Privacy Policy
Effective: August 13, 2026
Japan YES Property Management Co., Ltd. ("Company," "we," or "us") is committed to protecting your personal information. We comply with the Act on the Protection of Personal Information (Japan) and other applicable data protection laws. This Privacy Policy explains how we collect, use, share, and protect your data.
1Article 1 — Information We Collect
We collect the following types of personal information:
| Category | Examples |
|---|---|
| Identity & Contact | Full name, email address, phone number |
| Address Information | Current address (including overseas), property addresses in Japan |
| Payment Information | Payment history (card numbers are stored by Stripe, not by us) |
| Usage Data | Login history, activity logs, IP addresses |
| Mail Data | Scanned mail images, forwarding addresses, mail content |
2Article 2 — How We Use Your Information
We use your personal information for the following purposes only:
- Providing, operating, and improving the Service
- Communicating with you about your account and providing customer support
- Processing payments and billing
- Scanning, storing, and forwarding your postal mail
- Preventing fraud and ensuring security
- Complying with legal obligations (e.g., tax filings)
- Sending service updates and feature announcements (you may opt out)
3Article 3 — Sharing with Third Parties
We do not sell your personal information. We share it only in these circumstances:
- With your explicit consent
- When required by law or legal process
- To protect the life, safety, or property of individuals in emergencies
- With trusted service providers who help us operate the Service:
Service Providers
- Supabase Inc. — Database, authentication, and file storage
- Stripe, Inc. — Payment processing
- Resend Inc. — Email delivery
- Vercel Inc. — Web hosting and site analytics
- Anthropic PBC — AI processing of mail and documents. The contents of scanned mail and uploaded documents may be sent to this provider to generate English summaries and translations and to read amounts from invoices.
- Crisp IM SARL — Customer support chat
- Google LLC — Website analytics and tag management (Google Analytics, Google Tag Manager)
These providers are located outside Japan and process data on our instructions under appropriate contractual safeguards. They are not permitted to use your data for their own purposes. Our AI provider does not use data submitted through its commercial API to train its models.
4Article 4 — Sensitive Personal Information (要配慮個人情報)
Mail addressed to you may occasionally contain sensitive personal information — for example correspondence from a hospital or clinic, health check results, or similar. We cannot know the contents of a sealed envelope before opening and scanning it.
- By using the Service, you consent to such information being received, scanned, stored, and processed for the purposes set out in this Policy.
- We do not use sensitive information for any purpose other than delivering the Service to you, and we do not share it except as described in Article 3.
- You can turn off "AI summary & translation" at any time in your account settings. When it is off, the contents of your mail are not sent to our AI provider — you still receive the scans.
5Article 5 — Data Security
- We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or disclosure.
- Access to personal data is restricted to authorized personnel on a need-to-know basis.
- Credit card information is processed and stored exclusively by Stripe and is never stored on our servers.
- Scanned mail images are stored in encrypted storage with restricted access controls.
6Article 6 — Data Retention
We retain personal information only as long as necessary for its intended purpose.
| Data Type | Retention Period |
|---|---|
| Account information | 1 year after account closure |
| Scanned mail images | 3 years from scan date |
| Payment records | 7 years (legal requirement) |
| Support inquiries | 2 years after resolution |
7Article 7 — Cookies
- We use cookies to maintain your login session and to improve the Service.
- Cookies do not contain personally identifiable information.
- You can disable cookies in your browser settings, but some features of the Service may not function properly.
8Article 8 — Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your personal data
- Restriction — request that we stop processing your data in certain ways
To exercise any of these rights, please email us at the address below. We will verify your identity and respond within a reasonable timeframe.
9Article 9 — Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. Your continued use of the Service after any changes constitutes acceptance of the updated policy.