What we collect

What we do not collect

• We never collect or store a マイナンバー (Individual Number). A form carrying one is filled with that box left blank, and you write it in by hand after printing.
• We do not collect card numbers; Stripe Checkout is hosted by Stripe and cards never touch our servers.
• We do not use advertising or analytics trackers.
• We do not sell or share personal data with anyone for their own purposes.

Why we use it

• To read the form you chose and work out what each of its boxes is for.
• To keep your draft so that a form you started can be finished later.
• To compose the finished PDF you download.
• To enforce the limits of the plan you are on and to bill for it.

Disclosure to third parties and processors

We do not disclose personal data to third parties except with your prior consent or where required by law. The following processors handle data on our behalf, to the extent needed to provide the Service.

Transfers to third parties outside Japan

• Processing takes place in the United States and across Cloudflare's global network, so personal data is handled outside Japan.
• Each processor is engaged under its own data protection terms and handles data only on our instructions.

Cookies and similar technologies

• One session cookie, set only after you sign in, so that you stay signed in. It is host-prefixed and cannot be read by another subdomain.
• No advertising or analytics cookies are set.

How long we keep it

• A draft and its answers are kept while your account is open, so that a form you started can be finished.
• Deleting a draft deletes its answers and the filled PDF made from it.
• Deleting your account deletes all of them.
• Billing records are kept as long as tax and company law require.

How we protect it

• Everything is served over TLS and stored inside Cloudflare.
• A draft is readable only through your authenticated session.
• Your answers are never used to train models.
• A マイナンバー box is recognised and refused rather than stored, so the obligations of 番号法 never attach to us.
• The operator back-office is a separate surface behind Cloudflare Access and cannot read a draft through the customer console.

Requests about your data

You may request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, erasure, or disclosure of third-party provision records for your retained personal data through the disclosure form (/legal/disclosure). There is no fee.

• We answer within two business days of confirming the request came from you.
• Confirmation is by the request arriving from your registered email address.
• Account deletion is requested through the same form.

Operator information

The operator's name, the name of the representative, the address and the telephone number are not printed on this page, under Article 32(1) of Japan's Act on the Protection of Personal Information, which includes answering without delay on the request of the person concerned. Request them through the disclosure form (/legal/disclosure) and they are sent within two business days, as an electronic record, to the email address you give. There is no fee.

• Disclosure is made as an electronic record by email rather than on paper. Say so in the request if you need it on paper.
• Requests before purchase are accepted. What you need in order to decide reaches you before the decision.
• No account with us is needed in order to request it.

Changes to this policy

We may revise this policy in response to changes in law or in the Service. Where a change is significant, we will post what changed and the date it takes effect on this page.