the active service relationship. Operational logs are retained for a limited period consistent with security and compliance requirements.

4. Third-party services

MRAG integrates with LLM providers (including but not limited to OpenAI, Anthropic, Google) and cloud infrastructure services to deliver the platform. These providers operate under their own privacy policies.

Customer data submitted to MRAG may be processed by these providers solely for the purpose of fulfilling the requested service. We do not permit providers to use customer data for their own model training without explicit consent.

We recommend reviewing the privacy policies of any third-party services connected to your MRAG deployment.

5. Cross-border data transfer

MRAG is operated by a Japan-based entity. Data may be processed in Japan and in regions where our infrastructure and LLM providers operate.

For customers subject to GDPR, APPI, or other data protection regulations, we support contractual arrangements to address cross-border transfer requirements.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export personal data we hold about you.

You may also have the right to withdraw consent or object to certain processing activities.

To exercise these rights, contact us using the details in Section 7.

7. Contact

Privacy and data requests can be submitted to: datadriven@musashino.jp

Operator: Musashino Co., Ltd. — https://mrag.jp/