Privacy Policy

ATLAS DOT ONE Privacy Policy (English) Version: Version 1.4 Created: 2026-03-26 Effective Date: 2026-03-26 Business Operator (Controller): ATLAS DOT ONE Japan 株式会社 (the "Company") Representative: Akira Takezawa Address: Taira Maison 102, 1-15-14 Adachi, Adachi-ku, Tokyo 120-0015, Japan ──────────────────────────────────────── The Company handles User information obtained through ATLAS DOT ONE (the "Service") appropriately in accordance with the Act on the Protection of Personal Information (APPI) and other applicable laws and guidelines. ──────────────────────────────────────── 1. Definitions (1) "Personal Information" means personal information as defined in the APPI. (2) "Personal Data" means personal information that constitutes a personal information database, etc. (3) "Retained Personal Data" means Personal Data over which the Company has authority to disclose, correct, etc. (4) "User Information" means information about Users that the Company acquires and retains, including Personal Information. 2. Information We Collect The Company collects the following information to the extent necessary to provide the Service (methods: User input, automatic collection from devices, provision from third parties, etc.). (1) Account information: name, display name, email address, phone number, address, date of birth, company/department/person in charge, etc. (2) Identity verification information (if conducted): images of photo identification documents, images of identification documents without a photograph, images of supplementary documents, facial images of the individual, matching results, identity verification results, results of checks relating to anti-social forces, sanctions targets, adverse media reports, and other risk screening results designated by the Company, etc. (3) Transaction/contract-related information: applications, reservations, contract details, move-in/move-out details, cancellation/refund information, inquiry history, trouble-handling history, etc. (4) Payment-related information: payment method type, payment identifier, billing/payment status, refund status, bank account information (owners), receipt information, etc. * The Company generally does not store credit card numbers; payment processors handle such information. (5) Rent guarantee-related information (if offered): guarantee application info, screening status, delinquency status, performance status, recourse status, etc. (6) Ancillary service-related information (if offered): cleaning/repair estimate requests, schedules, access method, photos/videos, estimates, reports, etc. (7) Communication information: dashboard messages, attachments, timestamps, etc. (8) Device/log information: IP address, cookies, device identifiers, OS, browser, access time, viewing history, etc. (9) Location information: if permitted by device settings. (10) Other information provided by Users to the Company. 3. Purposes of Use The Company uses User Information for the following purposes: (1) providing the Service, account management, identity verification, and screening (2) supporting property search, application, contracting procedures, and providing dashboard functions (3) providing subscriptions, billing, payments, refunds, managing and collecting unpaid amounts (4) processing payments to owners (where the Company provides collection/settlement services) (5) screening, contracting, performing, and recourse for rent guarantees (if offered) (6) arranging, providing, and reporting cleaning/estimation services (if offered) (7) responding to inquiries, fact-finding for disputes, and improving quality (8) preventing unauthorized use, money laundering, and other improper conduct; ensuring security, including checks relating to sanctions targets and adverse media reports; and handling violations of the Terms (9) analyzing usage and improving functions (analytics) (10) providing information about the Company's or partners' products/services (where consent is required, after obtaining consent) (11) legal compliance, responding to authorities/courts, exercising and defending rights (12) procedures associated with transfer of rights/obligations due to business succession, reorganization, etc. 4. Provision to Third Parties (1) The Company will not provide Personal Data to third parties without the individual's consent except as permitted by law. (2) However, for provision of the Service, execution of Transactions, and provision of Ancillary Services, the Company may provide Personal Data within the following scope (limited to the minimum necessary items): a. To Owners: tenant user's name, contact details, application details, move-in/move-out details, payment status, etc. b. To Tenant Users: owner's name/company name, contact details, property information, billing information, etc. c. To payment processors: information necessary for payment (payment identifier, billing amount, etc.) d. To rent guarantee providers: information necessary for screening/performance (identity verification information, transaction information, payment status, etc.) e. To cleaning/estimation providers: information necessary to perform work (address, contact, access method, photos, etc.) f. To vendors or providers engaged in identity verification, AML/CFT checks, and checks relating to anti-social forces, sanctions targets, and adverse media reports: information necessary for identity verification and such checks (3) When third-party provision is necessary, the Company obtains consent through the Terms, consent screens, or application procedures as appropriate. 5. Outsourcing The Company may outsource handling of User Information to external vendors within the scope necessary to achieve the purposes (cloud, payments, email delivery, customer support, identity verification, etc.). The Company will appropriately select and supervise vendors. 6. Provision to Third Parties Located Overseas If the Company provides User Information to third parties located outside Japan (e.g., cloud providers), the Company will notify or publicly announce required matters and obtain consent where necessary in accordance with applicable law. 7. Security Measures The Company takes organizational, human, physical, and technical security measures to prevent leakage, loss, or damage of Personal Data (access control, authority management, encryption, log monitoring, vendor management, training, etc.). 8. Response to Data Breaches If a data breach occurs or is suspected, the Company will investigate, prevent recurrence, and make necessary reports/notifications in accordance with applicable laws and guidelines. 9. Cookies / External Transmission (1) The Company may use cookies, SDKs, etc. for providing the Service, analytics, advertising delivery, security, etc. (2) Users may disable cookies through browser settings, but some functions may not work properly. (3) If the Company uses mechanisms that transmit information from User devices to third-party servers (external transmission), the Company will publicly explain in an easy-to-understand manner the destination, transmitted information, purposes, and available user controls (consent, opt-out, etc.). (4) List of external transmissions a. Cloudflare Data transmitted: IP address, cookies, access timestamps, browsing information, etc. Purpose of use: content delivery, security protection, and prevention of unauthorized access b. Vercel Data transmitted: IP address, access logs, device and browser information, etc. Purpose of use: delivery of the Service, hosting, and incident analysis c. Clerk Data transmitted: identifiers necessary for authentication, login-related information, etc. Purpose of use: identity authentication and account management d. Stripe Data transmitted: payment identifiers, billing information, transaction-related information, etc. Purpose of use: payment processing and fraud prevention 10. Requests Regarding Retained Personal Data The Company responds to requests under the APPI for disclosure, correction, addition, deletion, suspension of use, suspension of third-party provision, disclosure of records of third-party provision, and similar requests relating to Retained Personal Data (collectively, "Requests"). (1) Contact: inquiry form within the Service (2) Identity verification method: presentation or submission of identity verification documents by the method prescribed by the Company (3) Fee: free of charge (4) Response method: email, written document, or other method prescribed by the Company 11. Joint Use The Company does not currently engage in joint use. 12. Retention Period The Company retains User Information only for the period necessary for the purposes or as required by law, and thereafter deletes or anonymizes it appropriately (depending on implementation/operations). 13. Amendments The Company may amend this Policy in accordance with law. For material amendments, the Company will notify Users within the Service. 14. Language The governing text of this Policy is the Japanese version. Any translations are provided for convenience only; in case of discrepancy, the Japanese version prevails. Supplementary Provision This Policy applies from 2026-03-26.