Fotographer.ai Privacy Policy
1-10-9 Higashi-Gotanda,
Shinagawa-ku, Tokyo, Japan 141-0022
5th Floor ST Building
Fotographer AI, Inc.
Rintaro Suzuki, Representative Director
Fotographer AI, Inc. (“we”, “us”, or “our”), which operates Fotographer.ai, a Web system for AI-powered automatic generation of product photos (the “System”), is aware of the importance of protecting the personal information of each user of the System (“User”) and will properly handle and protect Users’ personal information under the Act on the Protection of Personal Information (the “Act”) and this Privacy Policy[i1] .
1.
The terms “personal information” and “retained personal data” as used in this Privacy Policy are subject to the definitions given in the Act. Other terms are subject to the definitions given in the Terms of Service of Fotographer.ai (the “Terms of Service”).
2.
We will collect the following personal information on the operation site for the System (the “Site”) and use it for the specified purposes of use: (1) Personal information collected from a User(i) Personal information collected:･the User’s email address, password, and other information provided by them when registering their account for the System･information on the User’s social media account permitted by us to be used for login･the User’s name, corporate name, brand name, and other information registered in the System(ii) Purposes of use:･registering the User’s account for the System and checking or managing the User’s information･providing the functions of the System specified in the Terms of Service･giving information on the functions of the System･processing the User’s payment of the monthly rate if the User subscribes to a paid plan･conducting our activities under the Terms of Service
3.
We will not be directly involved in any collection, use, provision, or other processing of Users’ credit card numbers and will not retain such information because Users’ payment by credit card will be processed, in principle, by the system of the credit card payment processor.
4.
Unless permitted by the Act or other law, we will not process or provide to any third party any personal information of a User beyond what is necessary to achieve the purposes of use without their consent, except for the cases listed below. If a User asks us to notify them of the purposes of use, we will notify them of the purposes of use in accordance with the procedure set out in Article 8.
(1) Such processing or provision is required by law.
(2) Such processing or provision is necessary to protect the life, body, or property of a person, but we have difficulty obtaining the User’s consent.
(3) Such processing or provision is particularly necessary to improve public health or promote healthy child development, but we have difficulty obtaining the User’s consent.
(4) We need to cooperate with a national government organ or local government, or person engaged by either party in performing statutory functions, and obtaining the User’s consent is likely to disrupt the performance of the functions.
5.
We will properly collect Users’ personal information and not collect Users’ personal information by fraudulent or other wrongful means. We will not use Users’ personal information in a way that may encourage or induce an illegal or unjust act.
6.
We take necessary and appropriate security measures to prevent leakage, loss, and damage of, and manage, retained personal data. We exercise necessary and appropriate supervision over the processors of personal data. Our security measures for personal data are as follows:
(1) We have established this Privacy Policy with respect to compliance with relevant laws and regulations and our relevant in-house policies, a section responsible for handling inquiries and complaints, and other relevant matters to ensure the proper processing of retained personal data.[i2]
(2) We have determined the processing methods and persons for each process of retained personal data, including collection, use, storage, provision, deletion, and disposal, and will process retained personal data in accordance with our in-house procedures.
(3) We take the following organizational security measures:
(i) Our representative, who is responsible for the processing of retained personal data, clarifies the scope of work involving the processing of retained personal data and monitors violations and possible violations of the Act and our relevant in-house policies.
(ii) We periodically inspect our processing of retained personal data from an objective viewpoint, without being overconfident of our processing of retained personal data.
(4) We take the following personnel security measures:
(i) We strive to enhance our awareness and knowledge of processing of retailed personal data.
(ii) We hold all retained personal data in confidence.
(5) We take the following physical security measures:
(i) We limit areas where retained personal data can be processed and restrict third parties’ access to such areas and removal of retained personal data from such areas.
(ii) We take measures to prevent theft, loss, or other similar incidents of devices processing retained personal data and measures to ensure that personal data is not easily identified when such devices are carried around.
(6) We take the following technical security measures:
(i) We protect retained personal data with passwords, access control, and other similar measures.
(ii) We have in place a system for preventing unauthorized access to retained personal data and other similar incidents by taking antivirus measures, encrypting communication, and taking other measures.
(7) We will not intentionally store or process any retained personal data in any foreign country.
7.
Unless permitted by the Act or other law, we will not disclose a User’s personal information to any third party without their prior consent, except for the following cases: (1) disclosure of their personal information to a contractor of the whole or part of processing of personal information to the extent necessary for achieving the purposes of use;(2) disclosure of their personal information because of a merger or other succession to business; and(3) joint use of their personal information with a third party under the Act.
8.
When requested to disclose a User’s retained personal data or the record of provision of a User’s retained personal data to third parties under the Act, we will, without delay, disclose the data or record to them after confirming that the requesting person is the User (If there is no such data or record, we will notify them of the nonexistence) unless we are not required to disclose the data or record under the Act or other law.[i3]
9.
When requested to rectify, make an addition to, or delete (collectively, “Rectify”) a User’s retained personal data under the Act, we will, without delay, conduct a necessary investigation and Rectify the data based on the investigation results to the extent necessary for achieving the purposes of use after confirming that the requesting person is the User, and then notify them of the action (if we decide not to Rectify the data, we will notify them of the decision) unless we are not required to Rectify the data under the Act or other law.
10.
When requested to discontinue using or providing or erase (collectively, “Discontinue Using”) a User’s retained personal data under the Act, if the request is found to have good reasons, we will, without delay, Discontinue Using the data after confirming that the requesting person is the User, and then notify them of the action unless we are not required to Discontinue Using the data under the Act or other law.
11.
We may collect information from Users using cookies or similar technology. (1) We may collect information from Users through cookies to assist them in inputting information or analyze their access to the Site. (2) Cookies will be stored on Users’ computers, but will not contain any information that can identify them. A User who wants to disable cookies can do so by changing their browser settings. (3) However, once they disable cookies, they may not be able to use some functions of our services.
12.
We will use Google Analytics as follows: (1) For our use of Google Analytics, each User agrees to the following:
We use cookies to collect Users’ data.(2) For information collected through our use of Google Analytics in (1), its purposes of use, its provision to third parties, and other terms, please see the Google Privacy Policy
(at https://policies.google.com/privacy?hl=en[i4] [ST5] [i6] ). This policy provides how Google uses the data of users of a Google partner’s site or application.
13.
For any requests for disclosure or other actions, opinions, questions, complaints, and other inquiries about our processing of personal information, please contact us through the inquiry form of the Site or other channels offered by us.
14.
We will endeavor to continuously review and improve our processing of personal information and may revise this Privacy Policy if necessary. Revision of this Privacy Policy is subject to the procedures to revise the Terms of Service.