Privacy Policy
Last updated: January 1, 2026
1. Introduction
IT Bridge Japan Co., Ltd. ("Company", "we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the IT Bridge Japan platform ("Service"). This policy is designed to comply with the Act on Protection of Personal Information (個人情報の保護に関する法律, "APPI") and other applicable data protection laws.
2. Information We Collect
We collect information you provide directly, including: account registration data (name, email, company name, role), company profile information, project requirements and RFP details, communication with vendors or our support team, and payment information. We also collect information automatically, including: device and browser information, IP address and location data, usage patterns and feature interactions, AI tool inputs and outputs for service improvement, and cookies and similar tracking technologies.
3. How We Use Your Information
We use collected information to: provide and maintain the Service, process AI analyses and generate recommendations, match buyers with appropriate vendors, process payments and manage subscriptions, communicate with you about your account and the Service, improve our AI models and platform features, ensure legal compliance and prevent fraud, send relevant marketing communications (with your consent), and generate anonymized analytics and market insights.
4. Information Sharing & Disclosure
We may share your information with: certified vendors (only information you choose to include in RFPs or inquiries), payment processors (Stripe Japan) for transaction processing, cloud infrastructure providers for hosting and data storage, AI service providers (Anthropic) for processing AI queries, legal authorities when required by Japanese law. We do not sell your personal information to third parties. All service providers are bound by data processing agreements that comply with APPI requirements.
5. Cookies & Tracking Technologies
We use cookies and similar technologies to maintain your session and login status, remember your language preferences, analyze site usage and performance, and provide relevant content. You can control cookie settings through your browser preferences. Essential cookies required for the Service to function cannot be disabled.
6. Data Security
We implement industry-standard security measures to protect your personal information, including: encryption of data in transit (TLS 1.3) and at rest (AES-256), regular security audits and penetration testing, access controls and employee training, incident response procedures. While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.
7. Cross-Border Data Transfer
As a platform connecting Japanese and Indian companies, some of your data may be transferred to or accessed from India. In accordance with APPI Article 28, we ensure that: recipients in India maintain data protection standards equivalent to those required by APPI, appropriate contractual safeguards are in place, data transfers are limited to what is necessary for the Service, and you are informed about the data protection framework in the recipient country. Indian IT companies receiving your RFP data are contractually obligated to handle your information in compliance with APPI standards.
8. Your Rights Under APPI
Under the Act on Protection of Personal Information, you have the right to: request disclosure of your personal information held by us, request correction of inaccurate personal information, request deletion of your personal information, request cessation of use of your personal information, request cessation of provision of your personal information to third parties, and receive your data in a portable format. To exercise these rights, please contact us using the information provided below. We will respond to your request within a reasonable period, not exceeding two weeks.
9. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain information for up to 5 years as required by Japanese commercial law and tax regulations. AI query logs are anonymized after 12 months. Payment records are retained for 7 years in accordance with Japanese tax law.
10. Children's Privacy
The Service is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on the Service and updating the "Last updated" date. For significant changes, we will provide additional notice via email or a prominent notification on the platform. Your continued use of the Service after changes constitute acceptance of the updated policy.
12. Contact Information
For questions about this Privacy Policy or to exercise your rights, please contact our Data Protection Officer: IT Bridge Japan Co., Ltd., Shibuya Cross Tower 28F, 2-15-1 Shibuya, Shibuya-ku, Tokyo 150-0002, Japan. Email: privacy@itbridge.jp. Phone: +81-3-XXXX-XXXX. For complaints regarding our handling of personal information, you may also contact the Personal Information Protection Commission (個人情報保護委員会).