Privacy Policy

[Operator name] (the “Operator”) establishes this Privacy Policy (the “Policy”) regarding the handling of user information in JIM-JIN and its associated websites, membership features, web tools and other services (collectively, the “Service”).

1. Scope

This Policy applies to information that the Operator collects, uses, stores or otherwise handles through the Service. If separate terms shown on a tool screen, application screen or elsewhere differ from this Policy, those separate terms take precedence.

2. Information collected

The Operator may collect the following information to the extent necessary to provide the Service.

• Account information: names, display names, email addresses, user IDs, password hashes, membership categories and authentication information
• Contract and payment information: selected plans, contract periods, charges, payment dates, transaction IDs and payment status. Payment processors generally handle credit card numbers and similar information; the Service is designed so that the Operator does not retain complete card details.
• Inquiry information: names, contact details, inquiry contents, attachments and support records
• Technical information: IP addresses, browser and device information, operating systems, access times, pages viewed, referrers, cookies and other identifiers, error logs, activity logs and security logs
• Tool usage information: tools used, execution times, numbers of items processed, file sizes, error types and usage allowance consumption. This is not intended to routinely collect the input content itself.
• Tool input and uploaded content: this may be handled temporarily or exceptionally only in the circumstances described in Section 4.
• Information voluntarily provided in surveys, campaigns, user testing and similar activities

3. Purposes of use

The Operator uses collected information for the following purposes.

• Providing the Service, verifying identity, authentication, account management, and managing usage limits and membership categories
• Billing, payment processing, contract management, responding to inquiries and sending important notices
• Investigating defects, responding to incidents, maintenance, improving quality, developing new features and analyzing usage
• Detecting, preventing and responding to misuse, violations of the Terms and security threats
• Informing registered users about the Operator’s products, services, related features, campaigns and surveys, and other marketing
• Providing information tailored to users’ interests and usage, and improving the Service
• Complying with legal obligations, responding to disputes and claims, and protecting the Operator’s rights
• Purposes incidental to those listed above

Promotional and informational emails will be sent with legally required consent or within the scope otherwise permitted by law. Users may stop marketing communications, other than important contractual notices, using the method stated in the email or another method specified by the Operator.

4. Tool input and uploaded data

Processing methods vary by tool, version, environment and feature. Before entering data, check the tool’s information about where processing takes place, whether data is transmitted, expected retention periods and other precautions.

In the following circumstances, inputs or parts of them may be transmitted to, or temporarily stored in, servers, logs, caches, backups, CDNs, hosting infrastructure, error monitoring systems or other systems.

• When a tool’s functionality requires server processing
• When temporary storage is used to convert, generate, split or merge files, prepare downloads or perform similar operations
• When communication failures, timeouts, retries, caching, backups or logging occur
• When defects, configuration errors, vulnerabilities, third-party attacks, unauthorized access or other unexpected events occur
• When users send input content or files through an inquiry or similar communication

The Operator does not intend to store input content for long periods or allow third parties to use it for their own purposes. However, technical and operational risks cannot be eliminated completely. The Operator does not guarantee that inputs will never be transmitted, will be erased immediately, will never be retained, or will never be leaked, lost, damaged, altered or misused by third parties. This statement does not constitute consent to third-party misuse.

Do not enter personal identification numbers, passwords, authentication credentials, payment card information, sensitive personal information, trade secrets, third-party confidential information or other information whose disclosure could have a significant impact unless necessary and its safety has been verified. Anonymize or mask information, keep backups and take other precautions before entering it, and always verify results yourself.

5. Cookies and analytics

The Service may use cookies, local storage and similar technologies to maintain login sessions, provide security, understand usage, improve features, and support advertising and marketing. Users can restrict cookies through browser settings, but some parts of the Service may become unavailable.

When external services are used for analytics, advertising, payments, authentication, hosting, error monitoring or similar purposes, their providers may collect information under their own privacy policies. Before publication, the actual providers, information collected, purposes, opt-out methods and whether information is transferred overseas will be added to a cookie policy or this Policy.

6. Disclosure to third parties

The Operator does not disclose personal data to third parties without the individual’s consent, except when required by law, necessary to protect life, health or property where consent is difficult to obtain, or otherwise permitted by law.

This restriction does not apply to handling that is not considered third-party disclosure under applicable law, such as outsourcing personal data processing or providing data in connection with a merger or other business succession.

7. Contractors and development partners

The Operator may outsource development, maintenance, incident response, security response, hosting, payments, email delivery, analytics, customer support and other operations to external providers or development partners. Their personnel may view, use or otherwise handle account information, logs, inquiries, input content or temporarily stored data to the extent necessary for their work.

In these cases, the Operator selects contractors appropriately, requires restrictions on use and onward disclosure, confidentiality, security controls, incident reporting, return or deletion of data and other safeguards through contracts or other means, and provides necessary and appropriate supervision. Contractors do not use the information for their own purposes beyond performing the outsourced work.

8. Security measures

The Operator takes organizational, personnel, physical and technical security measures appropriate to the scale of the business and handling of information to prevent unauthorized access, leaks, loss and damage to personal data. Principal measures include access controls, protection of authentication information, encrypted communications, log management, vulnerability response and contractor oversight.

Details of security measures will be explained to the extent that doing so does not compromise security.

Contact: [Contact email address]

9. Retention and deletion

The Operator retains information only for periods necessary to achieve the purposes of use, required by law, reasonably necessary for contracts or disputes, or necessary for operations. Information that is no longer needed will be deleted or anonymized using reasonable methods.

Tool inputs are not intended for long-term storage, but may remain in temporary files, logs, caches or backups for system-defined periods. Before publication, specific estimates reflecting the implementation, such as deletion immediately after processing, temporary files within 24 hours or backups for up to [number of days] days, will be stated on tool screens or in this Policy.

10. Response to data incidents

If personal data is leaked or another incident occurs, or the risk of an incident becomes known, the Operator will investigate the facts, identify the affected scope, prevent further harm, prevent recurrence and take other necessary action. Where legally required, the Operator will report to Japan’s Personal Information Protection Commission and notify affected individuals.

11. Requests for disclosure, correction, suspension of use and deletion

To the extent provided by law, users may request notification of purposes, disclosure, correction, addition or deletion of retained personal data, suspension of use, erasure or cessation of third-party disclosure. Contact [Contact email address] for request procedures, identity verification and any fees. Requests may be declined in whole or in part where no legal obligation applies or fulfilling them could harm others’ rights or interests.

12. Use by minors

When minors use the Service, provide personal information or enter into paid contracts, they should obtain consent from a parent or other legal representative to the extent required by law.

13. Changes to this Policy

The Operator may change this Policy as necessary in response to changes in laws or the Service. Significant changes will be announced on this website, by notification to registered email addresses or by other appropriate means, and consent will be obtained where required by law. Unless otherwise stated, the revised Policy takes effect when posted on this website.

14. Operator and contact information

Operator: [Individual or company name]

Address: [Address]

Representative: [Complete for a company]

Personal information protection manager: [Role, name or responsible department]

Contact: [Email address or contact form URL]

Established: September 4, 2026

Last revised: September 4, 2026