Privacy notice

What the app processes, why it needs it, and how to request a copy or deletion.

This notice covers Proof & Quote Approval, its customer approval pages and KurodaLab support. It does not replace the privacy notice of the business sending an approval, Wix, or a payment provider.

Who is responsible

KurodaLab is operated by Satoshi Kuroda in Japan. Contact contact@kurodalab.com for privacy requests; our address is on the business information page.

The business using the app decides which customers, jobs and content to enter. We process those records to provide the app on that business's instructions. We separately handle our business contact details, support correspondence and security administration. The legal role and rights that apply depend on the processing and applicable law.

Information processed

• Site and access information: Wix app installation and site references, authenticated user references, plan status, business name, notification and reply email addresses, language, currency, time zone and app settings.
• Job and customer records: names and email addresses, linked order, booking or contact references, selected line items, specifications, proofs, quote options and amounts, messages, attachments and work progress.
• Decision and delivery records: version numbers and file hashes, timestamps, entered approver name, confirmation and disclosure records, comments, delivery status, invoice references and payment status reported by Wix. The app does not collect payment-card numbers.
• Security and support information: browser/user-agent information, a daily-keyed IP hash in approval records, error categories and information you send to support. Network providers also process connection data, which can include an IP address.

Please do not upload identity documents, medical records, card details or other sensitive information that is unnecessary for reviewing the work.

How information is used

We use it to authenticate access, show the requested proof or quote, record decisions, send configured transactional notifications, manage progress, provide exports, apply usage limits, investigate errors and prevent abuse. We do not sell customer records, use them for advertising, or build a separate marketing contact list.

Where a legal basis is required, processing our own business contacts supports providing the requested service and responding to requests, protecting the service against abuse, and meeting applicable legal obligations. The merchant is responsible for the legal basis and notices for its customer records. Consent, where required, can be withdrawn without changing the lawfulness of earlier processing.

Who receives information

• The business and its authorized users: approval content, responses and progress. Additional notification recipients are selected by the business.
• Wix: authentication, source records, app subscriptions, and enabled features such as invoices, Inbox and Automations. The business's own Wix automations may forward information to services it configures.
• Cloudflare: application hosting, database and file storage, queues, network security and transactional email delivery. Optional AI drafting uses Cloudflare Workers AI when configured. A Pro or Studio business must enable it and explicitly request a draft after checking the selected images and notes for personal details. The app removes image-container metadata and does not add stored customer names, email addresses or order references. Cloudflare's Workers AI data controls state that Customer Content is not used for model training or service improvement without explicit consent and is not made available to other Cloudflare customers. Drafting requests are configured to disable AI Gateway log collection and response caching. Provider processing remains subject to Cloudflare's agreements and the applicable model terms. AI drafting is currently disabled pending provider configuration and verification.
• OpenAI, only when explicitly configured as the alternative AI drafting provider: the same Pro or Studio opt-in, explicit draft request, selected-input and personal-detail checks apply. The app sends the selected images and notes to one configured provider; it does not automatically fall back to OpenAI or send them to both providers. OpenAI requests use store: false. OpenAI's data controls say API data is not used to train models unless the account opts in. OpenAI may still retain content in abuse-monitoring logs for up to 30 days by default, with stated exceptions. This alternative requires its own provider configuration before use.
• Email services: the recipient's mail provider handles delivered messages. Support email sent to our public address is routed through Cloudflare to a Google-hosted mailbox.

We may also disclose information when legally required or to protect against unlawful use, limited to what is necessary. Studio merchants can configure an external webhook receiver. These notifications contain approval IDs, versions, decision status, work stage, event time and linked order or booking IDs, but not customer names, email addresses, comments, files or approval links. The merchant chooses and manages the receiving service. Endpoint credentials and signing secrets are stored encrypted; disconnecting removes them. A request already in flight may still reach the receiver.

Retention and deletion

• Open approvals remain available while the app is installed, unless deleted. Closed approvals and their files are scheduled for deletion 12 months after closure by default; the business can select 3–36 months.
• “Customer data” and “Site data” provide explicit deletion. Links become unavailable immediately and file removal continues in background jobs. Completed deletion jobs are cleared once at least 24 hours have passed since they started; unfinished jobs remain until cleanup succeeds.
• External webhook delivery history is removed after 30 days. Deleting an approval also removes its webhook events. Copies already received by an external service are managed by that service and the merchant.
• Monthly usage totals, without customer names or approval content, survive deletion and re-setup so usage limits are not reset. A same-day sample-use flag also survives re-setup.
• When AI drafting is enabled, shared monthly cost-reservation and detected usage-overage totals survive site deletion so the product limit cannot be reset. Anonymous accounting records contain a random accounting ID, month, state, reserved amount and any detected usage cost; they contain no site, request or customer IDs, input content or credentials and are kept only as needed for monthly cost reconciliation. Per-request AI attempt history is removed with its approval, removing its link to the anonymous accounting record. Suggested text is kept in the merchant's local draft editor until they choose to apply and save it. The configured provider's data handling is separate from app deletion; OpenAI's abuse-monitoring period applies only to that alternative provider.
• Uninstalling schedules app-data deletion after 30 days, subject to confirming that the app remains uninstalled. Reinstallation during that window can retain the site's existing data.
• Deleted database content may remain in Cloudflare D1 recovery history for up to 30 days. This history is separate from the active app and is not available through customer links.
• Messages already delivered, files downloaded by a recipient, and records in Wix or another business system are outside this app's deletion controls. Support correspondence is kept only as needed to handle the request, resolve disputes and meet applicable obligations.

Export before deleting if you need a copy. Site and customer JSON exports include file references rather than a bundle of the original files. Save needed files separately.

International processing and safeguards

KurodaLab operates in Japan. Wix, Cloudflare (including configured Workers AI processing), Google, explicitly configured OpenAI processing and email recipients may process information in other countries. A country-specific storage location is not promised. Applicable provider agreements and lawful transfer arrangements must cover the deployed service. Cloudflare describes its safeguards in its Data Processing Addendum; a link to that document is not a claim that every applicable agreement or transfer assessment has been completed for this app.

Your choices and requests

If a business sent you an approval, contact that business first to request access, correction, export or deletion. You can also contact KurodaLab, and we will help direct and handle the request after proportionate identity and authority checks. Depending on applicable law, you may have rights to object, restrict processing, receive portable data or complain to a data-protection authority, including Japan's Personal Information Protection Commission. Do not email identity documents unless a suitable secure method has been agreed.

Cookies, security and changes

These information pages do not load analytics, advertising scripts or tracking cookies. The app uses access controls and private files to protect approval data; private approval links must be shared only with intended recipients. Wix's host pages and third-party websites have their own privacy and cookie practices. Material changes to this notice will be dated and communicated through the app or the product information pages before they apply where required.