1. About codoc, Inc.
4. Personal information to be collected
User's Registration Data
This data includes names, email addresses, social media accounts, etc. of users of our services.
Service Usage Data
Information such as IP address, access log, type of device used, device ID, device attributes, browser type, language, and operating system of users of our services. The purposes of use of the various types of personal data obtained from users and the legal basis for processing them in accordance with GDPR are as follows.
|Type||Purpose of use||Basis|
|User's registration data||For identification purposes when registering or logging in to our services||Performance of contract.
|To provide information about our services, to contact you, to send newsletters, and to conduct surveys.||Legitimate interests.|
|To provide content for our services, and to bill users for usage fees for paid services.||Performance of contract.
|To cooperate with the courts, investigative agencies, and other relevant authorities in order to protect the life, body, or property of the Company, the user, or a third party.||Compliance with legal obligations|
|Data on service use||To inform and contact you for purposes related to our services.||Performance of contract.
|To provide features, information, advertising, or other content based on a user's location.||Legitimate interests.|
|To understand how users access and use our services, and to analyze the status of use.||Legitimate interests.|
|For optimization of our services and development of new services.||Legitimate interests.|
The term "performance of contract" refers to the use of personal information by the Company to fulfill a contract with a user.
“Legitimate interests" means that we use personal information to provide you with the services you expect from us, with the intention of maintaining or developing the level of our services. For example, to analyze user usage and to design services that are more user-friendly.
The term "compliance with legal obligations" refers to the provision of personal information when the Company cooperates with the relevant authorities, such as courts and investigative agencies, in accordance with applicable laws. For example, if a user becomes a victim of illegal activities, personal information may be provided to the investigating authorities to protect the user's property.
5. Purpose of use of personal information
The Company may use the collected personal information for the following purposes.
Identity verification and authentication services.
After-sales service, inquiries and complaints.
Inquiries to the Company and its services, and notifications of matters necessary for the operation of the Company's services .(including via email)
Maintaining the system and responding to problems.
Improvement of our services, development of new services, etc.
Determination of whether a registered user is a member of antisocial forces.
To send information about our services and products, to plan campaigns and sweepstakes, and to conduct questionnaires.
Research and analysis of marketing data.
To display, post or distribute advertisements that match the user's attributes on the Company's or a third party's website, web media, social media services, press release distribution services, books, magazines and other media.
Provide functions, information, advertisements, or other content based on the user's location information.
To understand how users access and use the Company's services, and to analyze the status of use.
To bill users for use of paid services.
Other purposes individually specified for each of the Company's services.
Other purposes incidental to the above purposes of use.
6. Cookies and Access Logs
Behavior analysis and advertisement distribution using access logs
In addition, our services use Google Analytics provided by Google LLC and Amazon Web Services provided by Amazon Web Services, Inc.
7. Provision of Personal Information to Third Parties
The Company may provide personal information to third parties (including those located outside Japan) in the following cases. The Company may provide personal information to third parties (including those located outside Japan) in the following cases.
with the consent of the individual.
when the disclosure of personal information is requested by a court of law, public prosecutor's office, police department, tax office, bar association, or an organization with equivalent authority.
In order to display, post, or distribute advertisements that match the user's attributes on a third party's website, webmedia, social media service, press release distribution service, book, magazine, or other media, the information is provided to the third party.
When the Company outsources all or part of its business to a third party within the scope necessary to achieve the purpose of use.
In the event that personal information is to be used jointly with a specific party,
when it is necessary for the Company to exercise its rights.
in the event of a merger, transfer of business, or other event that results in the succession of business, the information will be disclosed to the person who succeeds to the business.
when permitted by the Personal Information Protection Law or other laws and regulations.
The sale of the consumer's personal information of users residing in the State of California in the United States of America is not conducted under the CCPA, as is the case with users in other regions. In addition, when necessary to provide services to users (e.g, payment processing companies, etc.) the Company may entrust the handling of personal information to a third party after conducting necessary and appropriate supervision of the entrusted party, but such information may not be used for any other purpose.
8. Transfer to a third country
In the event that the Company transfers the User's personal data to third countries (other than countries and regions that have obtained sufficiency certification) other than Japan, European Union member states, and Iceland, Liechtenstein, and Norway ("EEA") in order to outsource the handling of personal information to third parties, the Company shall certify under the Privacy Shield Framework and enter into standard contractual clauses and will ensure the security of the destination country by certifying it under the Privacy Shield Framework, entering into standard contractual clauses, and other methods in accordance with applicable laws and regulations.
9. Provision of information to external vendors
In cases where the Company obtains support services from a third party in relation to the Company's services, the Company may share the user's personal information with a trusted vendor in conjunction with the outsourcing of all or part of the handling of personal data to the extent necessary to achieve the purpose of use. In the event of such sharing, the Company shall impose on such a contractor the obligation to use the user information only within the scope of the purposes authorized by the Company and to protect the user information according to the same or higher standards as the Company. In addition, the Company may provide third parties with personal information that has been processed in such a way that the individual cannot be identified through certain measures and the said personal information cannot be restored.
