Privacy policy

Celebraez Privacy Policy

 

We, Celebraez Inc. (“we,” “us,” or “our”), will collect information related to individuals (“Personal Data”) in providing our products, apps, services and websites (collectively, the “Services”). We will act in compliance with the laws and regulations applicable in countries and regions where we are conducting business (such laws and regulations are hereinafter collectively referred to as the “Applicable Laws”), and will make efforts to properly protect Personal Data based on this Privacy Policy (this “Policy”).

 

1.  Applicable scope of this Policy

This Policy applies to all Personal Data that we collect regardless of the country or region.

 

1.1 Target scope

This Policy applies to all Personal Data that we collect.

We may apply additional provisions to the individual privacy policies, terms of use, or this Policy (collectively, “Individual Policies”) in respect of specific services. If there is any inconsistency between the Individual Policies and this Policy, the Individual Policies shall prevail.

In connection with the application of this Policy, we manage the processing of Personal Data.

 

1.2  Applicable policies

We will process Personal Data to the extent permitted by the Applicable Laws according to this Policy.

While we may provide various translations of this Policy as a reference, to the extent permitted by Applicable Laws, the Japanese version applies to users using our Services in Japan, and the English version applies to users using our Services in other countries or regions.

 

2.  Personal Data to be collected

We will collect Personal Data such as the following in lawful and fair manner. 

  • Personal Data provided by you
  • Personal Data relating to the use of our Services
  • In addition to the above, Personal Data lawfully collected by us

If you do not provide certain types of information which need to be registered for using our Services, you may not be able to use all or a part of our Services.

We may collect and use information by leveraging technologies such as association learning and differential privacy in order to better protect your privacy.

 

2.1  Examples of Personal Data to be provided by you

We may ask you to provide us with your Personal Data by operating your device and entering information.
The foregoing Personal Data includes, for example:

 

  • Profile information of customers or your friends, such as name, phone number, date of birth, gender, email address, postal address, image, and life events. We offer a feature that allows users to automatically input friends’ profile information using the address book on your device, SNS, or Google Calendar. We will only access such sources (e.g., the address book) to the extent necessary for auto-filling friend profile information if and when the user chooses to use this feature.
  • Account information, such as user ID, password, and registration date.
  • Information used to recommend gifts, cafes, restaurants, and similar services, such as life events, keywords, and chat history. We also offer a feature that extracts keywords and other data from social networking services (SNS) to automatically input relevant information. We will only access SNS data to the extent necessary for such input if and when the user opts to use this feature.

 

2.2  Examples of Personal Data related to your use of our Services

We will collect information related to your activities when using our Services and information related to your devices and how you are using those devices.

The foregoing Personal Data includes, for example:

  • Information related to the customer’s device, browser, or application, such as advertising identifiers (used to identify devices or browsers), Cookie IDs, device type, operating system, language and time zone settings, browser type, and app version, as well as network-related information such as the name of the telecommunications carrier and IP address.
  • Information regarding the use of our services.
  • Location information. In order to make suggestions based on the customer’s location, we may collect location data from the customer’s device. However, if the customer has disabled location sharing in the device settings, such data will not be transmitted. Please note that even if location sharing is disabled, we may estimate the customer’s approximate location based on other information such as IP address.
  • Service usage data, such as login history, activity logs, gift purchase and payment history, and restaurant or other reservation history.

 

2.3  Examples of Personal Data collected Legitimately Collected by us.

We may collect Personal Data to the extent permitted under Applicable Laws.

The following are some examples of Personal Data collected from third parties.

  • Personal Data collected from group companies (referring to our subsidiaries or affiliates, wherein the definition thereof includes domestic and overseas subsidiaries and affiliates according to the “Regulation on Terminology, Forms, and Preparation Methods of Financial Statements” of Japan), information providers, advertisers, ad distributors and other partners (together with our group companies, hereinafter collectively referred to as the “Partners”)
  • We may collect your Personal Data from Partners according to their terms or policies.
  • Personal Data that is directly collected in third-party services
  • We may collect login records from plug-ins of Partner websites and apps equipped with a plug-in feature, and URL information of websites equipped with a plug-in feature that you visited while being logged onto our Services on your browser by associating such login records and URL information with your account. Such collected data will be used for understanding how you are using our Services, as well as for the maintenance and improvement, security, and prevention of unauthorized or fraudulent use or abuse, of such Services.

