Privacy Policy

1. Information we collect

We collect the following information by lawful and fair means.

• Information you enter in our contact form (name, company or organization, email address, phone number and message)
• Information about our official account and our store accounts obtained through the APIs of external services such as TikTok, Instagram and Facebook (as described in Section 7)
• Information about our staff who use the Service (name, department, work email address, etc.)
• Information automatically sent by your browser when you visit our website (IP address, browser type, date and time of access, etc.)

2. How we use information

We use personal information for the following purposes.

• Responding to inquiries and contacting you
• Collecting and aggregating social media metrics for our official account and our store accounts, and using them for internal analysis and to improve our operations
• Providing and operating the Service and contacting staff who use it
• Operating our website and the Service securely and preventing misuse
• Other purposes incidental to the above

If we change these purposes, we will do so only within a scope reasonably related to the original purposes and will publish the updated purposes in this policy.

3. Disclosure to third parties

We do not provide personal information to third parties without your consent, except in the following cases. Providing information to a service provider we entrust as described in Section 8 is not a disclosure to a third party.

• When required by law
• When necessary to protect a person's life, body or property and it is difficult to obtain your consent
• When especially necessary to improve public health or promote the healthy development of children and it is difficult to obtain your consent
• When necessary to cooperate with a national or local government body, or a party entrusted by it, in carrying out duties prescribed by law

We never sell or provide information obtained through external services or APIs to third parties.

4. Security

We take the following measures to prevent leakage, loss or damage of personal information.

• We limit the staff who handle personal information and set access rights for each of them
• Credentials used to connect to external services (such as access tokens) are encrypted and accessible only to authorized staff
• Communications are encrypted
• We train our employees on the handling of personal information
• When we entrust work to service providers, we select them appropriately and supervise them

5. Your rights

You may request that we notify you of the purposes of use, disclose, correct, add to or delete, stop using or erase, or stop providing to third parties the personal information we hold about you, or disclose records of provision to third parties. After verifying your identity, we will respond without delay in accordance with applicable laws.

Please send requests to the contact point in Section 12.

6. Cookies

Our website currently does not use cookies for analytics or advertising. We may use your browser's storage only as necessary to display pages and provide features.

If we introduce analytics tools or similar technologies in the future, we will update this policy.

7. Information obtained through external services and APIs

For our official account and our store accounts, we use APIs provided by external services such as TikTok, Instagram and Facebook and obtain the following information within the scope authorized by the account administrator.

• Basic account information (display name, profile image and an identifier for the account)
• Information about public posts (date and time, caption, thumbnail image and URL)
• Metrics for posts and accounts (views, likes, comments, shares, followers, etc.)
• Aggregated follower data such as age, gender and region (statistical information that does not identify individuals)

We use this information solely to aggregate metrics and for internal analysis and operational improvement. We do not use it to select targets for advertising or make it public.

We do not obtain any other information, such as information about other users' accounts or the text of comments.

8. Data sharing with external services and service providers

We use the following external services to operate the Service and our website.

• TikTok (APIs provided by TikTok for Developers): obtaining information about our official account and store accounts
• Instagram and Facebook (APIs provided by Meta Platforms, Inc.): obtaining information about our official account and store accounts (from the start of use)
• Storing and aggregating the information obtained: Google LLC (Google Sheets, Google Apps Script) (United States)
• Website hosting: Vercel Inc. (United States)
• Sending inquiry emails: Resend, Inc. (United States)

This policy applies to our handling of information obtained from external services. The handling of information by each external service is governed by that service's own privacy policy.

When we entrust the handling of personal information to a service provider, we do so only to the extent necessary to achieve the purposes of use, select the provider appropriately and supervise it as necessary.

9. Data retention and deletion

We keep personal information only for as long as necessary to achieve the purposes of use and promptly delete information that is no longer needed.

• Information obtained through external services and APIs: kept for up to three years from the date of collection
• Inquiries: kept for as long as necessary after we have responded, then deleted

If a connection to an external service is revoked, or if you ask us to delete your information, we will delete the information and credentials obtained for that account within 30 days.

How to request deletion is described in Section 10.

10. How to request data deletion

You can request deletion of information obtained through external services and APIs in either of the following ways.

• Revoke the connection to the Service from the app settings of the external service (the page for managing connected apps and services)
• Send an email to info@neodelight.co.jp with the subject "Data Deletion Request", stating the name of the external service and the account name

After verifying your identity, we will delete the information and credentials obtained for that account within 30 days and notify you by email when the deletion is complete.

11. Changes to this policy

We may revise this policy in response to changes in laws or in the Service. The revised policy takes effect when it is posted on this website.

12. Contact for personal information

For questions about this policy or our handling of personal information, please contact:

• Neo Delight International Co., Ltd., Personal Information Inquiries
• Address: Fukuei Akihabara Bldg. 4F/5F/6F, 3-14-3 Sotokanda, Chiyoda-ku, Tokyo, Japan
• Phone: +81-3-6272-3263
• Email: info@neodelight.co.jp