Privacy Policy

1. Who is responsible and what this notice covers

TAKUTO BANDO, an individual sole proprietor based in Japan, Plus One 402, 3-14-34 Kamiosaki, Shinagawa-ku, Tokyo 141-0021, Japan, operates JScope and is responsible for the processing described here. Privacy contact: japancapex@gmail.com. Effective date: September 27, 2026, upon publication of this version on the production service. This notice covers public browsing, accounts, Pro subscriptions, saved searches, service emails, newsletter requests and support. It is not limited to paying subscribers.

Where a provider acts independently, such as Stripe for some payment, fraud-prevention or legal-compliance activities, its own notice also applies. We do not treat acceptance of the Terms or receipt of this notice as consent for every processing purpose.

2. Information collected and sources

From you: account email and authentication details handled by Clerk; business name, country, website or work domain, business type and business-use declaration; plan choices; saved-search names and filters; alert settings; newsletter email; and correspondence. Avoid entering sensitive personal information in free-text fields.

From service providers: Clerk user and organization identifiers; Stripe customer/subscription/price identifiers, billing country, invoice and payment status, trial/renewal/cancellation/failure timestamps; and email delivery identifiers and status. Stripe collects card and billing details; JScope's application database does not store your full card number or account password.

From use: requests and technical/security logs, potentially including IP address, time, device/browser information and requested pages; export request and usage records; event processing and error records; saved-search matching history; and message recipients, subjects, bodies and delivery attempts. Third-party map servers receive network requests when a map is loaded.

Public business records may contain information about identifiable business people. We use relevant public disclosures to prepare the information service; a person mentioned in public material may contact us to seek correction or raise a rights concern.

3. Purposes and, where relevant, legal bases

We use account, eligibility and subscription information to establish and administer the service, authenticate users, verify eligibility, process billing, grant access and handle support. Where a person is the contracting party, necessary processing may be based on performance of the contract; for corporate representatives, the basis may instead be legitimate interests in administering the business relationship, subject to applicable law.

We use security and event records to prevent abuse, enforce proportionate access limits, investigate failures and maintain reliability. Where applicable, this relies on legitimate interests, balanced against individual rights. Records required for tax, accounting, legal claims or other binding duties are processed to comply with those duties or establish/defend claims as applicable.

We process saved searches and requested alerts to supply your chosen features. Newsletter processing is separate and based on your request and consent where required. You may withdraw consent without affecting the lawfulness of prior consent-based processing. If another legal basis or local requirement applies, we identify and satisfy it before the relevant processing. Eligibility checks can restrict access; contact us for human review of an incorrect determination.

4. Providers and recipients

Clerk supplies authentication and account/organization services. Stripe supplies checkout, payment, invoices and the billing portal. Vercel hosts the application and processes network/security and operational records. Neon stores application account, billing, search and message records. Resend delivers service messages and search alerts. Buttondown handles the optional newsletter when enabled. CARTO supplies map tiles, with OpenStreetMap attribution. GitHub supports source control and deployment; customer records should not be placed in issues or source files.

Providers receive information needed for their roles under the applicable contracts. Their subprocessor arrangements may involve additional recipients. We may disclose information to professional advisers under confidentiality, authorities where lawfully required, or in a business transfer subject to applicable safeguards and notice. We do not grant third parties a right to use subscriber information for unrelated advertising merely by listing them here. See the linked provider notices and contact us for more details.

5. Cookies, maps and optional measurement

Authentication and payment services may use cookies or similar technologies needed for sign-in, session security and payment processing. Blocking them can prevent those features from working. Public-page browsing does not require a JScope account.

JScope does not currently load the optional Vercel Web Analytics script. Hosting and security request logs still operate; disabling that script does not mean no technical data is processed. If optional analytics is introduced, this notice and any required choice mechanism will be updated before collection.

Viewing maps loads third-party tiles and sends the provider your IP address and request information. Provider links have their own privacy practices. The newsletter form sends your submitted email to Buttondown only when you submit it. Browser controls can restrict cookies; any optional consent can be changed through the mechanism offered for that processing.

6. International processing

JScope uses the providers listed in this notice to operate the service. Information may be processed in the United States, in the operator's country stated above, and in countries where the providers' disclosed subprocessors operate. A selected database, hosting or email-sending region does not localize all support access, delivery metadata, logs or backups.

Our safeguards include limiting the information sent to each provider, restricting administrator access, using provider data-processing terms where applicable, and reviewing subprocessors, security information and changes to processing locations. We assess the transfer requirements that apply to the operator and the processing, and provide legally required recipient-country and safeguard information through the privacy contact. Where a particular transfer requires consent or another additional measure, we obtain or implement it before making that transfer. Accepting the Terms is not blanket consent to all international transfers.

The provider links below identify their privacy and contractual information. A provider's EU/UK transfer arrangements do not, by themselves, establish compliance with Japanese transfer requirements. We do not promise that all information remains exclusively in one country.

