Privacy Policy

This English text is a reference translation. Where it differs from the Japanese original, the Japanese version prevails.

Yuki Higashi (東 裕樹; the “Operator”) handles personal information in connection with “O®b. (Orb)” (the “Service”) as follows.

1. Information collected and purposes of use

1. Payment information: Payments are processed by Link, a Stripe service. Credit card details are sent directly from the checkout page to Stripe, Inc. and its affiliates, which manage them. They never pass through the servers of this site (O®b.), and the Operator does not store or manage card details. From Stripe, the Operator receives the email address used for the purchase, the name (such as the cardholder name entered at checkout), the purchase details and the payment ID, and uses them to confirm purchases; to send emails containing license keys, links to open a work again and notices of export-period expiry; and to handle refunds and inquiries.
2. Settings of single-purchase works: To verify the purchased work, the Operator stores the work’s settings at the time of purchase (model, values, etc.), along with a small image of the work included in purchase emails.
3. Device information: To count the number of devices used with a subscription, the Operator stores a value derived (via SHA-256) from a random number generated for each browser, the device name (e.g., “Mac Chrome”) and the date and time of last use. To ensure that only one device of each type is in use at a time, your browser sends the device type (computer, smartphone or tablet) and its in-use status about once a minute while the subscription screen is displayed, and the Operator stores the dates and times when two devices of the same type were in use simultaneously (deleted after 90 days).
4. Access information: To prevent unauthorized access, a value derived from the IP address and an access count are stored for up to 1 day. The server (Xserver) also keeps standard access logs.
5. Information stored in your browser: Works, settings and proof of license are stored in your browser (localStorage). While you use the Service for free, the content of your works and your operations is not sent to the server.

2. Provision to third parties and outsourcing

Except in cases based on laws and regulations, the Operator does not provide personal information to third parties without the individual’s consent. Processing is outsourced to the following companies.

• Stripe (payment processing and buyer support; provided by Stripe, Inc. (United States) and its affiliates, so information may be processed outside Japan)
• Xserver Inc. (server and mail)
• Google (font delivery; when you open a page, your browser accesses Google’s servers to load the fonts)

Personal information is provided to Stripe as a third party located in the United States. Information on the U.S. system for protecting personal information is available in the Personal Information Protection Commission’s survey of personal information protection systems in foreign countries (https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku). Stripe handles personal information in accordance with its own privacy policy (https://stripe.com/jp/privacy). By proceeding to purchase (pressing “Continue to purchase”), you consent to this.

3. Retention period

• Settings and small images of single-purchase works: Deleted 30 days after the export period ends (the values used for verification and the purchase records are retained).
• Records of sent emails and payment notifications: 90 days
• Access count records: 1 day
• Records of purchases and licenses: As long as necessary for accounting and for responding to inquiries

4. Security measures

To prevent personal information from being leaked, lost or damaged, the Operator takes the following measures.

• All communication is encrypted (HTTPS).
• License keys and links to open a work again are stored only as irreversible values (hashes); the original values are never stored.
• Only the Operator can access the server and the database, using key-based authentication.
• The Operator selects contractors after confirming their security management practices.

5. Requests for disclosure, correction or deletion; complaints and inquiries

If you wish to request the disclosure, correction, deletion, etc. of your personal information, or have complaints or inquiries about how personal information is handled, please contact support@higashiyuki.com. The Operator will respond after verifying your identity.

6. Business operator

Yuki Higashi (東 裕樹). The address will be disclosed without delay upon request. Contact: support@higashiyuki.com

7. Revisions

If this policy is revised, the changes will be announced on this page.