Privacy Policy

Article 1 (Personal Information)

"Personal information" means personal information as defined in the Act on the Protection of Personal Information — information about a living individual that can identify a specific individual by name, date of birth, address, telephone number, email address, or other descriptions (including information that can be easily cross-referenced with other information and thereby identify a specific individual).

Article 2 (Methods of Collecting Personal Information)

We may ask for personal information such as your name, email address, address, and telephone number when you register an account or use our services. We may also obtain personal information from partners (including advertisers and agencies).

Article 3 (Purposes of Collecting and Using Personal Information)

The purposes for which we collect and use personal information are as follows.

1. To provide and operate our service ({RECEIPT}ROLLER)
2. To respond to inquiries from users
3. To notify users of new features, updates, campaigns, and similar information
4. To contact users as needed, including for maintenance and important notices
5. To identify and suspend users who violate the Terms of Use or attempt to use the service for fraudulent or improper purposes
6. To manage user accounts and verify identity
7. To bill and settle usage fees for paid services
8. To show ads that match what was bought (item names, categories, amounts, dates and times, stores) and to measure how ads perform (Article 10)
9. To create statistics that cannot identify individuals and provide them to advertisers and member stores (Article 10)
10. To email news and coupons from a member store at that store's request (Article 11)
11. For purposes incidental to the above

Article 4 (Changes to the Purpose of Use)

We will change the purpose of use of personal information only where the change is reasonably deemed to be related to the purpose before the change. If we change the purpose of use, we will notify users of the revised purpose by a method prescribed by us, or announce it on this website.

Article 5 (Provision of Personal Information to Third Parties)

Except in the following cases, we will not provide personal information to third parties without obtaining the user's prior consent.

1. When required by laws and regulations
2. When necessary to protect a person's life, body, or property, and it is difficult to obtain the individual's consent
3. When especially necessary to improve public health or promote the sound upbringing of children, and it is difficult to obtain the individual's consent
4. When it is necessary to cooperate with a national agency, a local government, or a party commissioned by either in carrying out duties prescribed by law, and obtaining the individual's consent is likely to impede those duties

Article 6 (Disclosure of Personal Information)

When an individual requests disclosure of their personal information, we will disclose it to them without delay. However, if disclosure would fall under any of the following, we may withhold all or part of it; if we decide not to disclose, we will notify the individual to that effect without delay.

1. When there is a risk of harming the life, body, property, or other rights and interests of the individual or a third party
2. When there is a risk of significantly impeding the proper conduct of our business
3. When disclosure would otherwise violate laws and regulations

Article 7 (Correction and Deletion of Personal Information)

If the personal information we hold about a user is incorrect, the user may request correction, addition, or deletion of that personal information ("Correction, etc.") through the procedures prescribed by us. When we receive such a request, we will conduct the necessary investigation, make the Correction, etc. based on the results, and notify the user accordingly.

If you wish to delete your account and data, please see the Account & Data Deletion Request page.

Article 8 (Suspension of Use, etc.)

When an individual requests the suspension or erasure of their personal information ("Suspension of Use, etc.") on the grounds that it is being handled beyond the scope of the purpose of use, or that it was obtained by improper means, we will conduct the necessary investigation without delay. If we determine, based on the results, that Suspension of Use, etc. is necessary, we will carry it out without delay and notify the user accordingly.

Article 9 (Data Protection Measures)

To appropriately protect users' personal information and authentication information such as access tokens obtained when connecting external services, we take the following safety management measures.

1. Encryption — All communications are encrypted with TLS 1.2 or higher. Stored data is encrypted at rest with Microsoft Azure Storage encryption (AES-256). Access tokens and refresh tokens for third-party integrations (Google/YouTube, Meta, X, TikTok, etc.) are stored in dedicated encrypted storage and are excluded from log output.
2. Access Control — Operational access to personal information and authentication information is limited to the minimum necessary personnel and is subject to two-factor authentication and audit logging. Production is logically separated from other environments.
3. Scope Minimization — For Google/YouTube integration we request only youtube.upload, limited to posting videos the user created within ReceiptRoller to the user's own channel. We do not request additional scopes to obtain viewing history, comments, analytics, or similar data. Obtained tokens are not used to train AI/ML models.
4. Retention & Deletion — Access tokens are invalidated and erased without delay when the user disconnects the integration or deletes their account. We separate logical and physical deletion so that data cannot be restored from backups.
5. No Sharing with Third Parties — OAuth tokens and related personal information are used only within the scope of the purpose of use, and are never provided or sold to third parties.
6. Incident Response — If we become aware of an information leak or the risk of one, we will promptly investigate and notify affected users and the supervisory authorities in accordance with applicable law.

Article 10 (Ads Based on Purchases and Ad Measurement)

1. We may show ads that match what was bought on digital receipts and in the ReceiptRoller apps (including the LINE mini app). Purchases are matched to ads inside our own systems.
2. We do not give advertisers names, contact details, member IDs or any other information that identifies a person, nor which customer's purchase met an ad's conditions.
3. What we give advertisers is limited to statistics such as views, coupon uses and the total amount spent when coupons were used. Statistics that fall short of a set period, count or number of stores are not provided, so no one can be inferred from a small group.
4. To measure ads, we may compare sales at stores that showed an ad with stores that did not. The results are also provided only as statistics.
5. You can turn off ads based on your purchases at any time in Ad settings. Ads still appear afterwards, but they are not related to what you bought.

Article 11 (Emails from Member Stores)

1. At the request of a store that uses ReceiptRoller (a "member store"), we may email you news and coupons from that store, sent in the store's name.
2. We send them only to people who have used that store (who have a recorded visit or purchase) and to people who chose to receive its news when booking, signing up, or by other means. We do not send them to anyone who has unsubscribed.
3. Each email states the name, address and contact details of the member store that sent it, and how to stop receiving such emails.
4. You can stop these emails at any time, for one member store or for all of them, using the link in the email or "Emails from stores" on your profile. A member store cannot resume emails to someone who has unsubscribed.
5. To send these emails, we record email addresses and your email settings (whether you receive or have stopped them, and when and how you chose). A member store can see whether it may email you and why, but not what you have chosen for other member stores.
6. Customer information held by a member store is managed by that store under its own responsibility. We handle it only at the store's request and only as far as is needed to send these emails.

Article 12 (Changes to this Privacy Policy)

We change this Policy when needed. Before a change that disadvantages users or changes the purposes of use takes effect, we give notice a reasonable period in advance by posting it on this website or by other means we choose. Unless we provide otherwise, the revised Privacy Policy takes effect when it is posted on this website.

Contact

ReceiptRoller, Inc.
1535 Kawakami, Iizuna-machi, Kamiminochi-gun, Nagano 389-1226, Japan
TEL: 050-3562-0410
Inquiries: Contact form