Privacy Policy
Last updated: 2026-09-24
Value Inc. (“we,” “us,” or “our”) handles information in Tell Me When (the “Service”) according to this Privacy Policy.
Information we collect
We collect authentication details such as name, email, and profile; password hashes; information needed for sessions, email verification, and password resets; verified alert addresses; language and notification settings; watch titles, monitored URLs, conditions, and frequency; extracted page text, hashes, change history, AI decisions and feedback; and subscription and consent records. Optional integrations may add browser-push subscriptions, encrypted Discord, Slack, or webhook endpoints, and MCP authorization data.
We also process privacy-minimized rate-limit keys derived from data such as IP addresses, access times, browser and device details, and categorized errors needed for operation and abuse prevention. Stripe handles card data directly; our servers do not store it.
Purposes
We use information to authenticate users; register, retrieve, compare, and judge watches; send alerts and operate integrations; administer subscriptions and payments; answer support requests; investigate failures; prevent abuse and security incidents; enforce limits; improve the Service; and comply with law and our terms. We will seek renewed consent where required for a materially different purpose.
AI processing
When a meaningful change is detected, the relevant parts of your condition, previous content, and current content are sent to OpenAI to judge whether the condition is met. Unchanged or trivial changes are not sent. Do not register URLs containing unnecessary personal or confidential information.
MCP connections with ChatGPT and other clients
When you connect the Service to ChatGPT, Claude, or another compatible client and ask it to run a tool, the tool name, required inputs, and results are sent to that client provider. Depending on the tool, this may include watch titles, public URLs, alert conditions, status, schedules, summarized check history, notification-destination labels, your login email address, default and additional verified alert email addresses, the alert email address saved for each watch, your plan, and usage and limits. The client provider handles conversations and tool results under its own terms and privacy policy.
MCP results exclude passwords and verification codes; other users’ information; secret Slack, Discord, or webhook endpoints; stored page text and hashes; and payment information. A precheck also withholds retrieved page text and returns only minimal facts such as the readable-character count. Public URLs and alert conditions that you submit are still shared with the client as needed to perform your instruction. You can disconnect the integration in the client, and eligibility is checked on every tool request.
Processors and service providers
We use Firebase App Hosting for application hosting; Neon/PostgreSQL for data storage; OpenAI for AI decisions; Amazon Web Services’ Amazon SES for email delivery and Amazon SNS for delivery feedback; Google for authentication when you choose Google sign-in; Google Analytics for traffic analysis; Stripe for billing; Cloudflare for DNS, scheduling, and analytics; Browserless to execute JavaScript and retrieve text from public pages when you select browser loading; Web Push delivery infrastructure; and Discord, Slack, or webhook receivers configured by you. Web sign-in and MCP authorization use Better Auth software running in our infrastructure; using that software does not itself send your authentication data to its developer. If you choose an MCP connection, the information described above is also sent at your direction to OpenAI as the provider of ChatGPT, Anthropic as the provider of Claude, or another client provider you select. Browserless receives the target URL and retrieval traffic, which may be processed outside Japan. Each provider processes role-relevant data under its own terms and privacy policy.
Third-party disclosure and international processing
We do not disclose personal data to third parties without consent except for the processors above, user-directed alerts or integrations, a business transfer, legal obligations, or protection of life or property. Cloud infrastructure may process information outside Japan. We use contractual and provider-security safeguards consistent with applicable law.
Cookies and analytics
We use cookies and browser storage for sessions, language preferences, security, and core functionality. Browser alerts require device permission and subscription data. Disabling essential cookies may prevent sign-in or features from working.
We use Cloudflare Web Analytics to understand page usage and performance without collecting personally identifying information or using advertising cookies. We also use Google Analytics 4 to analyze traffic sources and page views. Only after you select “Accept analytics” do we load Google Analytics and Cloudflare analytics. Until then, or if you reject, neither analytics service receives data from our analytics scripts. Google Analytics uses first-party cookies (_ga and _ga_*), lasting up to two years, and sends browser, device, page-view, and minimized referral information to Google, which may process it outside your country. We save your analytics choice in browser storage for 180 days, separately from account or Terms acceptance. You can change or withdraw it through “Cookie settings” in the footer. Withdrawal stops future analytics and deletes our accessible Google Analytics cookies; it does not erase data already sent. Advertising features are disabled. Names, email addresses, monitored URLs, conditions, and retrieved content are not sent as analytics fields. Internally, we aggregate existing registration, watch, notification, and subscription state without copying monitored URLs, conditions, or page content into a separate analytics store.
Retention
Page text retrieved during the required pre-registration check is moved into the watch baseline on registration or deleted after its 15-minute expiry. While a watch is active, we retain its current baseline and settings; check history is generally retained for 90 days. Deleting a watch deletes its content and history. Email-verification and password-reset links, and codes for verifying alert addresses or account deletion, expire after 10 minutes. We do not separately store conversations from an MCP client, although the client provider may retain conversations and tool results under its own terms. Subscription, payment, consent, abuse-prevention, and legal records are retained as needed for their purpose and applicable law. Backups expire through normal rotation.
Security
We use access controls, encrypted transport, encrypted integration endpoints, separated secrets, SSRF defenses, retrieval and rate limits, and privacy-minimized operational records. Passwords are stored as hashes, not in plaintext. No Internet service can guarantee absolute security.
Your rights and deletion
You can view, change, and delete watches and notification settings in the Service. The account-deletion flow in Settings verifies you with a code sent to your registered email, then deletes your account, watches, history, alert addresses, integrations, MCP authorization data, and sessions. While deletion is processing, monitoring and integrations stop and you cannot sign in. Failed calls to an external provider are retried automatically. Records retained by a payment provider for legal, payment, or dispute purposes, and data within normal backup rotation, may not disappear immediately. Contact us below if the self-service flow fails or to request notice of purpose, access, correction, restriction, deletion, or cessation of third-party disclosure. After verifying identity, we will respond under Japan’s privacy law and other applicable law.
For a privacy-rights request or complaint about our handling of personal information, email info@value-it.co.jp with the requested procedure and your registered email address. We verify identity through a reply to a registered or verified email address or another reasonably necessary method, and ordinarily respond by email. Requests are generally free. If applicable law permits a fee, we will explain the amount and reason in advance. If we cannot fulfill a request, we will provide notice and the reason as required by law.
Children
Users under 18 must have consent from a parent or legal guardian. If we learn that we collected personal data from a child without required consent, we will take appropriate steps to delete it.
Policy changes
We may update this Policy as the Service or its data practices change. Material changes will be announced in the Service or by registered email before they take effect.
Controller and contact
Value Inc. (Shinjuku Dai-go Hayama Building 5F, 5-11-30 Shinjuku, Shinjuku-ku, Tokyo, Japan), represented by Masao Urano, Representative Director, is the data controller.
Contact: info@value-it.co.jp