JPVerify Privacy Policy
This English version is a translation provided for convenience. If it differs from the Japanese version, the Japanese version prevails.
DSテクニック ("we", "us") handles information in connection with providing JPVerify as described below, in accordance with the Act on the Protection of Personal Information and other applicable laws.
1. Information we collect
- API inputs and outputs: documents, images, text, addresses, information about companies, stores and contact persons, and URLs you submit, and the processing results
- Usage and security information: date and time, API path, response status, processing time, user agent, request ID, data size and hashes, identifying hashes derived from IP addresses and similar data, and failure and quality information
- Payment information: network, currency, amount, payer and payee wallet addresses, transaction hash, and verification and settlement status. We do not collect private keys or seed phrases.
- Contact information: name, email address, organization and message content you provide when contacting us
2. Purposes of use
- Processing API requests, returning results, confirming payments and providing paid features
- Input validation, failure analysis, fraud prevention, and maintaining and improving security and service quality
- Responding to inquiries, handling refunds and disputes, and sending important notices
- Aggregating usage, improving the product, and meeting accounting, tax and legal obligations
We do not use submitted business cards, invoices or similar information to build or sell advertising profiles for third parties, beyond what is necessary to provide the Service to you and to manage its quality and safety.
3. Retention and data minimization
We do not permanently store OCR images or documents as separate customer files. However, to audit paid processing, input errors and quality evaluation, we may keep encrypted copies of requests and responses for up to 90 days. If storage capacity, encryption keys or other safety requirements are not met, we record only metadata such as hashes, sizes and timestamps, without storing the content. Usage, payment and inquiry records are kept as long as necessary for fraud prevention, accounting, dispute handling and legal compliance, and are deleted or anonymized when no longer needed. We cannot by ourselves delete transaction records on a blockchain.
4. External services and contractors
To the extent necessary to operate the Service, we may use cloud and network delivery, payment and x402, email, failure monitoring, and official or authoritative data provider services. We allow contractors to handle only the information needed for the purpose and supervise them appropriately through contracts, configuration and access controls. If you specify a document URL, our server sends a retrieval request to that location.
5. Provision to third parties and handling outside Japan
We do not provide personal data to third parties without the individual's consent, except where required by law, where necessary to protect life, body or property, or where otherwise permitted by law. Infrastructure, payment and other contractors may handle information outside Japan. In accordance with applicable law, we check the contractors' legal frameworks and security measures and take the necessary safeguards.
6. Security measures
We take measures appropriate to the nature of the information, including encryption in transit, encryption of stored audit payloads, separation of secrets, access control, masking of credentials in request bodies, size and input limits, audit logging, and vulnerability handling.
7. Your rights
To the extent provided by applicable law, individuals may request notification of the purpose of use, disclosure, correction, addition or deletion, suspension of use, erasure, or suspension of provision to third parties of retained personal data. Please contact us stating the information needed to verify your identity and what your request concerns. We may be unable to fulfill all or part of a request because of law, the rights of others, security, or public blockchain records outside our control.
8. Cookies
The current public API and these public document pages do not use cookies for behavioral advertising. If we use cookies in the future for authentication or saving settings, for example in a management console, we will update this policy.
9. Changes
We may revise this policy in response to changes in how we handle information or in the law. Important changes will be posted on this page together with their effective date.
10. Responsible business and contact
Business handling personal information: DSテクニック
Contact: service@jpverify.com