 

2.4  Sensitive Personal Information regarding third parties

We are not permitted to collect “sensitive personal information” regarding third parties. Sensitive personal information means information requiring special care, such as: race, creed, or social status; medical history, physical or mental disability, health records; criminal history or victim information; government-issued ID numbers (passport, driver’s license); sexual orientation or sex life; and labor union membership or political/religious beliefs.

By using our services, you agree not to provide us with any sensitive personal information of third parties.

 

  1. Purpose of use of Personal Data

We will use the collected Personal Data (including Personal Data collected from when you use our Services and all Personal Data collected from third parties) for the following purposes:

  • Provision and maintenance of our Services;
  • Development and improvement of our Services;
  • Security and prevention of unauthorized use; and/or
  • Provision of Services optimized for you.

When we are to collect Personal Data, we will notify or publicly announce the purpose of use to users to the extent required under Applicable Laws (including the notification and public announcement of the purpose of use based on this Policy).

We will not process the Personal Data we obtain beyond the scope of the purposes of use, except to the extent that consent has been obtained from you or as permitted by Applicable Laws. In addition, we will take appropriate measures to ensure that Personal Data is not used for any other purpose.

Notwithstanding the above, upon receiving Personal Data from a third party, if the purpose of use of such Personal Data is separately prescribed, we will use the Personal Data according to such provision to the extent permitted by Applicable Laws.

 

3.1  Examples of Provision and maintenance of our Services

We will use information required for providing our Services, answering your inquiries, and sending announcements regarding our Services and those of our Partners.

For example, in the following cases, we will use Personal Data for the provision and maintenance of our Services.

  • To recommend gifts, cafes, and restaurants to customers
  • To verify your identity, through comparison with your registered information, when succeeding the account upon logging in or changing your device, when using certain Services which require identity verification, or when receiving inquiries from users;
  • To process invoices or settle payments when a user purchases a product or uses a paid service;
  • To examine your status of use of our Services in order to reply to your inquiry to our customer support;
  • To deliver the products that you have purchased to your designated address;
  • To notify you of important changes to our Services such as the revision of terms, planned discontinuation of services, or change of features.
  • To automatically display your information, which is required for purchasing products, on the input screen; and/or
  • To generate appropriate sentences and images according to the contents that have been entered such as for purposes of supporting your use of our Services.

 

3.2  Examples of Development and improvement of our Services

We will use Personal Data for the development and improvement of our Services for providing better services, products and contents to users toward the future.
For example, in the following cases, we will use Personal Data for the development and improvement of our Services:

  • To develop and improve our Services by surveying and analyzing your attribute information, number of users and number of viewers of our Services;
  • To improve our Services by creating statistics and models related to the use of our Services;
  • To improve the screen design by understanding the frequency that each tab in the app is being used;
  • To conduct surveys related to our services that we are currently providing, or may provide in the future; or
  • To use questions entered in the Service that generates text according to the customers’ questions and improve the model for such service.

 

3.3  Examples of Security and prevention of and measures against unauthorized use

We will use Personal Data and take security measures and measures against unauthorized use to maintain an environment where our Services can be used at all times, and users can use our Services with a sense of security on a daily basis.

For example, in the following cases, we will use Personal Data for the security and prevention of and measures against unauthorized use:

  • To confirm whether there is any breach of terms of use, any illegal act, unauthorized access or any other unauthorized use;
  • To monitor and confirm the details of reports and to develop tools for preventing unauthorized use by ways such as analyzing the details of such reports, etc.; or
  • To verify facts or contact you in the event of any unauthorized use or the possibility of any unauthorized use.

 

3.4  Examples of Provisions of our Services optimized for you

We will utilize Personal Data for providing recommended contents to each user.
For example, in the following cases, we will use Personal Data for providing optimized content to users:

 

  • To provide our Partners with statistical information prepared by ways such as associating or combining information obtained from our Partners, such as your identifier (internal identifier, ad identifier, etc.), hashed telephone number and email address, attribute information, and your action history, including your purchase and browsing history, with your Personal Data that we possess, such as your identifier (internal identifier, ad identifier, etc.), hashed telephone number and email addresses, attribute information and your status of use of our Services.

 

4.  Provision of Personal Data

We will not provide, disclose or share Personal Data to or with third parties unless we have obtained your consent or such provision, disclosure or sharing of Personal Data is permitted by Applicable Laws.

