GlossVation Inc. (hereinafter 'the Company') handles personal information collected in the course of providing NocodilySuite (hereinafter 'the Service') in accordance with the Act on the Protection of Personal Information and other applicable laws, based on the policy set out below.

Scope of This Policy

This Policy applies to information that the Company itself collects in the course of providing the Service. Applications and data created or uploaded by customers using the Service (hereinafter 'Customer Data') belong to the customer's control, and the Company does not access or handle Customer Data except as set forth in the Customer Data Policy. The handling of Customer Data is governed by the Terms of Service and the Customer Data Policy.

1. Information Collected

The Company collects the following personal information:
· Account registration information (name, email address, organization name, department, job title, phone number, etc.)
· Service usage logs (access date/time, IP address, browser/device information, operation history, etc.)
· Inquiry content (name, email address, inquiry details, etc.)

2. Purpose of Use

The Company uses collected personal information for the following purposes:
① To provide, operate, maintain, and improve the Service
② To bill and process payments for usage fees
③ To respond to inquiries
④ To deliver important notices regarding the Service (e.g., outages, maintenance)
⑤ To announce new features, related services, and events (you may opt out at any time following the instructions included in each email)
⑥ To measure and improve marketing effectiveness through analysis of browsing and usage activity on the Company's website and the Service
⑦ To fulfill legal obligations

3. Provision to Third Parties

The Company will not provide personal data to third parties without the prior consent of the individual, except in the following cases:
· When required by law
· When necessary to protect the life, body, or property of a person and it is difficult to obtain consent
· When particularly necessary to improve public health or promote the sound upbringing of children, and it is difficult to obtain consent
· When cooperation is needed for a national or local government agency, or a party entrusted by them, to carry out statutory duties, and obtaining consent may hinder the performance of those duties

Note that outsourcing to the extent necessary to achieve the purposes of use (Section 4) and transfers of personal data accompanying a merger or other succession of business do not constitute third-party provision.

4. Outsourcing

The Company may outsource part of its personal data handling to external service providers (such as cloud infrastructure, payment processing, email delivery, and customer support tool vendors) to the extent necessary to achieve the purposes of use. When doing so, the Company establishes vendor selection criteria, enters into data processing agreements, and exercises appropriate supervision.

When outsourcing the handling of personal data to a service provider located outside Japan, the Company confirms that such provider has established a system that meets the standards prescribed by the rules of the Personal Information Protection Commission, and takes the necessary measures under Article 28 of the Act on the Protection of Personal Information. Information regarding such measures will be provided upon request from the individual.

5. Security Measures

The Company implements the following necessary and appropriate security measures to prevent leakage, loss, or damage of personal data:
· Organizational measures: appointment of a person responsible for personal data handling, establishment of internal rules, and periodic review of handling status
· Human measures: regular education and training of employees, and confidentiality undertakings
· Physical measures: management of areas where personal data is handled, and prevention of theft or loss of devices and electronic media
· Technical measures: access control to limit viewing privileges, encryption of communications (TLS), and security monitoring to prevent unauthorized access

6. Cookies and Access Analytics

The Service uses Google Analytics (GA4), an analytics tool provided by Google LLC, to improve the Service and understand usage patterns. Google Analytics collects information such as browsing behavior via cookies. Note that Google Analytics 4 is designed not to record or store IP addresses.

To opt out of Google Analytics, please install Google's opt-out browser add-on. You may also disable cookies through your browser settings, though some features of the Service may become unavailable as a result.

7. Disclosure, Correction, and Deletion of Personal Information

Individuals may request, with respect to their own retained personal data held by the Company, notification of the purpose of use, disclosure (including disclosure of third-party provision records), correction, addition, deletion, suspension of use, erasure, or cessation of third-party provision. Please contact the inquiry desk below to make such a request. The Company will verify the requester's identity and respond without undue delay in accordance with applicable law.

8. Revisions to This Policy

This Policy may be revised in response to changes in laws and regulations or business activities. For changes to the purposes of use or other material changes, the Company will notify customers a reasonable period in advance of the effective date, either through notice on the Service or by email. Where consent of the individual is required by law, the Company will obtain such consent in advance.

9. Contact

For inquiries regarding the handling of personal information, please contact us at:

GlossVation Inc.
Email: security@glossvation.com
Contact Form: https://www.glossvation.com/contact