AIToday Privacy Policy

Last updated: October 22, 2026

1. Introduction

Akira Takahashi (高橋 輝; "we", "us", or "our") sets forth this Privacy Policy ("Policy") regarding the handling of personal information in the AI news delivery service "AIToday" (https://hellomarvisaitoday.com, the "Service").

2. Information We Collect

2.1 Information Collected During Registration (Required)

Depending on how you register and log in (an email address and password, or a Google, Facebook, X or LinkedIn account), we collect the following information:

• Email address
• Display name
• Profile image URL (when you log in with an outside account)
• Locale (language and region settings)

2.2 Information Provided Voluntarily by Users

During onboarding, in settings and on article pages, you may optionally provide the following information:

• Age group
• Occupation
• Industry (including the industry name you type if you choose "Other")
• Gender
• Income range
• Country of residence
• Areas of interest (the topics you choose, and the AI companies and topics you follow: the options you pick during onboarding or in settings, plus the one line you can type yourself)
• Your work context (your responsibilities, what you are working on now, what you want to achieve, what you plan to do next, and similar free-text answers you enter during onboarding or in settings)
• The AI tools you use
• Questions you type into "Ask AI" on article pages (including when you are not logged in). Questions and answers are published on that article's page for anyone to read (including when you are not logged in). We do not publish questions we judge to contain personal names, contact details, abuse, or advertising

About income range: This information is used solely for content personalization (delivering news tailored to your interests). It is never shared with third parties or used for advertising targeting.

2.3 Information Received from Outside AI Tools (AI Context Sync)

If you connect AI Context Sync, we receive the following from the AI tool you connect (such as Claude):

• Short texts describing your work context (each up to 1,000 characters, labelled as occupation, responsibilities, current project, goal, next step, tool or topic)
• The name of the tool that sent them

What we receive is stored as pending, and only approved items are used to write For You.

2.4 Information Automatically Generated Through Service Use

• Topic and source selection settings
• Delivery channel settings (Email / Slack / LINE)
• Article interactions (clicks, bookmarks, shares, hidden articles)
• Site browsing records (pages viewed, referrer, campaign information for how you arrived)

2.5 Cookies

The Service uses the following cookies. We do not use advertising cookies.

• Authentication: keeps you logged in. Required; if you disable it you cannot log in.
• Language (locale, 1 year): remembers the language you chose.
• Visitor ID (aitoday_vid, 1 year): lets us count, within the Service, which pages and articles are read.
• Arrival source (aitoday_attr, 90 days) and referral code (ref, 7 days): record how you came to sign up.
• Google Analytics: we use Google Analytics by Google LLC to analyse how the site is used. It uses cookies to send Google the pages you view, the referrer, your device and browser type, and your approximate region. See How Google uses information from sites or apps that use its services. To opt out, use the Google Analytics Opt-out Browser Add-on.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service delivery: Account management, authentication, news delivery
• Personalization: Content optimization based on user interests
• For You: we match your work context and AI Context Sync items against the articles we deliver, and have AI write notes for you. The short form of your display name that opens a note is not sent to AI; our system inserts it into the text after AI has written it
• Answering Ask AI: we pass the question you type to AI to write the answer
• Automated processing: Article topic classification, scoring, summarization, and delivery content selection
• Service improvement: Usage analysis (including Google Analytics), feature improvements
• Notifications: Sending important service-related announcements

4. Automated Decision-Making

The Service uses the following automated processes for content selection and delivery:

• Topic classification: Automatic categorization of articles by AI
• Scoring: Automatic evaluation of article importance and relevance
• Personalization (For You): Automatic selection of articles and writing of notes based on the work context you registered

These automated processes are designed to optimize content recommendations and are not used for decisions that have legal or similarly significant effects on users. If you wish to request an explanation or raise an objection regarding automated processing, please contact us using the information below.

5. Third-Party Data Sharing

We share data with the following service providers. All data sharing is limited to what is necessary for Service operation and is subject to appropriate data protection measures.

We do not sell, rent, or otherwise provide your personal information to any third parties other than those listed above, except as required by law.