However, in the following cases indicated in 4.1 to 4.4, we may provide Personal Data to third parties.

In order to provide Service in a smooth manner, subcontractors and group companies, etc. may be added later to the recipients of Personal Data that we provide. Although all of the countries and regions that we may provide Personal Data to in the future cannot be specified, we will notify you via this Policy upon the future addition of any country or region in which the third-party recipient of Personal Data is located.

 

4.1  Subcontracting

We may subcontract certain services required for providing our Services (e.g., selection of gifts, selection of restaurants and cafes, building, operation and development of infrastructure, settlement, shipping, customer support, etc.) to a third party. In connection with this, we entrust all or a part of the Personal Data to the subcontractor.
The subcontractor will access the Personal Data only to the minimum extent required for performing the subcontracted services on our behalf, and will not use the Personal Data beyond the scope of the subcontracted services.
We will: (i) comply with Applicable Laws and investigate the qualification as a subcontractor; (ii) take measures to have the subcontractor comply with the policies related to the protection of personal information by ways such as prescribing matters related to confidentiality in the contract with the subcontractor; and (iii) thereby establish a system for properly managing Personal Data.

 

4.2  Sharing of Personal Data among group companies

We may share, among our group companies, the Personal Data indicated in “2. Personal Data to be collected” in the future.

For example, in order to alleviate the trouble of creating an account in the services provided by our group companies, our group companies may refer to the information registered with our Services.
As the purpose of sharing Personal Data is the same as the purpose of use described in “3. Purpose of use of Personal Data”, for the purpose of use of the party with which the Personal Data was shared, “We” shall be replaced with “our group company”, and “Services” shall be replaced with “services provided by our group company”.

We are the administrator in sharing Personal Data under the laws of Japan.

We will comply with the personal information protection systems of the countries in which the parties with which the Personal Data was shared are located, such as by complying with applicable laws, examining the qualifications as the party with which the Personal Data was shared, and setting out matters concerning confidentiality in contracts, as well as create a system where personal data will be properly managed.

We will notify you via this Policy if any new group companies that will share Personal Data are established,

 

4.3  Succession of business

If there is any transaction between companies pertaining to our business to which this Policy is applicable, such as acquisition, merger or change of business entity, Personal Data may also be transferred to the successor of the business to the extent permitted by Applicable Laws.

 

4.4  Compliance and cooperation with public agencies

If we receive a request pursuant to legal proceedings such as a warrant, we may disclose Personal Data to third parties including law enforcement agencies such as the police, or the court, pursuant to Applicable Laws.

 

5.  Safety control of Personal Data

We make efforts to manage the collected Personal Data properly and take strict organizational, personal, physical and technical security measures. In order to continue to improve our protection of Personal Data, we will review and bolster our internal rules and regulations in accordance with changes in Applicable Laws and social norms.

 

5.1  Security measures

We are taking strict organizational, personal, physical and technical security measures in managing the collected Personal Data for respecting and protecting your privacy and confidentiality of your Personal Data, and preventing unauthorized access to your Personal Data. These measures include safety control measures based on industry standards for preventing unauthorized access to Personal Data, and disclosure, unauthorized use, falsification or destruction of Personal Data.
For example, we are taking the following measures.

  • Strict access control based on a need-to-know basis
  • External authentication for objectively evaluating our security measures
  • R&D of new security technologies

Furthermore, we will never provide any means for fraudulently accessing Personal Data to a third party.
However, because no method of electronic transmission or method of data storage is perfect or impenetrable, we cannot guarantee that your Personal Data will be absolutely safe from intrusion during transmission or while stored in our systems.
To help protect your privacy and confidentiality of your Personal Data, we also need your help. Please do not share your password with others, or use the same passwords you use for other services. Also, please notify us in the event you suspect any unauthorized use of your account or any other breach of security via our 
Contact Form.

 

5.2. Storage location of Personal Data

We are storing the Personal Data of Japanese users in our data centers located in Japan.

 

5.3  Storage period of Personal Data

We collect and retain Personal Data to provide our Services according to your request, fulfill any of the applicable purposes of use described in this Policy, or to comply with Applicable Laws.
Unless you request the deletion of your account, in principle, we will retain most of your Personal Data. Once your account is deleted, we will process your Personal Data properly according to Applicable Laws and our internal rules after retaining such Personal Data for a given period of time for the following purposes:

  • to reply to inquiries;
  • to resolve disputes or collect fees;
  • to detect and deter fraudulent use of, or abuse of, our Services; or
  • to comply with Applicable Laws.

