Privacy policy

1. Who we are#

Name

株式会社Bekito

Address

〒170-0013 東京都豊島区東池袋2丁目62番8号 BIGオフィスプラザ池袋1206

Representative

代表取締役 伊藤 秀明

Privacy contact

Loading…

The Service was developed by Masterbek LLC (Tashkent, Republic of Uzbekistan; the “Operator”), to which we have entrusted its development and operation (section 6). We are responsible for your personal information 【To be confirmed：roles to be confirmed (we as the business handling personal information, the Operator as our processor)】.

2. Who this policy covers#

• Customers of the Service (account holders, including people on the free trial)
• Visitors to the Service's website (https://hanasite.bekito.co.jp) and people who contact us

Personal information of visitors to sites you build with the Service (for example messages sent through a site's form) is the responsibility of the customer who runs that site; we handle it on their behalf (section 7).

3. What we collect#

We collect the following, as far as needed to provide the Service.

Card numbers: you enter them directly on the payment provider's page or in the input field it provides. They never pass through our servers and we do not store them.

Automatic masking of secrets: if a message seems to contain a password, API key, card number or the like, we store that part masked and do not send it to the AI. Enter keys your site needs in the dedicated secure form (values are stored encrypted).

4. Why we use it#

1. To create your account, verify you and let you log in
2. To create, change, publish and host sites and provide the AI features
3. To charge, take payments, refund, issue receipts, and for accounting and tax
4. To send notices about the Service (form messages, finished work, upcoming payments and renewals, upcoming data deletion, important changes …) by e-mail or LINE
5. To provide support by the AI and staff
6. To prevent abuse, keep the Service secure, and investigate and fix faults
7. To deal with breaches of the terms and to comply with the law
8. To improve the Service and plan new features (analysed as statistics that identify no one)
9. To learn which ads or referrals brought you to the Service
10. With your consent, to e-mail you about new features and campaigns

We do not use your content or conversations to train AI models, and we do not sell personal information or give it to third parties for advertising.

5. Disclosure to third parties#

We do not give personal information to third parties without your consent, except:

• where the law requires it
• where it is needed to protect someone's life, body or property and your consent is hard to obtain
• where we must cooperate with public authorities carrying out duties set by law and asking for consent would hinder them
• in other cases the APPI allows

Entrusting work to processors (section 6) and the transfer of a business by merger or the like are not “disclosure to third parties”.

6. Processors#

We entrust the handling of personal information to the following companies, as far as needed to provide the Service. The Operator, Masterbek LLC, runs the Service and uses the companies below for that work (sub-processing).

We sign contracts on the handling of personal information with our processors and supervise them, including checking their safeguards 【To be confirmed：data processing agreement between us and the Operator to be signed】.

Notices to our operators (sign-ups, payments, incidents …) do not contain customers' e-mail addresses, phone numbers, names or messages.

External services you use directly, such as the LINE app or a payment provider's payment page, handle information under their own privacy policies.

7. Visitors to your site#

1. For information sent through the forms of a site you built with the Service (names, phone numbers, e-mail addresses, messages …), the customer running the site is responsible under the APPI.
2. We handle it on your behalf only to:
   • store it and show it in your inbox
   • notify you of new messages by e-mail or LINE (on LINE only a summary and a link to the inbox, not the full text by default)
   • send it to the AI when you ask the AI about it
   • detect spam and file it as spam
3. You can delete messages in your inbox at any time (one by one, several at once, or all spam). Deleted messages cannot be restored. When you delete a site, its messages are deleted with it.
4. Site visitors with questions about their own information should first contact the business running the site. If they cannot reach it, they can contact us and we will pass the request on.
5. We count visits to your site for you with Umami analytics, without cookies and without identifying visitors (section 12).
6. Your site may load external services such as maps (Google Maps) or web fonts (Google Fonts); visitors' browsers then connect to those companies directly. See Cookies and analytics.