5.1 What We Send to AI (DeepSeek and Anthropic)

For article summaries, translation, classification and duplicate detection, we send only article text and headlines. Two features also send information about you:

• For You: the work context you registered (items you choose, such as occupation and industry, and free text such as responsibilities, what you are working on now, what you want to achieve, what you plan to do next and the industry name you type if you choose "Other"), approved AI Context Sync items, and the AI tools and interests you use, including the AI companies and topics you follow and the one line you typed about them (only when they relate to the article being delivered)
• Ask AI: the question you type (including when you are not logged in)

We do not send your email address, user ID, display name (including the short form of it we use to address you), age group, gender, income range or country of residence.

Free-text work context, the one line about AI companies and topics you follow, and questions are sent exactly as you typed them, so please do not include your name or contact details.

This is normally processed by DeepSeek (a company in China). Only when DeepSeek is unavailable (for example, when our balance runs out) is it processed by Anthropic (a company in the United States).

About sending data to DeepSeek (China): the data we send is processed on servers in China. China has the Personal Information Protection Law (in force since 2021), but Japan's Personal Information Protection Commission recognises only the EU and the UK as having a level of protection equivalent to Japan's, and China is not among them. China also has laws, such as the National Intelligence Law, under which the government can require companies to provide information. The Commission publishes its survey of other countries' systems (in Japanese) here.

6. Email Delivery

• News digest emails are sent from digest@hellomarvis.com.
• Delivery frequency and destination are based on your settings.
• You can change or stop delivery at any time from the settings page in the dashboard.

7. User Interaction Tracking

The Service records your interactions with articles (clicks, bookmarks, shares, hidden articles). This data is used solely for improving news recommendation accuracy and personalization.

Saved articles (bookmarks) and collections are also used so you can come back to the articles you saved. While you are not logged in, saved articles are kept only on your device (your browser's local storage) and are moved to your account when you sign up or log in. If you create a share link for a collection, anyone with the link can see the collection's name and the articles in it. Your name and email address are not shown. You can stop sharing at any time, and a stopped link no longer opens.

8. Billing Data (AIToday Pro)

• We never see or store your card number. Card details are entered on Stripe's own checkout page and held by Stripe.
• We store only what is needed to know the state of your subscription: the Stripe customer and subscription identifiers, status, current period end, the price you signed up at, and the trial end date.
• To stop the free trial from being claimed repeatedly (deleting an account and signing up again to get another free period), we keep a SHA-256 hash of the email address a trial was granted to. This hash is kept after account deletion. It cannot be turned back into your address and is used for nothing but answering "has this address already had a trial?".
• Payment records held by Stripe are subject to Stripe's own retention rules and to tax and accounting law.

9. Data Storage and Security

• User data is stored in Supabase (PostgreSQL) and protected by TLS encryption in transit.
• Row Level Security (RLS) ensures each user can only access their own data.
• Account-related data is deleted when you complete account deletion. Two things are kept: the SHA-256 hash of the email address used for a free trial (section 8), and the payment records held by Stripe.

10. Your Rights

You have the following rights:

• Right of access: You may request disclosure of your personal information
• Right to rectification: You may request correction of inaccurate information
• Right to erasure: You may request deletion of your personal information
• Data portability: You may request a copy of your data
• Right to object to automated processing: You may request an explanation of and raise objections to automated decision-making

Account Deletion

You can delete your account yourself from the settings page. Account data is removed immediately, and any live subscription is cancelled at Stripe before deletion. The SHA-256 hash of an email address that was granted a free trial (section 8) is kept after deletion. If you have trouble, contact us using the information below.

11. Age Restriction

The Service is intended for users aged 16 and older. We do not intentionally collect personal information from anyone under 16. If we become aware that data has been collected from a user under 16, we will promptly delete it.

12. Changes to This Policy

• If we make changes to this Policy, we will update this page.
• We will notify users of significant changes via email or in-service notification.
• Your continued use of the Service after changes constitutes acceptance of the updated Policy.

13. Contact Us

For questions or requests regarding the handling of personal information, please contact us at:

• Operator: Akira Takahashi (高橋 輝)
• Email: akira@hellomarvis.com
• Rights holder: Marvis Inc. (https://hellomarvis.com)