Otherwise, we prescribe the storage period of Personal Data according to the following standards.

  • Information that we collected for a specific purpose will be promptly deleted after the lapse of a reasonable period once the purpose of such information is fulfilled.
  • If you have expressly declared your intent to store your Personal Data, we may respect your intent and store your Personal Data for a long period.
  • If a storage period is prescribed under Applicable Laws or the like, we will store Personal Data according to such storage period.

We may continue to retain Personal Data in a format in which individuals cannot be identified after the lapse of the storage period prescribed pursuant to Applicable Laws and our internal rules.

 

6.  Your choices regarding Personal Data

You have rights regarding your Personal Data processed by us, such as the right to access your Personal Data and the right to request the correction of your Personal Data, to the extent permitted by Applicable Laws.

We are exerting efforts to provide, in our Services, features which enable you to personally edit your profile, and set and manage the collection, use of your Personal Data.

To the extent permitted by Applicable Laws, regarding your Personal Data that we process, you have the right to access, the right to rectification, the right to erasure, the right to restriction of processing, the right to withdrawal of your consent, the right to data portability, the right to confirm if we process any Personal Data of yours, and the right to request a review of any automated decisions that may be made as a result of the processing.
In addition, to the extent permitted by Applicable Laws, you also have the right to object to the processing of your Personal Data that we process in certain cases.
We are exerting efforts to provide, in our Services, features which enable you to personally manage your Personal Data, edit your profile, set the collection, use of information, and deletion of your account. Please periodically confirm that no old information or inaccurate information is remaining, and properly update your Personal Data.

For instance, we provide the following features:

  • Setting and change of phone number and email address, deletion of email address
  • Whether to add friends automatically using the address book in your device
  • Function which allows users to personally view their service use history

We also provide the following features for certain Service:

  • Whether to allow the use of information for improving our services
  • Deletion of location information

 

7.  Use of third-party modules and Cookies

We may use tags and modules containing cookies and third-party software development kit (SDK) for fulfilling the purposes described in this Policy.

 

7.1  Third-party modules

We may install modules of a third-party SDK in our Services, for example, for the following purposes:

  • to analyze the status of use of our Services

With regard to your Personal Data that is processed by a third-party through a module provided by such third party, the privacy policy of such third party will apply.

 

7.2  Cookie and other analytical tools

A cookie is a small text file that is stored on your computer when visiting a website. This text file stores information that can be read by the website operator when visiting the website again at a later date.
For example, we may use cookies and similar web tracking technologies (web beacon, pixel etc.) for the following purposes:

  • to store your login state, authenticate visitors, maintain sessions and take security measures;
  • to store language settings and latest date and time of access, and improve user-friendliness;
  • to provide better services by comprehending the number of accesses and the mode of use;

You can control whether or not to accept cookies based on browser settings or by using other tools. If, however, you deactivate cookies or limit the ability to set cookies, you may not be able to obtain the full benefit of the website or access all of its functions, which may limit your overall user experience.

 

7.3  Information related to use of Google Analytics

In order to improve our Services, we use Google Analytics to measure our Services such as our website. Google may set cookies or read existing cookies to collect data. At such time, information such as the URL of the page that you accessed and IP address will be automatically sent to Google. We may use such information to comprehend the status of use of our Services or use such information in our Services. For the processing of data by Google in Google Analytics, please read the terms of use of Google Analytics and Google’s privacy policy.

 

8.  Other important information

We may modify this Policy. The latest version of the Policy will always be posted on this site, and we encourage you to review the contents of the latest version of the Policy carefully.
When we make any material changes to this Policy, we will notify you through reasonable means.

 

8.1  Privacy of children

The Services are intended for a general audience. If a minor is to use our Services and provides Personal Data, the minor must do so with the consent of his/her guardian. You represent and warrant that you have the right capacity and legal capacity required for using our Services. If you are a minor, you represent and warrant that you are using our Services with the consent of your guardian. We have voluntarily imposed age restrictions on certain Services in cases where we are unable to confirm that you are of a certain age.

We understand the special necessity to protect the Personal Data collected from minors in the United States., Europe, Thailand or Indonesia (under the age of 13 in the United States., under the age of 16 in Europe, under the age of 11 in Thailand, and under the age of 18 in Indonesia) using our Services, and we do not knowingly collect any Personal Data from minors.