8. Transfers to and handling in other countries#

The Service stores and processes personal information outside Japan. During the current test and trial phase its servers are outside Japan 【To be confirmed：server location (planned: Finland)】; we plan to move them to Japan and will update this policy when we do.

9. Security measures#

We take the following measures against leaks, loss and damage of personal information. See also Security.

10. How long we keep it#

We keep personal information only as long as its purpose requires and delete it without delay when it is no longer needed (APPI Article 22). Transaction records the law requires us to keep are kept for that period.

Account, conversations, uploaded files (voice notes included), sites, form messages, support records, LINE link

While your contract runs. When you delete your account, your sites go offline at once and the data is deleted within 30 days.

Free-trial data

Publishing stops when the trial ends; 30 days later everything is deleted, account included. We e-mail you 7 days before.

Data after a paid period ends

Your site is paused 7 days after the paid period ends; 30 days later everything is deleted, account included, except transaction records. We e-mail you 7 days before.

Deleted sites

Offline at once; deleted 30 days after you delete them.

Site code repositories (GitHub)

Deleted together with the site's data (not kept as an archive).

Form messages

Until you delete them in your inbox or delete the site (section 7).

Data-download files

Deleted 7 days after they are made; never included in backups.

Backups

At most 30 days; deleted data leaves the backups within 30 days.

Payment and transaction records (orders, payments, receipts, refunds, final-confirmation screens, and the name and e-mail address they need)

For the period the law requires (Corporation Tax Act, Electronic Books Maintenance Act, Consumption Tax Act: in principle 7 years, 10 years for years with losses carried forward). For a deleted account, the name and e-mail address are deleted 10 years after the account.

Notices from the payment provider (payment status updates)

We keep only what is needed to confirm a transaction (number, type, amount, status, time), never names or e-mail addresses. Notices not tied to an order are deleted after 90 days, or at once when the account is deleted; the notices of an order are kept as long as that transaction record.

Technical records (access and error logs, processing history)

At most 90 days

Events received from LINE

Contents cleared after processing; deleted after 14 days

11. Your requests#

You can ask us about the personal data we hold about you (retained personal data) for:

• notification of the purposes of use
• disclosure (including records of provision to third parties)
• correction, addition or deletion
• suspension of use or erasure
• stopping provision to third parties

What you can do yourself: under Account → “Data and account” you can download your data (site files, uploaded files, form messages, conversations) and delete your account at any time. You can change your name, e-mail address and notification settings on the account page.

How to make a request

1. E-mail your request to Loading… — no LINE or AI support needed. By post, write to the address in section 1. A person always handles requests; the AI never decides or processes them.
2. To confirm it is you, please write from your registered e-mail address. If you have no e-mail address registered (for example if you use only LINE), we verify you another way 【To be confirmed：verification method】.
3. Agents must send documents showing their authority, such as a power of attorney.
4. There is no fee 【To be confirmed：fee】.
5. We respond without delay and tell you the result by e-mail (or in writing if you prefer). If we cannot comply, we tell you why.

12. Cookies and similar#

The Service uses cookies to keep you logged in and to remember your display language. We do not use advertising cookies. For analytics we use Umami, which uses no cookies, on a server managed by the Operator 【To be confirmed：Umami server location】.

Details: Cookies and analytics.

We do not provide information collected with cookies and similar (personally referable information) to third parties for identifying individuals.

13. Minors#

The Service is for people running a business. If you are under 18, use it with the consent of your parent or other legal guardian.

14. Changes to this policy#

We may revise this policy for changes in law or in the Service, and publish revisions on this page with the date. Important changes (new purposes, new recipients or countries abroad …) are announced beforehand by e-mail and in the Service; where the law requires your consent, we ask for it.

15. Contact#

Send questions, comments and complaints about how we handle personal information to:

Desk

株式会社Bekito, Hanasite privacy desk

E-mail

Loading…

Address

〒170-0013 東京都豊島区東池袋2丁目62番8号 BIGオフィスプラザ池袋1206

We are not a member of an accredited personal information protection organisation.