Privacypolicy

1. Who we are

• Name: Enovadora Technology (sole proprietorship)
• Representative: Eduardo Tanita
• Address: provided without delay on request (see the contact below).
• Contact: [email protected]

2. Information we collect

We only collect the information below by fair means, never through deception or other improper means.

• Name, email, phone number, company and message sent through our contact and order forms.
• Messages and account names sent through the website chat, Instagram Direct and Facebook Messenger (the ID and name the social network provides).
• From customers who use our services: login name and email, contract and payment details, uploaded photos and documents (such as receipts) and the posts we create.
• From people who book at a shop that uses our booking system: name, phone number, email and booking details (handled on behalf of the shop).
• From devices where you turn on notifications: the delivery address created by your browser.
• To prevent unauthorized access: information based on your IP address (stored as a hash), login date and time, device type (operating system and browser) and cookies that keep you logged in.

We do not collect sensitive information (such as race, creed or medical history) without your consent, except where the law allows. Please do not include this kind of information in forms or chats.

3. How we use it

• To reply to inquiries and messages, prepare quotes and handle contracts and payments.
• To provide and support the services you sign up for: websites, creating and publishing social media posts, the booking system, the bookkeeping app, AI customer replies and more.
• To take bookings and send confirmation emails and reminders the day before (for shops that use the booking system).
• To improve our services (for example, improving our writing based on the edits customers make).
• To send important notices about our services (changes, maintenance, pricing).
• To run our services safely: preventing fraud and account takeover, and alerting you to logins from new devices.

We do not use your information for any other purpose. If we ever change a purpose, it will only be within what is reasonably related to the original purpose, and we will announce it on this page. We never sell or give personal information to third parties for advertising.

4. Use of artificial intelligence (AI)

We use the API of Anthropic, PBC (USA) to draft replies to messages, write post texts and read receipts, and the API of Features & Labels, Inc. (fal.ai, USA) to create images and videos. Both are used under business terms in which the content we send is not used to train their AI. Replies in the chat and in Direct messages may be written by AI, and a member of our team oversees them. Price negotiations, complaints and questions the AI cannot answer are handled directly by a person. The AI never makes decisions on its own that have legal or similarly significant effects on you.

5. Social media connections (Instagram, Facebook, LinkedIn)

We use the official APIs of the social networks (Meta Platforms, Inc. and LinkedIn Corporation) only to publish approved posts on pages managed by us and by our customers, and to reply to messages sent to our accounts. We never receive your social media password. The access token needed for the connection is stored encrypted and used for nothing else. You can remove the connection at any time in the social network's settings.

6. Sharing with third parties and outsourcing

We do not give personal data to third parties without your consent, except:

• when required by law;
• when necessary to protect someone's life, body or property and it is difficult to get your consent;
• when we need to cooperate with public authorities carrying out duties set by law;
• when we outsource part of the handling of data within what is needed for the purposes above.

To run our services, we outsource part of the handling of personal data to the companies below. We agree on data security rules with each of them and supervise them appropriately.

• Server, data storage and email: GMO Internet Group, Inc. (ConoHa, Japan)
• AI writing, reply drafts and receipt reading: Anthropic, PBC (USA)
• AI images and videos: Features & Labels, Inc. (fal.ai, USA)
• Connection security, blocking unauthorized access and speed (DNS, traffic relay, login protection): Cloudflare, Inc. (USA)
• Sending and receiving social media messages and publishing posts: Meta Platforms, Inc. (USA) and LinkedIn Corporation (USA)
• Delivering notifications to your phone or browser: your browser's provider (Google LLC, Apple Inc., Mozilla Corporation or Microsoft Corporation, all in the USA)

We do not share personal data jointly with other companies.

7. Providing data to companies outside Japan

Some of the companies above are in the United States (Article 28 of the Act on the Protection of Personal Information). We only outsource, and only as far as needed, to companies whose data protection systems meet the standards set by the Personal Information Protection Commission.

