Privacy Policy

1. Operator

Name: Kenji Masuda

Address: disclosed without delay on request.

Contact: support@drafta-memo.com

2. Information collected and purposes

Google account email, name, picture and user ID

Signing in and identifying you

Memos (text, titles, trays, settings) and their history

Saving, syncing and restoring memos

Copies of shared memos

Showing them on share pages (anyone with the link can read them)

Reminders (memo title, date and time, time zone, language) and notification endpoints (each device's Web Push endpoint and keys)

Sending notifications

Drafta Pro subscription status and Stripe customer ID

Checking your subscription and providing its features

Access logs (IP address, browser type and the like)

Delivering Drafta and preventing abuse

Your inquiries and email address

Answering your inquiries

Card numbers and other payment details are collected directly by Stripe (Link), which handles the payment; the Operator does not receive them.

3. Provision to third parties

Personal data is not provided to third parties except with your consent, as required by law, and the like.

When you buy Drafta Pro, information needed for the payment, such as your user ID and email address, is provided to Stripe (Link), which acts as the seller and handles the payment. Your agreement on the purchase screen is your consent to this.

4. Handling abroad

Drafta uses the services of these companies outside Japan:

• Google LLC (United States): sign-in, data storage (memos are stored in a data center in Tokyo), page delivery, and notification delivery (Chrome, Android)
• Stripe, Inc. and Sold through Link, LLC (United States): payments
• Apple Inc., Mozilla Corporation and others (United States and elsewhere): notification delivery for their browsers

For the personal information protection system of the United States, see the Personal Information Protection Commission of Japan (https://www.ppc.go.jp/enforcement/infoprovision/laws/offshore_report_america/). The United States has no comprehensive federal law equivalent to Japan's Act on the Protection of Personal Information; it has sector-specific and state laws.

These companies hold international information security certifications (such as ISO/IEC 27001) and take measures such as encryption and access control.

5. Security measures

• All communication is encrypted.
• Access rules allow only you to read and write your memos and other data.
• Payment details are not kept; Stripe handles them.
• Secret keys are kept apart from the source code, in restricted places.
• For companies abroad, the systems of their countries are understood as described in 4.

6. Requests for disclosure, correction, deletion or suspension

For requests about your personal data, such as disclosure, correction, deletion or suspension of use, contact support@drafta-memo.com. After confirming your identity, the Operator responds as the law requires.

You can delete your account and data yourself by leaving Drafta. Payment records at Stripe are kept as required by law and Stripe's terms.

7. Information stored on your device

Drafta stores the display language, the last view and copies of your memos on your device (browser storage) to open faster next time. They are not sent to the server.

No cookies are used for advertising or analytics.

8. External transmission

Google (Firebase)

Sign-in information, memos and other data, access logs: for sign-in, storage and delivery

Stripe (Link)

User ID, email address, subscription information: for payments

Notification services (Google, Apple, Mozilla and others)

Encrypted notifications (the memo title): to deliver notifications

Drafta sends to outside companies only what it needs to work.

9. Share pages

A shared memo can be read by anyone with its link. Share pages are set to stay out of search engines, but a link that spreads can be read by many people.

10. Changes

Changes to this policy are announced in Drafta.

11. Complaints and inquiries

support@drafta-memo.com