Privacy Policy

1. Information We Collect

The Operator collects the following information in providing the Service.

• Account information: name, email address, password (stored hashed), and basic Google account profile information if you sign in with Google
• Application information: company or team name, usage type, intended use, and other details entered in the application form
• Content: uploaded or published HTML pages, comments, and workspace/project settings
• Usage records: access logs such as IP address and browser type, and records of operations on the Service (audit logs)
• Cookies: information used to maintain login sessions and store your language preference

2. Purposes of Use

Collected information is used for the following purposes.

• Providing the Service, verifying identity, and managing accounts
• Reviewing applications and communicating approval decisions
• Preventing abuse, maintaining security, and responding to violations of the Terms
• Responding to inquiries
• Improving the Service and developing new features
• Sending important notices such as maintenance information

3. Cookies

The Service uses only cookies that are essential for maintaining login sessions and storing your language preference. We do not currently use third-party cookies for advertising or tracking. If we introduce analytics tools, we will revise this policy and give notice.

4. Disclosure to Third Parties

The Operator does not provide personal information to third parties without consent, except as required by law. Content you share under a visibility setting being displayed to other users according to that setting does not constitute third-party disclosure under this policy.

5. External Services (Processors)

The Service relies on the following external services. Information handling is entrusted to these providers to the extent necessary to provide the Service, and data may be stored on servers outside Japan.

• Cloudflare, Inc. (hosting, database, and file storage)
• Google LLC (sign-in with Google, only if you use it)
• Email delivery services (sending transactional email such as approval notices and sign-in links)

6. Security Measures

The Operator takes reasonable security measures to prevent unauthorized access to, and loss or leakage of, collected information, including encrypted communication, access controls, and hashed password storage.

7. Retention and Deletion

Collected information is retained while your account exists and for as long as necessary to provide the Service.

To request deletion of your account and data, contact us at the address below. After verifying your identity, we will delete the data within a reasonable period. Complete removal from backups may take additional time, and information we are legally required to retain is excluded.

8. Requests for Disclosure and Correction

You may request disclosure, correction, suspension of use, or deletion of your personal information held by the Operator. Contact us at the address below; after verifying your identity, we will respond in accordance with applicable law.

9. Changes to This Policy

This policy may be revised in response to changes in law or the Service. For material changes, the Operator will give notice on the Service or by email to your registered address.

10. Contact

For inquiries about this policy, contact support@tray.page.