PERSONAL INFO PRINCIPLES

The Company complies with laws and regulations related to the protection of personal information (“Act on the Protection of Personal Information” (Act No. 57 of May 30, 2003); hereinafter the “Act”) and endeavors to manage customer's personal information with the utmost care.

1. Name of the company: SB Intuitions Corp.
2. Definitions: Terms used in the Personal Information Protection Policy are as defined in the Act.
3. Compliance with relevant laws, regulations, and guidelines: The Company will comply with the Act as well as relevant laws and regulations, and guidelines.
4. Acquisition, etc. of personal information: The Company will acquire personal information appropriately according to the applicable laws and regulations and keep personal data accurate and current to the extent necessary for the achievement of the purpose of use, and the Company will endeavor to delete it without delay when the use of such data is no longer necessary.
5. Use, etc. of personal information: The Company will not use personal information beyond the extent necessary for the achievement of the purpose of use. Except for exceptional cases under the Act, the Company will not provide personal data to any third party without the subject individual's consent. If entrusting all or part of the handling of personal data to a third party, the Company will exercise necessary and appropriate supervision of the contractor to ensure the secure management of personal data.
6. Secure management measures for personal data: The Company will implement necessary and appropriate secure management measures for each stage of acquisition, usage, and storage etc. in order to prevent the leakage, loss, damage, and improper use etc. of personal data.; a) Formulation of a basic policy: To ensure the proper handling of personal data, we will formulate a basic policy regarding “compliance with relevant laws, regulations, guidelines, etc.” and “point of contact for questions and complaints”, etc.; b) Establishment of rules for handling personal data: Internal rules for handling personal data will be established for each stage of acquisition, use, storage, provision, deletion/disposal, etc.; c) Organizational security control measures: In addition to appointing a person responsible for the handling of personal data, the Company shall clarify the employees who handle personal data and the scope of personal data handled by such employees, and establish a system for reporting to the person responsible in the event that the Company becomes aware of facts or signs of violation of laws or handling regulations.; d) Personnel security control measures: Regular training will be provided to employees on matters to be considered in the handling of personal data.; e) Physical security control measures: In the areas where personal data is handled, the Company controls the entry and exit of employees, restricts the equipment and other items they may bring into the areas, and implements measures to prevent unauthorized persons from accessing personal data.; f) Technical security control measures: Access control is implemented to limit the scope of persons in charge and the personal databases, etc. handled. In addition, we implement mechanisms to protect information systems that handle personal data from unauthorized external access or unauthorized software.; g) Understanding the external environment: We use cloud services to provide better services to our customers, and we may handle personal data related to our customers overseas. When handling such personal data overseas, we will implement safety management measures after understanding the systems for protection of personal information in the relevant country.
7. Disclosure, correction, cessation of use, etc. of retained personal data: Upon request from the subject individual, the Company will disclose, correct, cease the use of, and take other such actions in regard to retained personal data as set forth by laws and regulations and as determined by the Company.
8. Regarding the Company website: Please refer to the Company's site policy regarding the use of cookies, use of information collection modules, and the like on the Company's website.
9. Formulation, implementation, etc. of rules on the handling of personal information: In order to carry out this Personal Information Protection Policy, the Company will formulate, make officers and employees of the Company and other relevant parties fully aware of, and implement internal rules regarding the handling of personal information. The Company will continually maintain and make necessary improvements to such rules.
10. Application and revision of this Personal Information Protection Policy: This Personal Information Protection Policy will apply from the date it is posted to this website. It may be revised without notice when required by laws and regulations and when determined necessary by the Company. The latest policy will be posted on this website.
11. Inquiries: For any inquiries, comments, complaints or the like regarding the handling of personal information by the Company, please contact us through this website.

Purposes of Use of Personal Information

Purposes of Use of Customers' Personal Information

SB Intuitions Corp. (the “Company”) will use personal information (meaning personal information defined in the Act, such as name, address, date of birth, phone number, and email address) of customers for the following purposes and will not use such information for other purposes unless stipulated in laws and regulations.
Customers include not only people who were in the past or are currently in a contractual relationship or trading relationship with the Company, but also those who in the future may enter into a contractual relationship or trading relationship with the Company; in the case of corporations, the personnel in charge at the corporation are also included.

For research and development of generative AI, etc. by the Company
To develop and improve generative AI and other services provided by the Company
To ensure customers are able to smoothly use services provided by the Company
For identification of customers and authentication services
For the Company to charge fees
For system maintenance and responding to system issues
To compile statistical data on the use of the services provided by the Company
To conduct questionnaires about the Company's research and development as well as services, etc.
To respond to inquiries from customers
For communicating about events held by the Company as well as holding and running the events
To communicate to customers about information etc. concerning the Company's research and development and services (including promotional information) as well as promotional information from advertisers who are business operators other than the Company
For raffles and the delivery of prizes and goods for promotional campaigns, etc.
To communicate as necessary, such as sending important notices about the research and development as well as services of the Company
For other purposes separately set out for research and development as well as services provided by the Company

Complaints and Inquiries about Personal Information

Procedures for Requests for Disclosure, etc. of Personal Information

SB Intuitions Corp.(“SB Intuitions”) accepts requests for notification of the purpose of use of retained personal data, disclosure, correction, addition, deletion, suspension of use, elimination, suspension of provision to third parties. Please contact us using the inquiry form (https://www.sbintuitions.co.jp/en/contact/) on this website.

The Company will promptly respond to requests according to the applicable laws and regulations. Please note that, according to the applicable laws and regulations, there may be cases in which we are unable to respond to a request for disclosure, etc.

Personal information submitted by customers when requesting disclosure, etc. of retained personal data or disclosure of records of provision to third parties will be used only to the extent necessary to respond to such requests, etc., and will be retained for the necessary period of time after response is made before being disposed of in a secure manner.

Effective: October 26, 2023
Revised: February 26, 2024