Privacy policy

1. Responsible entity and scope

ビリオン株式会社 (representative: 小林博文; 9-17 Kuwado, Kasugai-cho, Fuefuki-shi, Yamanashi 406-0003, Japan) handles personal information for this website and our directly operated FDE Web, FDE Windows, AIRouter, Legal and other services. Contact sales@pmo.dev for privacy matters. Organizations determine the purposes of their business data; we process it under contract. Independent providers follow their separately disclosed policies.

2. Information and purposes

Account details, display names, email, authentication and organization roles support login, access and seat management. Orders, amounts, currencies, taxes, payment/refund records and necessary evidence support delivery, reconciliation and legal obligations. Inquiry names, companies, contact details and messages support replies. Device, browser, IP, access and error data support service operation, security and troubleshooting.

FDE processes selected documents, code, tasks and AI input/output; AIR processes models, routes, requests, usage and charges; Legal processes parties, contracts, evidence, attachments, versions, comments, approvals, participant permissions, search indexes and AI content. Processing is limited to enabled functions and authorized scope.

Installing a client does not authorize uploading all device files. Do not send passwords, API keys or full card details through support or ordinary forms. Card information is handled in the activated payment provider’s payment flow. Redact unrelated information from transfer evidence.

3. AI and model providers

We do not use customer projects, prompts or outputs to train general-purpose models or sell that content. Model functions in FDE, AIR and Legal send the necessary request content to the actual selected model processor. Retention, training and security conditions depend on the actual API contract. Your own credentials also remain subject to your provider agreement.

Masking does not remove obligations where information remains identifiable. We do not promise zero retention by every processor or processing exclusively in Japan. Submit case and third-party information only within your authority and check the product’s actual provider route and processing terms.

4. Organization permissions

Organization administrators may manage members, seats and organization billing usage within their responsibilities, but do not automatically see all content, prompts or cases. Project and case permissions govern content access. Providers are limited to their service scope, and external participants to valid invitations. Matching email domains do not automatically convert individuals to organization members.

5. Service providers and international processing

Our policy is not to build browsing profiles for advertising or persist full traffic content by default. This is not a zero-log or complete-anonymity claim. We use infrastructure, email, security, payment and model providers as necessary and restrict the purposes of their processing.

International processing follows applicable notice, consent or other required safeguards; use of the service is not blanket consent to every transfer. Contact our privacy desk for the actual processors, regions and conditions for your product. Legally required disclosure, authorized sharing and organization-contract processing follow their respective requirements.

6. Cookies, preferences and marketing

Cookies or local storage support login, security, language and appearance; clearing them may affect functions or preferences. Website appearance preferences are stored in the current browser. Service/security notices are separate from optional marketing, which is not required to purchase. If non-essential tracking is introduced, we provide choices and withdrawal mechanisms as applicable.

7. Retention, security and deletion

We retain information as needed for its purposes, contracts and legal obligations. You may request account closure or deletion; organization-data requests require authority, and a member’s departure does not automatically delete cases. Accounting, disputes and preservation duties may require restricted continued retention; we do not promise immediate deletion of everything. We explain delays or refusals. Data handover, backup cleanup and retention follow the relevant product agreement.

We manage security through access controls, protected transmission, credential management, backups and necessary auditing. Reportable personal-information incidents are reported and notified as required. Safeguards do not guarantee a risk-free system.

8. Requests and policy updates

Email us to request access, correction, deletion, cessation of use or restrictions on disclosure as provided by law. Identity checks request only necessary information, never passwords or API keys. We can help route organization-content requests to its contact. We respond initially within two business days and act within applicable legal deadlines, explaining progress or limitations.

Individual paid services are for users aged 18 or older; organizations must ensure member authorization meets applicable requirements. We notify material policy changes and seek renewed consent where required, without retroactively expanding uses of previously collected information.