Privacy Policy

tanmen (“we” or “us”) handles the personal information obtained through the website tanmen.work that we operate and through each of the services we provide (together, the “Services”) as set out below.

Handling specific to an individual service — what that service reads and how much it stores — is described on the page for that service in addition to this policy. Where the two differ, the description on the service’s own page prevails.

Information we obtain

The Services obtain the following information.

• Information relating to account registration — For services that require signing in, the email address used to sign in and the information used to identify you within the service.
• Information you enter when contacting us — Your name, email address, subject, the content of your enquiry, and any additional items requested by the particular contact desk.
• Information relating to payment — Payments are processed by Stripe. Credit card numbers are received directly by Stripe; we neither receive nor retain them. What we refer to is limited to what is needed to manage the contract, such as the payment identifier, the amount, and the billing status.
• Information relating to licences — For services where features are enabled by a licence key, the licence key, the plan you are subscribed to and its status, and the email address the licence key is sent to.
• Information relating to access — Statistical information such as the pages viewed, the referrer, and the type of browser and device. This is obtained using cookies.
• Technical information when a form is submitted — To prevent automated submissions (bots), Cloudflare Turnstile obtains technical information such as the IP address.

Purposes of use

• Replying to enquiries and keeping a record of them
• Providing and maintaining the Services, and managing the plans you are subscribed to (including issuing and sending licence keys, and verifying that they are valid)
• Billing, and responding to enquiries about payments
• Countermeasures against improper use and automated submissions
• Improving the Services by understanding how they are used

We do not use the information beyond the scope of the purposes above.

Provision to third parties

We do not provide the personal information we obtain to third parties, except with the consent of the person concerned, where required by law, or where it is necessary to protect a person’s life, body or property and obtaining consent is difficult. We do not sell personal information.

Outsourcing

To the extent necessary to achieve the purposes above, we outsource handling to the following companies. We check how each of them handles the information on a regular basis.

• Cloudflare, Inc. — Delivery and storage for the site and the contact desk, bot protection for the form (Turnstile), access analytics (Web Analytics), and storage of license information (kawarin and stallscope)
• Stripe, Inc. — Payment processing. Card numbers are received directly by Stripe and are not retained by us
• WorkOS, Inc. — Sign-in authentication (AuthKit). Handles the email address used to sign in and the identifier for the user (expires)
• Plus Five Five, Inc. (Resend) — Sending notification emails and delivering license keys. Handles the recipient’s email address and the license key being sent (expires and stallscope)
• Google LLC — Access analytics (Google Analytics)

The servers of these companies may be located outside Japan, and to that extent personal information is transferred outside Japan.

Cookies and access analytics

This site uses Google Analytics to understand how it is used. Google Analytics collects information using cookies, but that information does not identify individuals. If you would rather it were not collected, disable cookies in your browser settings or use the opt-out add-on provided by Google.

We also use Cloudflare Web Analytics. It uses neither cookies nor identifiers that track individuals, and aggregates page views and how long pages took to display.

Retention period

Enquiries are kept for three years from the date they are received, so that the course of the exchange can be checked, and are deleted after that. Records relating to contracts and payments are kept for the period required by law. Statistical information from access analytics follows the default retention period of the service used.

Requests for disclosure, correction or deletion

On request from the person concerned, we respond without delay, in accordance with the law, to requests to disclose, correct, add to, delete, or stop using the personal information we hold. Please make such requests through the contact desk below. We may ask questions to the extent needed to confirm your identity.

Security management

The information we obtain is managed through encrypted communication (HTTPS) and by limiting who can access it. When selecting a company to outsource to, we confirm that sufficient security measures are in place.

Changes to this policy

If we change the content, we will post the amended content and the date last updated on this page. Where the change is significant, we will give notice on the Services.

Contact desk

For enquiries about this policy or about how personal information is handled, please use ~/supports/general. Our name, address and telephone number are disclosed without delay upon request (see the Notation Based on the Japanese Act on Specified Commercial Transactions).