Privacy Policy
Last updated: March 30, 2026
1. Introduction
We respect your privacy and are committed to protecting your personal information in connection with Banzuke (the "Service"). This Privacy Policy explains the types of personal information we collect, how we use and share it, the safeguards we apply, and your rights. Our business entity details and contact information are provided at the end of this policy in Section 16.
2. Definition of Personal Information
"Personal information" refers to information about a living individual that can identify a specific person, as defined under Japan's Act on the Protection of Personal Information (APPI).
3. Information We Collect
We collect information through the following means: 1. Account registration: email address, display name 2. Social login: name, email address, and other information provided by an external authentication provider 3. Payment: credit card information (processed by Stripe, Inc.; we do not store card numbers) 4. Ranking creation: ranking topics, item names, descriptions, and other user-submitted content 5. Inquiries: name, contact information 6. Service usage: access logs, usage history, ranking generation history, cookie data, IP address, browser information
4. How We Use Information
We use your information for the following purposes: 1. To provide and operate the Service 2. To process ranking topics through AI models and generate aggregated results 3. To process payments for Paid Plans 4. To respond to inquiries 5. To improve the Service and develop new features 6. To send important notices and maintenance information 7. To address violations of the Terms of Service If we change our purposes, we will do so within a reasonably related scope and notify or publish the changes.
5. AI Processing of Your Data
When you use the ranking generation features, the text of your prompt (topic and items) is transmitted to multiple AI processing providers (primarily located in the United States) for processing. Only the text content of your prompt is transmitted. We do not send your personal information (name, email, payment data, etc.) to these providers. We do not use your prompts, personal data, or any user-generated content to train, fine-tune, or improve AI models. While AI Ranking generation involves automated processing, we do not engage in solely automated decision-making that produces legal or similarly significant effects on individual users (as defined in Article 22 of the GDPR). AI Rankings are for informational and entertainment purposes only.
6. Third-Party Sharing
We do not provide personal information to third parties without your consent, except: 1. When required by law 2. When necessary to protect life, body, or property and it is difficult to obtain consent 3. When entrusting processing within the scope necessary to achieve our purposes 4. In connection with a merger or business succession
7. International Data Transfers
Your information may be transferred to and processed in the following countries: • United States: authentication provider, analytics provider, AI processing providers (multiple), Stripe, Inc. (payment processing) Each recipient implements appropriate safeguards under their agreements with us. For information on data protection regimes in these countries, please refer to materials published by Japan's Personal Information Protection Commission.
8. External Services and Data Transmission
The Service uses the following external services. In accordance with Japan's Telecommunications Business Act, the following data may be transmitted externally: 1. Analytics provider (United States): Cookie ID, IP address, pages visited, browser info → Usage analysis and improvement 2. Authentication provider (United States): UID, auth tokens → Authentication and account management 3. Stripe, Inc. (United States): Payment token, billing info → Payment processing 4. AI processing providers (United States, multiple): Ranking topics and items → AI voting processing Please refer to each provider's website for their respective privacy policies.
10. Security
We implement the following measures to prevent leaks, loss, damage, and unauthorized access to personal information: • Technical measures: Encryption in transit (TLS), access controls, log monitoring • Organizational measures: Appointment of a data protection officer, establishment of handling procedures In the event of a data breach, we will promptly report to Japan's Personal Information Protection Commission (preliminary report within 3-5 days, full report within 30 days) and notify affected users.
11. Data Retention
We retain your personal information for as long as your account is active. After account deletion, we may retain certain data for up to one year to fulfill legal obligations, resolve disputes, and enforce agreements, after which it is securely deleted.
12. Your Rights
You may exercise the following rights regarding your personal information, subject to applicable law. 【All Users (Japan APPI)】 Rights of access, correction, addition, deletion, suspension of use, and disclosure of third-party transfer records. 【EU / UK Residents (GDPR / UK GDPR)】 1. Right of access, rectification, and erasure ("right to be forgotten") 2. Right to restriction of processing 3. Right to data portability 4. Right to object to processing, and the right not to be subject to a decision based solely on automated processing 5. Where processing is based on consent, the right to withdraw consent at any time 6. Right to lodge a complaint with a supervisory authority Our legal bases for processing under the GDPR are: (i) performance of a contract (provision of the Service), (ii) your consent (e.g., marketing and analytics cookies), and (iii) our legitimate interests (e.g., service improvement, fraud prevention, and security). 【California Residents (CCPA / CPRA)】 Right to know, right to delete, right to correct, right to opt-out, right to limit use of sensitive personal information, and right to non-discrimination. We do not "sell" personal information for monetary consideration. 【How to Exercise Your Rights】 Disclosure may be provided electronically or in writing, as you specify. We may request identity verification documents. Please contact us at support@banzuke.ai. We will respond without undue delay (and within one month under the GDPR).
13. Children's Privacy
The Service is not directed at persons under 16. We do not knowingly collect personal information from persons under 16. If we learn that a person under 16 has provided personal information, we will promptly delete it.
14. Changes to This Policy
We may update this Privacy Policy. For material changes, we will notify you at least 30 days before the effective date by posting on the Service or other appropriate means.
15. Language
This policy is drafted in Japanese and English. The Japanese version is the authoritative text. In case of conflict with the English version, the Japanese version prevails.
16. Business Entity and Contact
For inquiries regarding the handling of personal information, please contact: Business name: Resolve Inc. Address: Shibuya Dogenzaka Tokyu Building 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan Email: support@banzuke.ai We have not appointed an EU/UK representative under Article 27 of the GDPR / UK GDPR at this time. EU/UK users may contact us at the email address above.