If, however, you believe that we have collected Personal Data from minors of the aforementioned countries or regions, then please let us know via the Contact Form or by writing to the address indicated below. If we learn that we have inadvertently collected Personal Data from minors of the aforementioned countries or regions, we will deactivate the relevant account(s) and will take reasonable measures to promptly delete such Personal Data from our records.

 

8.2  Inquiries

Please follow the procedures below when making a request to be notified of use, disclosure, correction, addition, deletion, suspension of use, elimination, or suspension of provision to a third party (hereinafter referred to as "disclosure, etc.") of your Personal Information.

When requesting notification regarding and disclosure of your Personal Information, please note that an administrative fee of 1,000 yen (excluding consumption tax and local consumption tax) will be charged for each request. In addition, it takes approximately 10 business days to disclose to you your Personal Information in our possession.

 

8.2.1  Reception desk

Please send any request to the address below by registered mail with proof of delivery, enclosing the required documents listed in 8.2.2 below.

Please write "Personal Information Request Form enclosed" on the envelope.

 

8.2.2  Reception desk

Celebraez Inc. Personal Information Contact

Level 6 Aoyama Marutake Building 3-1-36, Minato-ku, Tokyo, 107-0062, Japan

 

8.2.3  Necessary documents

All of the following documents (only 1) and 2) if the request is made directly by you)

 

1) A detailed written statement regarding the background of request

In the case of a request for notification or disclosure regarding use of Personal Information

  • Please provide the name, address, and contact telephone number of the person making the request (either the person in question or a representative), the nature of the request (whether a request for notification of purpose of use or a request for disclosure), the reason for the request, the scope of the Personal Information to be disclosed (name, address, date of birth, telephone number, e-mail address, and other (please specify the items)) if the request is made by a representative, and the name, address, and contact telephone number of the person making the request if the request is made by a representative. If the request is made by a representative, the name, address, and contact telephone number of the person in question.

In case of correction, addition, deletion, etc.

  • The name, address, and contact telephone number of the person making the request (either the person himself/herself or a proxy), the type of request (correction, addition, deletion, suspension of use, elimination, or suspension of provision to a third party), the reason for the request, specific details in the case of correction, addition, or deletion (1) information before and after correction for correction, 2) information to be added for addition, and 3) information to be deleted for deletion). (2) in the case of addition, the information to be added; (3) in the case of deletion, the information to be deleted), and if the request is made by a representative, the name, address, and contact telephone number of the person in question.

2) Identification documents

  • An original certificate of residence (not photocopy) with the same name and address as the applicant's name and address
  • A copy of a driver's license, passport, health insurance card, pension book, or basic resident register card that has the same name and address as the applicant's name and address on it

* Please fill out and send the information of your permanent address.

3) Documents confirming proxy

In the case of a request from a person with parental authority or a guardian of an adult

  • One copy of the family register, an extract from the family register, a certificate from the family court, a certificate of registered matters, or any other document that certifies the applicant's eligibility

* Must be made within 30 days prior to the date of request.

* Please fill out and send the information of your permanent address.

  • Identification documents of the person with parental authority or legal guardian (same as 2 above)

In the case of a representative authorized by the principal

  • Power of Attorney (signed and sealed by the principal) 1 copy
  • One copy of a certificate of seal impression of the same impression of the person's seal stamped on the power of attorney
  • Documents to identify the agent (same as 2 above)

 

* If information is lacking or unclear in the submitted documents, we will contact you to remedy any issue. If you do not present the documents within the designated period, we will return the documents to you and a new request will need to be made should you desire to pursue further.        

        

Person responsible for the handling of personal data
Chieh Jessie Chu

 

8.3  Changes to this Policy

We may modify this Policy from time to time, and the latest version of the privacy policy will always be posted on this site. When we make any material changes to this Policy, we will notify you on our Services, or by other reasonable means. We encourage you to review the contents of the latest version of the privacy policy carefully.

If you do not agree to any of the changes and you no longer wish to use our Services, you may choose to close your account. Continuing to use our Services after a notice of changes has been notified to you or published on our Services constitutes your acceptance of the changes and consent to the modified version of this Policy. We will seek your consent when required under Applicable Laws.

 

Celebraez Inc.

Representative Director Chieh Jessie Chu

Formulated on August 1st, 2025