legal

Privacy Policy — Avatar

Last updated: May 17, 2026 Data controller: Paripi ERP Co., Ltd. (“we”, “us”, “our”) Application: Avatar (アバター / 数字人 / 아바타)

---

1. Purpose

This Privacy Policy describes how we collect, use, share, and protect information when you use the Avatar Android application (the “App”). By using the App, you agree to the information practices described here.

The App is a B2B enterprise application. It is operated as a kiosk terminal at facilities after registration (device code + password) by an organization administrator.

2. Information We Collect

2.1 Automatically collected

Type	Trigger	Purpose
Voice data	After “Start Session” tap, via microphone	Real-time AI conversation, speech recognition
Camera frames (optional)	Only when user explicitly enables the camera toggle	Visual assistance
Device identifiers	At first app launch	Device authentication, organization linkage
App usage logs	All feature usage	Bug fixing, service improvement
Network info	On WebSocket connection	Quality monitoring
Coarse location	At device boot (optional)	Device placement management

2.2 Information you provide

• Device code + password: Issued by your organization administrator
• Settings: Language, voice, knowledge-base assignment

2.3 Information we DO NOT collect

• Visitor names, addresses, phone numbers, email addresses
• Credit card or financial information
• Biometric data (facial recognition, fingerprints)
• Contact lists, SMS, call logs

3. How We Use Information

Collected information is used only for:

• Core App functionality (AI conversation, digital human video streaming)
• Diagnosing and fixing issues
• Improving service quality and developing new features
• Detecting and preventing abuse
• Legal compliance (tax, consumer protection)

We do not use information for:

• Targeted advertising
• Sale to third parties
• User profiling

4. Sharing with Third Parties

The App integrates with the following third-party services:

Third party	Shared data	Purpose	Policy URL
Alibaba Cloud (Qwen Omni)	Voice data	AI conversation processing	https://www.alibabacloud.com/help/legal/privacy
BytePlus (RTC)	Video stream	Digital human video delivery	https://www.byteplus.com/en/legal/privacy-policy
Google (Firebase Cloud Messaging)	Device identifiers	Push notifications (optional)	https://policies.google.com/privacy
Microsoft Azure	Backend infrastructure	Server-side processing	https://privacy.microsoft.com

We may disclose information when required by law or to protect the rights, property, or safety of our company, our users, or others.

5. Data Retention

Data type	Retention	Deletion method
Voice data (live session)	7 days after session end	Automatic
Camera frames	Not stored server-side (real-time only)	N/A
Usage logs	90 days	Automatic
Device credentials	Contract period + 12 months	Automatic on termination

6. Security

• In transit: All communication uses TLS 1.2 or higher
• At rest: Server-side data encrypted with AES-256
• Access control: Only authenticated personnel
• Incident response: We notify affected customers and authorities within 72 hours of a material breach

7. Your Rights

You (or your organization administrator) have the right to:

• Access the personal information we hold
• Rectify inaccurate information
• Erasure (“right to be forgotten”)
• Data portability in a machine-readable format
• Object to processing

Requests: privacy@paripi-erp.com We respond within 30 days.

8. Camera and Microphone (Android Permissions)

The App uses the following Android permissions:

• Microphone (RECORD_AUDIO): Required for AI conversation. Asked at app launch.
• Camera (CAMERA): Optional. Activated only after explicit user tap and consent dialog. Default OFF.
• Location (ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION): For device placement management by the organization admin.
• Bluetooth (BLUETOOTH_*): For integration with related hardware (chassis, etc.).

9. Children’s Privacy

The App is not intended for children under 13 (COPPA-compliant). We do not knowingly collect information from children under 13 and will delete any such information promptly.

10. International Data Transfers

Data may be transferred to servers outside your country (China, United States, Singapore, etc.). We implement appropriate safeguards for such transfers.

11. Changes to This Policy

We may update this Policy. Material changes will be notified via in-app message or email. The latest version is always available on our website.

12. Contact

Data Protection Officer: Paripi ERP Co., Ltd. Legal Department Email: privacy@paripi-erp.com Web: https://legal.paripi-erp.com/ Address: (insert Japan registered address)

---

Regulatory Compliance

• Act on the Protection of Personal Information (Japan, 2003 Act No. 57, 2022 amendment)
• General Data Protection Regulation (EU GDPR)
• California Consumer Privacy Act (CCPA)
• Personal Information Protection Law (China PIPL)
• Personal Information Protection Act (South Korea)