7. Retention and deletion

Canceling a subscription stops renewal as described in the Terms; it does not by itself close your login or erase your information. To request both, use Account > Close account and delete data. We verify account ownership and recent authentication; accounts shared with other users require support review to protect those users.

After accepting closure, we disable Pro access and search alerts and initiate subscription cancellation. We aim to remove the Clerk login and organization, the active Stripe customer profile, and JScope's live account, business eligibility, subscription, export-usage, saved-search and message records within 72 hours. Our automated purge becomes eligible after 48 hours and is retried by a daily process. Provider outages or a documented legal preservation duty can delay completion; we investigate overdue cases and explain an applicable exception on request.

Routine sent or suppressed email payloads in our application database are cleared after three days by the daily job. Processed payment-event records are removed after 30 days; directly linked identifiers are cleared during account erasure where identifiable. A completion receipt with its user, organization and customer identifiers removed is retained for seven days after completion. Daily processing can add up to one day to these housekeeping intervals.

Deleting an active Stripe customer does not delete historical invoices or payment records Stripe must retain. Fiscal records that the operator is legally required to keep are restricted to that purpose and retained for the applicable statutory period. For this Japanese sole proprietorship, relevant tax books and supporting documents generally have five- or seven-year statutory retention periods, depending on the record and tax requirements. We preserve the necessary fiscal originals in access-restricted storage separately from normal account records, including before deleting an active Stripe customer. Records are reviewed with the next annual filing to determine their applicable category, legally prescribed starting date and retention period. This review date is not a destruction date. No automatic fiscal-record purge is enabled; disposal requires verification that the applicable duty and any documented hold have ended. This retention does not extend to unrelated saved searches or account usage. Any case-specific preservation must have a recorded reason, scope, access restriction and review date; it is not a reason to keep unrelated account data indefinitely.

The 72-hour target does not promise immediate erasure from provider-controlled logs, email-delivery history or recovery backups. Resend publishes a 30-day email/log retention period for its standard plans. Other provider security, legal and backup retention follows the applicable service terms and configuration. Copies are not used to reactivate a closed account; a restoration must reapply completed deletion requests before resuming service. We assist with provider-specific deletion requests where available and required.

Newsletter subscriptions are separate from the Pro account. Use the newsletter unsubscribe link or ask the privacy contact to remove that subscription as well. We may retain the minimum suppression information needed to honor an unsubscribe. Support correspondence is reviewed separately and kept only while needed for the request, a specific dispute or a binding recordkeeping duty.

8. Your rights and choices

Contact japancapex@gmail.com to request access, correction, deletion, cessation of use or disclosure, or other rights available under applicable law. We verify identity proportionately, respond within the applicable legal deadline, and explain a lawful refusal or extension. An authorized agent may contact us; reasonable evidence of authority and, where appropriate, identity verification is required.

Where applicable, rights can include a copy of personal information, portability, restriction, objection, withdrawal of consent, and an appeal of a denied request. We do not penalize someone for exercising a protected privacy right. We do not sell subscriber personal information or share it for cross-context behavioral advertising, and the launch configuration does not use optional advertising or analytics scripts. We do not use sensitive personal information to infer personal characteristics. Contact us about an incorrect automated eligibility result for review.

Rights depend on applicable law, including relevant United States state law and any law applicable to the operator. You may complain to the competent authority where that right exists. Offering Pro only to United States businesses does not waive the rights of individual representatives or public-site visitors.

Turn saved-search alerts off in your account and use the newsletter unsubscribe link to stop newsletter messages. Necessary security and billing messages may continue while needed. Closing the Pro account through the deletion form also initiates subscription cancellation; ordinary cancellation through Manage billing leaves the account open.

9. Security, children and changes

We use authentication, role/access controls, signed payment webhooks and controls against duplicate processing and cross-account access. No system can guarantee absolute security. We assess incidents and notify authorities and affected people where required by applicable law; a notice does not remove the duty to secure data.

Pro is intended for adults acting in business. We do not knowingly solicit children's account data. If you believe a child provided it, contact us for review and appropriate removal.

We date and version this notice and notify affected users of material changes where required. Changes do not retroactively authorize an incompatible use or remove a right already exercised. New consent is sought when legally necessary.

10. Provider notices and transfer information

Clerk: https://clerk.com/legal/privacy-policy

Stripe: https://stripe.com/privacy

Vercel: https://vercel.com/legal/privacy-policy

Neon: https://neon.com/privacy-policy

Resend: https://resend.com/legal/privacy-policy

Buttondown: https://buttondown.com/legal/privacy

CARTO: https://carto.com/privacy

OpenStreetMap: https://wiki.osmfoundation.org/wiki/Privacy_Policy

Provider policies explain their own practices and do not replace our duties. Contact the JScope privacy address for current recipient-country information and applicable transfer safeguards.