Privacy Policy

Enacted: August 1, 2025

Article 1 (Basic Policy)

Museum Notes (hereinafter referred to as "this service") is a digital museum service operated by GIJIN LAB (hereinafter referred to as "our company"). We recognize the importance of your personal information and comply with the Personal Information Protection Law (hereinafter referred to as the "Personal Information Protection Law") and properly collect, use, and manage personal information. This privacy policy establishes the handling of personal information in this service.

Article 2 (Personal Information Collected)

We collect the following personal information in providing this service:

  • Account information: Email address, password (stored encrypted)
  • Usage history: Information about viewed artworks, viewing date and time
  • Viewing records: Impressions and responses to artworks
  • Technical information: IP address, browser information, device information

Article 3 (Purpose of Use of Personal Information)

We use the collected personal information for the following purposes:

  • Provision and operation of this service
  • User authentication and account management
  • Storage and management of viewing records
  • Analysis for service improvement
  • Responding to customer inquiries
  • Compliance with laws and regulations
  • Prevention of unauthorized use and security measures

Article 4 (Third Party Provision of Personal Information)

We will not provide your personal information to third parties except in the following cases:

  • When we have your prior consent
  • When disclosure is required by law
  • When necessary for the protection of human life, body, or property and it is difficult to obtain your consent
  • When particularly necessary for the improvement of public health or the promotion of sound development of children and it is difficult to obtain your consent
  • When cooperation is necessary for national or local government agencies or their contractors to perform duties prescribed by law and obtaining your consent may interfere with the performance of such duties

Article 5 (Entrustment of Personal Information)

We may entrust the handling of personal information as necessary in providing this service. In such cases, we will enter into appropriate contracts with the contractors and ensure proper management of personal information.

Article 6 (Security Management of Personal Information)

We will take necessary and appropriate measures for the security management of personal information, including prevention of leakage, loss, or damage of your personal information:

  • Implementation of access restrictions to personal information
  • Protection of personal information through encryption
  • Conducting regular security audits
  • Management of locations where personal information is handled

Article 7 (Retention Period of Personal Information)

We will not retain personal information beyond the period necessary to achieve the purpose of use. However, if a retention period is prescribed by law, we will follow that period. When an account is deleted, we will promptly delete the related personal information.

Article 8 (Customer Rights)

You have the following rights under the Personal Information Protection Law:

  • Request for disclosure of personal information
  • Request for correction, addition, or deletion of personal information
  • Request for suspension of use or deletion of personal information
  • Request for suspension of third-party provision of personal information

For these requests, please apply through the contact form or email. We will respond appropriately.

Article 9 (Use of External Services)

We use the following external services in providing this service:

  • Supabase Auth: For user authentication
  • Supabase: For database service (storage of user information, viewing records, etc.)
  • Resend: For email delivery service

These services have entered into appropriate contracts with us and ensure proper management of personal information.

Article 10 (Access Analysis Tools)

We may use the following access analysis tools to understand the usage of this service and improve the service:

  • Google Analytics
  • Cloudflare Analytics

These tools collect statistical information that does not include personally identifiable information. You can restrict the use of these tools through your browser settings.

Article 11 (Use of Cookies)

We may use cookies for analyzing the usage of this service and improving the service. Cookies are small text files stored in your browser.

You can restrict the use of cookies through your browser settings, but in that case, some functions of this service may not work properly.

Article 12 (Personal Information of Minors)

If you are a minor using this service, please obtain parental consent in advance.

Article 13 (Changes to Privacy Policy)

We may change this privacy policy as necessary. If there are changes, we will notify you through announcements within this service or by email.

Article 14 (Contact)

For inquiries regarding this privacy policy or requests for disclosure, correction, deletion, etc. of personal information, please apply through the following methods:

Email: contact@gijinlab.com

*We may need to verify your identity when you contact us.

Article 15 (Personal Information Protection Manager)

Our personal information protection manager is as follows:

Personal Information Protection Officer

Email: contact@gijinlab.com

Article 16 (Governing Law and Jurisdiction)

Japanese law shall be the governing law for the interpretation of this Privacy Policy. In the event of a dispute regarding this Privacy Policy, the Chiba District Court shall be the exclusive agreed jurisdiction.