Last updated: July 18, 2026
Privacy Policy
Hohto handles user information only as needed to provide the service, review beta applications, maintain security, contact applicants, and support users.
Information we collect
- Phone number, display name, and profile information
- Messages, uploaded files, and shared links
- Beta application details such as email, country, expected group size, intended use, paid-plan interest, and campaign attribution
- Access logs, device information, usage data, and audit logs
- Payment-related information when using paid plans
How we use information
- Identity verification, account authentication, chat, and file sharing
- Reviewing beta applications, inviting participants, operating the beta, and discussing a plan when requested by the applicant
- The current beta form does not create a marketing subscription. Any future bulk updates require separate verified consent with a withdrawal record
- Abuse detection, security controls, audits, and incident investigation
- Service improvement, support, and important notifications
- Billing, contract administration, and legal compliance
Service providers and international processing
- We use providers including Fly.io, Neon, Upstash, Cloudflare, Expo, Twilio, Sentry, and our operational email providers for infrastructure, databases, real-time delivery, web delivery, notifications, authentication, incident investigation, and applicant correspondence. We use LiveKit only when calling is enabled.
- Applicant and service data may be processed in Japan and in other countries or regions where our providers and their subprocessors operate. We limit processing to the stated purposes and use contractual and access controls to protect the data.
- The current beta application page does not use Meta Pixel, Conversions API, on-platform Lead Ads, or session replay, and does not send application content or application IDs to Meta. UTM parameters in the ad URL are used only to measure the application campaign.
- We do not send beta form bodies to error monitoring. Our operational mailbox remains the record of individual correspondence with applicants.
Retention, security, and requests
- To handle an application, we notify an access-restricted Hohto operations Space with a copy of the application ID, email, and use case. This copy follows the same retention and deletion scope as the application record.
- Unsuccessful or inactive beta applications are reviewed for deletion after 12 months unless a longer period is required for an active relationship, security, or law.
- We use encryption in transit, access controls, audit logs, and permission management to reduce leakage, loss, and damage risks.
- Our Privacy Officer and Data Protection Contact is support@hohto.app. Contact that address for access, correction, deletion, suspension, or marketing opt-out requests.