Privacy Policy
Operator Information
Trade name: DeepRox
Representative: Jun Sato
Address: 3-7-17-411 Mashiki, Ginowan City, Okinawa, Japan
Phone: 070-8989-3580
Email: support@un-vox.com
Website: un-vox.com
Basic Policy
DeepRox (the Operator) considers the protection of users' personal information to be an important responsibility in providing UN:VOX (the Service). This Privacy Policy defines the information the Operator collects, the purposes of use, third-party services used, data retention and deletion, and users' rights.
1. Information We Collect
1.1 Account Information
Email address, password hash, authentication information, and role (company or candidate).
1.2 Candidate Profile
Display name, preferred name, bio, values, portfolio URL, phone number, etc.
1.3 Company Profile
Company name, values, team introduction, what the company is looking for, welcome message, logo image, recruiter information, job opening information, and invitations.
1.4 Stories, Dialogue, Answers, and Mutual Understanding
Company questions, candidate answers, conversation history, reflections, story drafts and final versions, candidate notes, and records of mutual understanding (Discovery / match explanation).
1.5 Spark / Connection
Sparks from companies or candidates, Connection requests and messages, and company contact email addresses.
1.6 Chat
Chat messages after a Connection is established, read status, and sender information.
1.7 Notifications
In-app notification titles, bodies, read status, and related story or connection information.
1.8 Founding Company Program Application
Company name, website, country/region, industry, company size, hiring status, contact name, role, email, answers to mutual-discovery questions, motivation, and consent to Terms, pricing, and feedback.
1.9 Analytics
Page views, CTA clicks, section views, and application-flow events, collected anonymously or in an associated form.
1.10 Connection Information
IP address, request logs, access date and time, cookies, session information, and browser information, recorded for security, operations, improvement, and fraud prevention.
1.11 Video
We collect an optional 20-second self-introduction video (First Impression) that candidates may record and submit. Candidates may skip this step. Videos are stored in Supabase Storage and may be viewed by companies together with the candidate's Story. The Operator does not analyze or evaluate these videos using AI.
2. Purposes of Use
The Operator uses collected information for the following purposes:
- providing, operating, and maintaining the Service
- user authentication and session management
- supporting mutual understanding between companies and candidates, including story creation
- providing Spark, Connection, and chat features
- sending notification and operational emails
- reviewing and operating the Founding Company Program
- improving, analyzing, and troubleshooting the Service
- preventing fraud and ensuring security
- complying with legal obligations
The Operator does not use personal information to score, rank, or automatically make hiring decisions about candidates in ways users do not understand.
3. Third-Party Services
The Service uses the following third-party services:
Supabase
Used for authentication, database, and storage of application data.
Vercel
Used for hosting, application delivery, infrastructure, and request logging.
Resend
Used for sending emails related to the Founding Company Program and operational notifications.
With respect to AI processing, the Service currently does not send user data to external AI APIs. See Section 8 for details.
4. Cookies and Session Information
The Service uses cookies for authentication and session maintenance. Major cookies include Supabase Auth cookies and session identifiers such as `discovery-session-token`. Users may refuse cookies through browser settings, but some Service features may become unavailable.
5. IP Address and Request Logs
Access logs, IP addresses, request content, and error logs may be automatically recorded on the hosting platform (Vercel) and database platform (Supabase). This information is used for security, troubleshooting, fraud investigation, and service improvement.
6. Data Retention
In principle, the Operator retains users' personal data for as long as the account is active and as necessary to provide the Service. When a user requests account deletion, the Operator will delete the data within a reasonable period, except for the minimum information necessary to comply with laws, prevent fraud, or fulfill contractual obligations.
Video: First Impression videos are retained for 14 days from the recording date when the company has not expressed interest, and for 60 days after the company expresses interest. After the applicable retention period, they are automatically removed from storage by the daily maintenance process and the public URL is invalidated.
Logs: Hosting and database logs are retained according to the default retention periods of each platform.
Analytics: Analytics events may be retained for a certain period for service improvement.
7. Account and Personal Data Deletion
After identity verification, users may request deletion of their account and personal data by sending a request to:
Deletion processing may take a certain period for identity verification, legal obligations, and fraud prevention. Even after deletion, the minimum information necessary for legal, contractual, or dispute-prevention purposes may be retained.
8. AI Processing
UN:VOX's core principle is “AI organizes what people share. Humans make the decision.”
Currently, no AI processing is performed within the Service, and actual user data is not sent to external AI APIs such as OpenAI. If AI processing is started in the future, the Operator will disclose the purpose, the data subject, and any third-party recipients in this Policy or through other appropriate means in advance, and will obtain consent where required.
The Operator does not build systems for automated candidate scoring, ranking, or hiring decisions.
9. International Users
The Service is not limited to users in Japan and is available to international users. The Operator handles the personal data of international users in accordance with applicable laws. Before claiming full compliance with specific laws or regulations (such as GDPR or CCPA), the Operator will obtain review by a legal professional.
10. Disclosure Based on Law
The Operator may disclose personal information within the scope of a formal legal request from a court, police authority, or administrative agency.
11. Security
The Operator implements technical and administrative security measures to prevent unauthorized access, alteration, and leakage of personal information. However, complete elimination of these risks is impossible on internet communication and cloud platforms.
12. Users' Rights
Users have the right to request disclosure, correction, deletion, or suspension of use of their personal information. Such requests should be sent to support@un-vox.com. The Operator will respond within a reasonable scope in accordance with applicable laws.
13. Changes to This Policy
The Operator may change this Privacy Policy at any time. The revised Policy becomes effective when published on the Service or on the effective date specified by the Operator. If a user continues to use the Service after a Policy revision, the user is deemed to have agreed to the revised Policy.
14. Contact
Inquiries regarding this Privacy Policy should be sent to support@un-vox.com.
Effective date: August 7, 2026