• Country: United States of America.
• Its laws: the United States has no comprehensive federal law equivalent to Japan's; it has sector-specific federal laws and state laws (such as the California Consumer Privacy Act). For details, see the survey of foreign data protection laws published by the Personal Information Protection Commission.
• Measures taken by the companies: under each company's terms and data processing agreements, there are purpose limits, encryption, access controls, supervision of subcontractors and breach notification.
• Our checks: we review these measures when we start using each service and whenever its terms change. Data is stored mainly on servers in Japan.

On request, we will tell you without delay about these measures and how we check them.

8. Security measures

• Basic policy: this privacy policy guides how we handle personal information.
• Rules: we set how data is handled, and who is responsible, at each stage (collection, use, storage, sharing and deletion).
• Organization: a person is responsible for personal information, and only those who need it have access. We have a procedure to report and handle any sign of a legal violation or data leak.
• People: everyone who handles personal information is bound by confidentiality.
• Physical security: data is stored on servers of a company in Japan, and work devices are protected by passwords and screen lock.
• Technical security: all communication is encrypted (HTTPS) and passwords are stored in irreversible form (hashed). Admin logins use two-step verification, and accounts are locked for a while after repeated failed logins. Social media tokens are stored encrypted. We back up every day and monitor for unauthorized access, with alerts.
• External environment: when we outsource to companies in another country, we check that country's laws (section 7).

9. How long we keep data

We keep personal information only as long as needed and try to delete what is no longer necessary without delay. Inquiries and messages: up to 3 years after we finish handling them. Contract information: up to 7 years after the contract ends (the period required by tax laws). Bookings received by shops: as set in our contract with each shop. Data the law requires us to keep, such as bookkeeping records, is kept for the legal period.

10. Requests for disclosure, correction, suspension and deletion

If you or your representative ask us for the purpose of use, disclosure of your data (including records of sharing with third parties), correction, addition or deletion of data, suspension of use, erasure or an end to sharing with third parties, we will respond without delay in line with the law. Disclosure can be provided as a digital file, as you prefer.

• How to ask: email the contact below, stating which data and what kind of request.
• Identity check: for example, a request sent from your registered email. If we cannot confirm your identity, we may ask for a copy of an ID document (deleted right after the check).
• Requests by a representative: we need a letter of authorization and copies of the ID of both you and the representative. We also accept requests from the legal guardians of minors.
• Fees: none.
• If we cannot comply: where the law does not allow it, we will explain why.

For booking data made at a shop that uses our system, please contact the shop first. We will also help the shop handle your request.

11. Cookies and data sent to outside services

This site uses cookies to keep you logged in and browser storage (localStorage) to continue chat conversations. We do not use advertising or analytics cookies. We also do not give cookie information to third parties in a way that would let them identify you.

To display the pages, your device sends information to the outside services below (notice under Article 27-12 of Japan's Telecommunications Business Act):

• Google Fonts (Google LLC). Data sent: IP address, browser type and information about the page viewed. Purpose: displaying fonts.
• Cloudflare (Cloudflare, Inc.). Data sent: IP address, browser type, URL of the page viewed and date and time of access. Purpose: securing the connection, blocking unauthorized access and making the site faster.

You can turn off cookies in your browser settings, but logging in and some other features will stop working.

12. If a data breach happens

If personal data is leaked, lost or damaged in a way that may harm someone's rights or interests, we will report it to the Personal Information Protection Commission and notify the people affected as required by law, investigate the cause and take steps to prevent it from happening again.

13. Contact and complaints

Questions, complaints and requests about personal information are handled at the contact below. We respond to complaints appropriately and promptly.

Enovadora Technology · Person responsible for personal information: Eduardo Tanita
Email: [email protected]

We are not a member of any accredited personal information protection organization.

14. Changes

We may update this policy when laws or our services change. The new version takes effect when it is published on this page. Important changes will be announced here.

Established September 27, 2026 · last updated October 17, 2026