Last updated: September 24, 2026
[Notice] Privacy Policy revised (effective September 24, 2026)
This policy was revised on September 24, 2026. We added Section 4-2 (Outsourcing and Overseas Transfer), which explains that information you enter when using AI features is sent to overseas AI service providers for analysis, along with the processors, items, purposes and retention. The privacy officer contact has changed to admin@starium.site. This revision reflects processing that the existing AI features already performed; no new processing has started.
1. Purpose of Processing Personal Information
- Member management: identity verification, service provision, fraud prevention
- Service provision: ledger, OCR, budget management, AI analysis
- Marketing (optional): announcements of new services
2. Personal Information Collected
2.1 Required Items
| Category | Items |
|---|---|
| Registration | Email, password, name |
| Service use | Access logs, IP, device information |
2.2 Financial Information (separate consent)
- Income/expense records
- Receipt images and OCR-extracted data
- Budget settings
- Asset information (optional)
All financial information is stored encrypted with AES-256.
3. Retention and Destruction
| Category | Period | Basis |
|---|---|---|
| Member information | Until withdrawal | Service provision |
| Financial transaction records | 5 years | Electronic Financial Transactions Act |
| Access logs | 3 months | Protection of Communications Secrets Act |
4. Provision to Third Parties
In principle, we do not provide information without consent. Exceptions:
- Prior user consent
- Requests under applicable laws
4-2. Outsourcing and Overseas Transfer of Personal Information
To provide AI financial chat and automatic transaction categorization, we outsource processing as below. Because the processors are located overseas, personal information is transferred abroad.
| Processor (Country) | Items Transferred | Purpose |
|---|---|---|
| Groq, OpenAI, Anthropic (all USA · used in this fallback order) | Messages entered in AI chat; transaction description (memo, merchant) and amount for categorization | AI chat responses, automatic transaction categorization |
- Timing and method: sent over encrypted connections (HTTPS) when you request the AI feature
- Retention (per each processor’s official documentation, checked September 2026): Groq — does not retain request data (Zero Data Retention enabled from September 24, 2026) / OpenAI — keeps abuse-monitoring logs for up to 30 days, then deletes them; not used for model training / Anthropic — deleted automatically within 30 days; not used for model training
- How to refuse: nothing is sent if you do not use the AI features; only the AI features become unavailable.
5. Security Measures
- Encryption: financial information encrypted with AES-256
- Access control: principle of least privilege
- Security systems: firewall and IDS operation
6. Rights of Data Subjects
- Request to access personal information
- Request to correct errors
- Request for deletion
- Request to suspend processing
7. Personal Information Protection Officer
Email: admin@starium.site
8. Changes to This Policy
Changes will be announced 7 days in advance.
Supplementary Provisions
This policy takes effect on February 5, 2026.