Privacy Policy

Article 1 (Personal Information)

"Personal information" means personal information as defined in the Act on the Protection of Personal Information — information about a living individual that can identify a specific individual by name, date of birth, address, telephone number, email address, or other descriptions (including information that can be easily cross-referenced with other information and thereby identify a specific individual).

Article 2 (Methods of Collecting Personal Information)

We may ask for personal information such as your name, email address, address, and telephone number when you register an account or use our services. We may also obtain personal information from partners (including advertisers and agencies).

Article 3 (Purposes of Collecting and Using Personal Information)

The purposes for which we collect and use personal information are as follows.

1. To provide and operate our service ({RECEIPT}ROLLER)
2. To respond to inquiries from users
3. To notify users of new features, updates, campaigns, and similar information
4. To contact users as needed, including for maintenance and important notices
5. To identify and suspend users who violate the Terms of Use or attempt to use the service for fraudulent or improper purposes
6. To manage user accounts and verify identity
7. To bill and settle usage fees for paid services
8. For purposes incidental to the above

Article 4 (Changes to the Purpose of Use)

We will change the purpose of use of personal information only where the change is reasonably deemed to be related to the purpose before the change. If we change the purpose of use, we will notify users of the revised purpose by a method prescribed by us, or announce it on this website.

Article 5 (Provision of Personal Information to Third Parties)

Except in the following cases, we will not provide personal information to third parties without obtaining the user's prior consent.

1. When required by laws and regulations
2. When necessary to protect a person's life, body, or property, and it is difficult to obtain the individual's consent
3. When especially necessary to improve public health or promote the sound upbringing of children, and it is difficult to obtain the individual's consent
4. When it is necessary to cooperate with a national agency, a local government, or a party commissioned by either in carrying out duties prescribed by law, and obtaining the individual's consent is likely to impede those duties

Article 6 (Disclosure of Personal Information)

When an individual requests disclosure of their personal information, we will disclose it to them without delay. However, if disclosure would fall under any of the following, we may withhold all or part of it; if we decide not to disclose, we will notify the individual to that effect without delay.

1. When there is a risk of harming the life, body, property, or other rights and interests of the individual or a third party
2. When there is a risk of significantly impeding the proper conduct of our business
3. When disclosure would otherwise violate laws and regulations

Article 7 (Correction and Deletion of Personal Information)

If the personal information we hold about a user is incorrect, the user may request correction, addition, or deletion of that personal information ("Correction, etc.") through the procedures prescribed by us. When we receive such a request, we will conduct the necessary investigation, make the Correction, etc. based on the results, and notify the user accordingly.

If you wish to delete your account and data, please see the Account & Data Deletion Request page.

Article 8 (Suspension of Use, etc.)

When an individual requests the suspension or erasure of their personal information ("Suspension of Use, etc.") on the grounds that it is being handled beyond the scope of the purpose of use, or that it was obtained by improper means, we will conduct the necessary investigation without delay. If we determine, based on the results, that Suspension of Use, etc. is necessary, we will carry it out without delay and notify the user accordingly.

Article 9 (Data Protection Measures)

To appropriately protect users' personal information and authentication information such as access tokens obtained when connecting external services, we take the following safety management measures.

1. Encryption — All communications are encrypted with TLS 1.2 or higher. Stored data is encrypted at rest with Microsoft Azure Storage encryption (AES-256). Access tokens and refresh tokens for third-party integrations (Google/YouTube, Meta, X, TikTok, etc.) are stored in dedicated encrypted storage and are excluded from log output.
2. Access Control — Operational access to personal information and authentication information is limited to the minimum necessary personnel and is subject to two-factor authentication and audit logging. Production is logically separated from other environments.
3. Scope Minimization — For Google/YouTube integration we request only youtube.upload, limited to posting videos the user created within ReceiptRoller to the user's own channel. We do not request additional scopes to obtain viewing history, comments, analytics, or similar data. Obtained tokens are not used to train AI/ML models.
4. Retention & Deletion — Access tokens are invalidated and erased without delay when the user disconnects the integration or deletes their account. We separate logical and physical deletion so that data cannot be restored from backups.
5. No Sharing with Third Parties — OAuth tokens and related personal information are used only within the scope of the purpose of use, and are never provided or sold to third parties.
6. Incident Response — If we become aware of an information leak or the risk of one, we will promptly investigate and notify affected users and the supervisory authorities in accordance with applicable law.

Article 10 (Changes to this Privacy Policy)

Except for matters otherwise provided by law or in this Policy, the contents of this Policy may be changed without notice to users. Unless we provide otherwise, the revised Privacy Policy takes effect when it is posted on this website.

Contact

ReceiptRoller, Inc.
1535 Kawakami, Iizuna-machi, Kamiminochi-gun, Nagano 389-1226, Japan
TEL: 050-3562-0410
Inquiries: Contact form