10. Retention and storage period of information
The Company will retain and store user information for the period necessary to carry out the purpose of use or for the period specified by applicable laws and regulations. After the purpose of use has been fulfilled or the period specified by applicable laws and regulations has expired, the personal information will be promptly deleted. However, in order to comply with our legal obligations and to protect our rights and interests, we may retain, store, and use your information. The Company also collects and retains data in which personal information has been processed in such a way that it cannot be used to identify an individual through certain measures and such personal information cannot be recovered. As a general rule, such data will be deleted promptly after the purpose has been fulfilled or the statutory period has expired, but may continue to be retained and stored for the protection of our rights and interests, the improvement of our services, or for compliance with legal obligations.
11. User's Rights
Users residing in certain countries or regions are granted certain rights regarding their personal information. In principle, these rights include the right of access to their personal information and the right to request its collection and deletion, but the conditions for exercising these rights, as well as additional rights, vary from country to country. However, the conditions for exercising such rights and additional rights vary from country to country. Therefore, we will separately explain your rights as described in Section 13. and Section 14. especially for users residing in the EEA and users residing in California, USA.
- Disclosure of Personal Information
When the Company is requested by a User to disclose his/her personal information, the Company shall disclose such information to the User without delay. However, the Company may decide not to disclose all or part of the information if disclosure would cause any of the following to occur, and if the Company decides not to disclose the information, it will notify the user to that effect without delay. The user may request disclosure of records pertaining to provision to a third party.
- When there is a risk of harm to the life, body, property, or other rights and interests of the user or a third party.
- In cases where there is a risk of significant hindrance to the proper execution of the Company's business.
- When it would violate other laws and regulations.
- Correction, addition, deletion, suspension of use, and deletion of personal information
When a user requests the correction, addition, deletion, suspension of use, or elimination of his/her personal information, the Company will respond within a reasonable period of time in accordance with the law after confirming the identity of the user.
12. EEA Residents
This section explains the personal information of EEA residents that we handle and the rights of users under the GDPR.
Right to Withdraw Consent
You may withdraw your consent at any time, even if we have obtained your consent to collect your personal data. If the user withdraws his/her consent, the user may not be able to use all or part of the Company's services.
Right to know
The User may request an explanation of the User's personal information held by the Company, the purpose and method of use of such information, and may receive a copy of the User's personal information through procedures separately designated by the Company.
Right to delete
The user may request the deletion of the personal information handled by the Company regarding the user. However, this does not apply to the following cases.
- When it is necessary to comply with legal obligations.
- When there is a legitimate business purpose.
- Necessary to prove, exercise, or defend a legal claim.
Right to Change or Modify
If the personal information collected by the Company from the User is inaccurate, the User may request the Company to change, add, or correct it by following the procedures separately specified by the Company.
Right to object to, limit, or restrict the use of personal information
You may request that we stop using all or part of your personal information, or restrict our use of it. You may also object or complain at any time to the supervisory authority of any country in the EEA or to us regarding our processing of your personal information.
13. United States - California Residents
This section describes the personal information of California residents that we handle and the user's rights under the CCPA. If you are a resident of California, you may exercise the following rights under the CCPA.
Right to know
- You may request the disclosure of the following information up to two times in a 12-month period with respect to your personal information that we have collected in the past 12 months
- Categories of personal information that we have collected about you
- Category of the information source pertaining to the personal information.
- The purpose for which the personal information was collected.
- Category of the third party with whom the personal information was shared.
- Categories pertaining to the user's personal information disclosed by the Company for business purposes, and categories pertaining to third parties to whom the Company disclosed such information for business purposes.
Right to delete
The User may request the deletion of the personal information collected by the Company from the User to the extent provided for in the CCPA.
Right to Opt-Out of the Sale of Personal Information
A user may request to opt out of the sale of his or her personal information. However, as already mentioned, we do not sell, share, or rent personal information. If you have any questions on this point, please contact us using the contact information below.
Refusal of discriminatory treatment
The Company will not treat users unfairly or discriminate them from other users in exercising or having exercised the above rights. If you wish to exercise any of the above rights, you may contact the Company through the following contact point. In such cases, we may verify your identity with identification documents in order to confirm the basis for exercising your rights.
14. Notification by email or mobile
The Company will send notifications related to transactions involving the Company's services or to the provision of the Company's services as necessary. However, we try to refrain from sending you communications that you do not want to receive. As a general rule, for marketing communications sent by the Company, opt-in (obtaining prior consent) is required.
We are committed to protecting the information we maintain about our customers from unauthorized access or disclosure. We are committed to continuously improving our security measures for protection. If a security problem is identified, we will take appropriate corrective measures. If you find any bugs or vulnerabilities in our services, please let us know using the contact information below. In the event of a breach of personal information, we will take appropriate action in accordance with applicable laws and regulations.
16. Links to Other Companies' Websites
The Company's website may contain links to other companies' websites. Other companies' websites are subject to their own rules and privacy policies that differ from those of the Company's website.
17. Use by children
Our Service is not available to minors under the age of 16 who reside outside of Japan. Minors under the age of 16 who reside outside of Japan should not provide any personal information through the Service. In the unlikely event that personal information is provided, please contact us via the contact information below, and we will delete the information in a timely manner.
18. Contact information
In addition to the above, inquiries regarding CCPA can also be sent by email.