Privacy Policy
This English text is a reference translation provided for convenience. In the event of any discrepancy between this translation and the Japanese original, the Japanese version shall prevail.
inote Inc. (the "Company") handles the personal information it collects through "MusicStory" (musicstory.art, the "Service") appropriately and in compliance with the Act on the Protection of Personal Information of Japan and related laws and regulations.
1. Information We Collect
Information provided directly by Users
| Information | When collected |
|---|---|
| Name | At registration |
| Email address | At registration |
| Password (stored as a hash) | At registration |
| Google account ID, name, and email address | When signing in with Google |
| Credit card information | At premium registration (not retained by the Company; managed by Stripe) |
Information collected automatically through use of the Service
| Information | Purpose |
|---|---|
| IP address | Security and prevention of misuse |
| Browser type and version | Service improvement |
| Pages accessed and access times | Service improvement and analysis |
| Device information | Display optimization |
| Information collected via cookies and similar technologies | Maintaining authentication state and service improvement |
Content created by Users
- The contents of Notes (whether public or private)
- Content saved as favorites
2. Purposes of Use
We use the information we collect for the following purposes.
- Providing, operating, and improving the Service
- User authentication and account management
- Billing and payment processing (in connection with Stripe)
- Responding to customer support requests
- Sending the daily morning story email and service announcements
- Detecting and addressing violations of the Terms of Service and misuse
- Producing statistics (in a form that does not identify individuals)
- Developing new features and services
3. Disclosure to Third Parties
The Company does not disclose your personal information to third parties except in the following cases.
- Where you have given your consent
- Where required by law (a lawful request from a court, the police, or similar authority)
- Where necessary to protect a person's life, body, or property
- Disclosure to the service providers listed below
4. Service Providers
The Company uses the following third-party services. Information necessary within the scope of the outsourced work is provided to them.
| Service | Purpose | Privacy policy |
|---|---|---|
| Stripe, Inc. | Payment processing | stripe.com/privacy |
| Google LLC | OAuth authentication | policies.google.com/privacy |
| Resend, Inc. | Email delivery | resend.com/legal/privacy-policy |
| Amazon Web Services, Inc. | Servers and storage (AWS EC2 / S3) | aws.amazon.com/privacy |
These providers process information only in accordance with the Company's instructions and do not use it for their own purposes.
5. Cookies
The Company uses cookies for the following purposes.
- Essential cookies: maintaining your login state and security (the Service will not function correctly if these are disabled)
- Analytics cookies: access analysis for service improvement (Google Analytics and similar)
- Functional cookies: storing user preferences such as language settings
You can disable cookies in your browser settings, but some features may become unavailable.
6. Data Storage and Security
- User data is stored on servers in an AWS region in Japan.
- Communications are encrypted using SSL/TLS.
- Passwords are stored as hashes and are never stored in plain text.
- Credit card information is not stored on the Company's servers; it is managed in Stripe's secure environment.
- Employee access to personal information is limited to the minimum necessary.
7. Retention Periods
| Type of data | Retention period |
|---|---|
| Account information | 30 days after withdrawal (deleted thereafter) |
| Notes and favorites | 30 days after withdrawal (deleted thereafter) |
| Payment records | 7 years, as required by law |
| Access logs | 90 days |
8. Your Rights
You have the following rights.
- Disclosure: the right to confirm what personal information we hold about you
- Correction, addition, and deletion: the right to request correction where information is inaccurate
- Suspension of use: the right to request that we stop using your personal information
- Data portability: the right to export your own data, such as Notes (planned)
To exercise these rights, please contact us using the details below. We will verify your identity and respond within 30 days.
9. Minors
The Service is intended for people aged 13 and over. We do not knowingly collect personal information from anyone under 13. If we learn that we have obtained such information, we will delete it promptly.
10. International Data Transfers
Because the Service uses global third-party services (Google, AWS, Stripe, and others), your information may be processed outside Japan. These services maintain appropriate data protection measures.
11. Changes to This Privacy Policy
If we change this Privacy Policy, we will announce the change on this page and notify you by email. For material changes, we will contact you at least seven days in advance.
12. Contact
For comments, questions, or complaints about the handling of personal information, please contact:
inote Inc., Personal Information Officer
Email: info@inote.jp