Privacy Policy

Effective date: March 8, 2026  |  Jurisdiction: Japan (APPI)

YB Techworks ("we", "us", or "our") is operated by a sole developer based in Kyoto, Japan. This Privacy Policy explains what personal information we collect, why we collect it, and how we handle it in compliance with Japan's Act on the Protection of Personal Information (APPI) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Information We Collect

• Contact information: name and email address when you contact us or create an account.
• Payment information: payment card details are collected and processed directly by Stripe, Inc. We do not store or have access to full card numbers.
• Usage data: basic technical data (browser type, OS, referring URL) may be collected to improve our services.

2. Purposes of Collection

We collect personal information for the following clearly defined purposes:

• Processing and fulfilling orders for digital products
• Providing customer support
• Sending transactional emails (order confirmations, receipts)
• Improving our products and services
• Complying with legal obligations (e.g., tax record retention)

We will not use your information for any purpose beyond those stated above without your explicit consent.

3. Legal Basis (GDPR)

For users in the European Economic Area, our legal bases for processing personal data are:

• Contract: processing is necessary to fulfill the purchase agreement.
• Legal obligation: processing is necessary to comply with applicable laws.
• Legitimate interests: service improvement and fraud prevention, where not overridden by your rights.

4. Third-Party Services

Stripe, Inc. processes all payments on our behalf. When you make a purchase, you submit your payment information directly to Stripe. Stripe's processing of your personal data is governed by their Privacy Policy. Stripe is headquartered in the United States; your payment data is processed and stored on Stripe's servers in the US.

5. International Data Transfers

Your personal data may be transferred to and processed in the United States by Stripe. Such transfers are carried out under appropriate safeguards (Stripe's Standard Contractual Clauses for EEA users). We do not otherwise transfer your personal data outside Japan without your consent or a lawful basis to do so.

6. Cookies

Our website uses only functional cookies strictly necessary for the site to operate. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7. Data Retention

• Account and contact data: retained while your account is active, plus 1 year after closure.
• Payment records: retained as required by Japanese tax law (generally 7 years).

8. Your Rights

Under APPI and GDPR (where applicable), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data (subject to legal retention obligations)
• Request restriction of processing
• Data portability (GDPR users)
• Object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected].

9. Security

We implement reasonable technical and organizational measures to protect your personal information. Payment data is handled exclusively by Stripe using industry-standard encryption.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated policy will be posted on this page with a revised effective date. Continued use of our services constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, please email us at [email protected].