Legal
Privacy Policy
Last updated: November 1, 2026
SHAINY AI runs on your own computer, and we built it to keep your credentials and work there. This policy explains what we do collect, why, and the choices you have.
1. Who we are
SHAINY AI is operated by mou Inc. (“mou”, “we”, “us”), 16-1 Nishimabashi Hirotecho, Matsudo-shi, Chiba 271-0048, Japan. For the purposes of data protection law, mou is the controller of the personal data described in this policy, except where we process data on behalf of a business customer, as explained in section 8.
Questions about privacy can be sent to [email protected].
2. What this policy covers
This policy explains how we handle personal data when you visit shainy.ai, join our waitlist, create an account, use the SHAINY AI desktop app (the “App”) and our servers, buy a plan, or contact us. It does not cover third-party services you choose to connect, such as your AI provider or messaging apps; their own privacy policies apply.
3. Designed to keep your data on your computer
SHAINY AI runs on your own computer. Much of what you do with it stays there and never reaches our servers:
- Your AI provider sign-in. If you bring your own AI, you sign in through the provider’s own flow. We do not collect, store or have access to your AI provider passwords or session tokens.
- Connected app tokens. Access tokens for the messaging apps, email, calendars and other services you connect are stored on your computer.
- Your files and work. Files your teammates read or create on your computer, and local activity logs, stay on your computer.
- Requests to your own AI provider. When you bring your own AI, your requests go from your computer directly to that provider, under its terms and privacy policy.
4. Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Waitlist | Email address, language, the page you signed up on, and campaign tags in the link you followed | You |
| Account | Name, email address, plan, team membership and role, account settings | You |
| Billing | Name, email, country, plan, subscription status, transaction records and the last digits and type of card. We do not receive or store your full card number | Paddle |
| Teammate configuration | The roles, names, instructions, skills and settings you give your teammates, and memory the Service keeps so teammates work consistently | You and the App |
| Included AI usage | When you use the AI included in your plan, the requests and responses needed to generate output, and usage amounts for your monthly allowance | You and the App |
| Device and diagnostics | App version, operating system, device identifier, plan checks, crash and error reports, and health status of the App | The App |
| Support | Messages you send us and information you share when asking for help | You |
| Website | IP address, browser type and pages requested, recorded in server logs; your language choice, saved in your browser | Your browser |
We do not ask for special categories of data (such as health information). Please don’t provide it unless it is needed for a task you ask your teammate to do.
5. How we use personal data
- To provide the Service: run your account, check your plan, deliver roles, skills, settings and updates to the App, and generate output with included AI.
- To process payments and manage subscriptions, together with Paddle.
- To keep the Service secure and reliable: detect abuse and fraud, troubleshoot, and fix errors.
- To communicate with you: service notices, trial and renewal reminders, usage alerts, and replies to support requests.
- To tell you when SHAINY AI is ready, if you joined the waitlist, and — where allowed — about new features. You can unsubscribe at any time.
- To improve the Service using aggregated or de-identified usage data.
- To comply with legal obligations and enforce our Terms.
We do not sell your personal data, and we do not use Your Content to train AI models. Our agreements with the AI model providers we use for included AI do not allow them to train their models on your data.
6. Legal bases (EEA, UK and similar laws)
- Contract — to provide the Service you signed up for and process payments.
- Legitimate interests — to keep the Service secure, prevent fraud, understand and improve how it is used, and send service-related messages. We balance these interests against your rights.
- Consent — for the waitlist and marketing emails, and for connections you choose to set up. You can withdraw consent at any time.
- Legal obligation — to keep records required by tax and accounting law and to respond to lawful requests.
7. How we share personal data
- Paddle. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle receives the information needed to process your order, prevent fraud and meet its legal obligations, and handles it under its own privacy notice as an independent controller.
- AI model providers. When you use the AI included in your plan, the content of your requests is sent to the AI model providers we contract with, only to generate responses for you.
- Service providers. Companies that host our servers and website, deliver email, and provide error reporting and in-app help tools, acting on our instructions. A list is available on request.
- Services you connect. When you ask a teammate to act in a connected service, it sends data there from your computer, at your direction.
- Your team. On a Team plan, administrators can see member lists and workspace settings.
- Legal and safety. Where required by law, or to protect the rights, safety or property of our users, the public or us.
- Business transfers. If we are involved in a merger, acquisition or sale of assets, subject to this policy.
8. If you are a business customer
If you use the Service to handle personal data about your own customers or contacts, you decide what data goes into the Service and why, and we process it on your behalf to provide the Service. Contact us if you need a data processing agreement.
9. International transfers
We are based in Japan, and our service providers may process data in other countries, including the United States. When we transfer personal data across borders, we use appropriate safeguards required by applicable law, such as standard contractual clauses for data from the EEA and UK, and we comply with the rules on transfers to third parties in foreign countries under Japan’s Act on the Protection of Personal Information. You can ask us for more information about these safeguards.
10. How long we keep data
- Account and teammate data on our servers: while your account is active. After your account is closed, you can export it for 30 days; we then delete it, normally within a further 30 days, including from backups on their regular cycle.
- Included AI requests and responses: only as long as needed to generate output, prevent abuse and support you.
- Diagnostics and server logs: generally up to 90 days.
- Billing records: as long as tax and accounting law requires.
- Waitlist: until we launch and you decide whether to sign up, or until you unsubscribe.
- Data on your own computer stays under your control until you delete it or uninstall the App.
11. Security
We use technical and organizational measures to protect personal data, including encryption in transit, access controls and least-privilege access controls. Keeping credentials on your computer reduces what is stored on our servers. No system is perfectly secure, so please also keep your computer and accounts protected. If a breach affects your personal data, we will notify you and the authorities as the law requires.
12. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. You can also ask us to stop using your data for marketing.
To make a request, email [email protected]. We may need to verify your identity. We aim to respond within 30 days. You can also lodge a complaint with your local data protection authority.
If you are a California resident: we do not sell or share personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your privacy rights.
13. Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact [email protected] and we will delete it.
14. Cookies and local storage
Our website does not use advertising cookies. We save your language choice in your browser’s local storage so the site opens in your language next time. Our pages load fonts from a third-party web font service, which receives your IP address to deliver them.
15. Changes to this policy
We may update this policy. We’ll post the new version here and change the “Last updated” date. If changes are significant, we’ll tell you by email or in the App before they take effect.
16. Contact us
mou Inc.
16-1 Nishimabashi Hirotecho, Matsudo-shi, Chiba 271-0048, Japan
Email: [email protected]
Help is available in the App and at shainy.ai. Billing, cancellation and refund requests are handled on Paddle’s pages (see the link in the email Paddle sends after your purchase, or paddle.net).