Last updated: August 12, 2026
English translation for reference. The Japanese version is the governing text in case of any discrepancy.
Kabau (formerly Banto) collects the following information:
When creating long-term memories from conversations, we instruct the AI not to retain raw full names, addresses or national identification numbers in the subject label, and to use initials or roles instead (as this is performed by an AI model, automatic pseudonymization cannot be guaranteed). Please do not enter Japanese Individual Numbers (My Number) or documents containing them.
We use the following services, which may involve data being sent to them:
Disclosure to these third parties is limited to what is necessary to provide the Service. For transfers to vendors outside Japan, see 4. Cross-border provision to third parties outside Japan.
In providing the Service, some of the information you entrust to us is transferred to vendors outside Japan. The circumstances of those transfers and the measures we take are as follows.
The United States has no comprehensive, cross-sectoral personal data protection law comparable to Japan's Act on the Protection of Personal Information or the EU GDPR; instead it is governed by sector-specific federal laws and by state laws such as the California Consumer Privacy Act (CCPA/CPRA). The United States is also not designated, under Japan's Act on the Protection of Personal Information, as a foreign country recognized as having standards equivalent to Japan's (an adequacy designation). In addition, the United States has regimes under which law enforcement and similar authorities may, subject to certain requirements, require businesses to disclose data (e.g., the CLOUD Act and Section 702 of the Foreign Intelligence Surveillance Act (FISA)).
The EU (Estonia) is designated, under Japan's Act on the Protection of Personal Information, as a foreign country recognized as having standards equivalent to Japan's.
For each of the vendors above, we have reviewed whether contractual terms governing the handling of personal information (data processing agreements, standard contractual clauses, etc.) exist and what they provide, and we keep a record of that review together with the date it was carried out (last reviewed: August 12, 2026). For most of these vendors, such terms apply automatically as part of their terms of service. For some, however, a separate execution step is required, and that step has not been completed in every case. We review the status at least once a year; if problems arise in the implementation of those equivalent measures we will take the necessary action, and if improvement proves difficult we will suspend the provision of personal data to the vendor concerned. You can ask about the status for any individual vendor via the contact in (5) below.
At the request of an individual, we will provide information at support@banto-roumu.com regarding the equivalent measures taken by the recipient third party, including: the name of the recipient country; the presence and an outline of that country's personal data protection regime; an outline of the measures taken by the recipient; the frequency and method of our review; and, where problems have arisen in the implementation of the equivalent measures, the nature of those problems and the action we have taken.
Of the third-country transfers above, those to vendors for which a data processing agreement incorporating Standard Contractual Clauses (SCCs) is in effect rely on the SCCs under GDPR Article 46. For the vendors whose execution step is not yet complete (see (3) above), the same will apply once that step is completed. Plausible Analytics (Estonia) is an EU-based vendor, so transfers to it are not third-country transfers.
Data is retained for as long as your account exists. All data is deleted at the same time as account deletion. If there is no login activity for 2 years, we will notify you by email in advance before deleting your account and data.
You can stop notification emails at any time via the unsubscribe link at the bottom of the email, or via the unsubscribe page.
The Service uses a session cookie to keep you logged in. We do not use cookies to track individuals. Analytics is provided by Plausible Analytics, which is cookie-free and collects only anonymous pageview-style statistics.
To exercise the above rights, please contact support@banto-roumu.com.
Row-Level Security (RLS) ensures that each company/user can only access their own data. Communications are encrypted via HTTPS/TLS. For details, see Security & data protection.
support@banto-roumu.com (we accept inquiries by email and reply within 3 business days as a rule)