Skip to main content

Privacy Policy

This English version is a reference translation. In case of any discrepancy, the Japanese version prevails.

illustrious Inc. (the "Company") establishes this Privacy Policy (the "Policy") regarding the handling of personal information and other information of users (the "Users") of the web application "LISMOA" (the "Service") provided by the Company, and complies with the Act on the Protection of Personal Information (the "APPI") and other applicable laws, regulations, and guidelines.

Article 1 (Basic Policy)

The Company handles Users' personal information appropriately and securely, and takes security management measures to prevent leakage, loss, damage, and similar incidents.

Article 2 (Scope and Definitions)

1. This Policy applies to all information that the Company collects and uses in the Service (including personal information, personally referable information, device information, cookies, and similar data).

2. Terms used in this Policy have the meanings given to them in the APPI and other applicable laws.

Article 3 (Information Collected)

The main categories of information the Company collects are as follows.

  • Account information: Name, email address, profile image, credentials used to sign in, and similar data (including information provided by Google when a User signs in with a Google account). Where a User invites another person to the Service as a member, this includes the invitee's email address.
  • Usage information: Access date and time, IP address, browser and device information, identifiers such as cookies, referring URLs, operation and event logs (excluding the operation records described below), and similar data.
  • Operation records: Operations performed on the Service's screens (clicks, scrolling, navigation between screens, etc.), the content displayed on the screen at that time (including Amazon-linked data such as sales, profit, and product information), and the content entered in input fields. Passwords, and codes, tokens, and similar data used for sign-in or authentication, are excluded from recording. Data transmitted between the Service and its servers is not itself recorded.
  • Amazon-linked data: Data related to the Amazon seller account connected by the User (sales, advertising, inventory, orders, shipping regions (postal codes, etc.), and similar data). Data is collected through official APIs (SP-API, Ads-API, etc.) in compliance with Amazon's Data Protection Policy (DPP) and related policies.
  • Payment-related information: Payment status, billed amount, transaction ID, and similar data (credit card numbers and similar information are processed by the payment service provider Stripe and are not retained by the Company).
  • Information related to external service integrations: Settings for notification integrations configured by the User (Slack, Chatwork, etc.), including the email address of the linked account; and connection information and usage records for integrations with AI applications and similar tools ("AI integration"), such as IP address, browser information, and content requested by the AI application.
  • Inquiry information: Name and contact details, inquiry content, response history, and similar data.

Article 4 (Methods of Collection)

  • Provided directly by the User (registration, integration settings, inquiries, etc.).
  • Collected automatically (access logs, cookies, operation records, etc.).
  • Obtained from linked services (Google, Amazon, Stripe, notification integration destinations, etc.) based on the User's explicit instruction and consent.

Article 5 (Purposes of Use)

The Company uses collected information for the following purposes.

  1. 1. Providing, maintaining, and operating the Service (profit and loss calculations, analysis, visualization, dashboard display, account management, etc.).
  2. 2. Improving the Service, planning and developing new features, enhancing quality, and optimizing the user experience (including analysis of operation records).
  3. 3. Understanding usage patterns, preventing unauthorized or improper acts, ensuring security, and handling failures and investigating defects.
  4. 4. Sending notices necessary for using the Service (communications concerning accounts, billing, and security; important announcements; changes to terms and policies, etc.).
  5. 5. Sending announcements about new features, improvements, and specification changes of the Service (product updates). Users may opt out through the Company's prescribed method.
  6. 6. Responding to inquiries and providing support (including checking the User's situation at the time of an inquiry by using operation records).
  7. 7. Creating and providing anonymized and aggregated data (Article 7).
  8. 8. Complying with laws, handling accounting and audits, and resolving disputes.
  9. 9. Sending marketing communications (campaigns, seminars, content introductions, etc., via email or in-app display). These are sent only with the User's prior consent, and Users may opt out at any time.
  10. 10. Integrating with external services at the User's instruction (sending alerts to notification integration destinations, providing data through AI integration, etc.).
  11. 11. Delivering the Company's advertisements and measuring their effectiveness (including showing the Company's advertisements on other companies' websites, social media, and similar platforms to people who have visited the Company's website or used the Service).

Article 6 (Third-Party Disclosure, Entrustment, and Cross-Border Transfer)

1. The Company does not provide personal data to third parties except in the following cases.

  1. (1) The individual has given consent.
  2. (2) Required by law.
  3. (3) Necessary to protect a person's life, body, or property.
  4. (4) Particularly necessary for public health or the sound development of children.
  5. (5) Necessary to cooperate with a national or public authority.

2. Where a User configures an integration with an external service through the Service's features (notification integration, AI integration, etc.), the Company, following the User's instruction, sends information corresponding to the integration settings (alert content, data requested by the AI application, etc.) to the integration destination. Such transmission is treated as provision with the individual's consent under item (1) of the preceding paragraph.

3. The Company may entrust the following operations to external service providers (the "entrusted providers"). The Company exercises necessary and appropriate supervision over the entrusted providers.

  • Provision and operation of cloud infrastructure and hosting.
  • Sign-in authentication.
  • Payment processing.
  • Email delivery (sending notices, announcements, and marketing communications).
  • Access analysis and analysis of operation records.
  • Error monitoring.
  • Management of inquiries and feedback.
  • Advertising delivery and measurement.
  • Marketing and customer relationship management.

4. The entrusted providers include businesses located in the United States, and personal data may be stored and processed on servers in the United States. The Company has put in place the systems necessary to ensure that the entrusted providers continuously take measures equivalent to those that a business operator handling personal information must take under the APPI, including by entering into contracts requiring them to do so.

5. For information on the personal information protection system of the United States, please refer to the information published on the website of the Personal Information Protection Commission. An overview of the measures the Company takes and other information will be provided without delay upon a User's request, through the contact point listed in "Business Information and Contact" at the end of this Policy.

Article 7 (Handling of Anonymized and Aggregated Data)

1. The Company may process, anonymize, and aggregate collected data into a form from which no individual can be identified, and provide it within the Service as reference information for other Users (e.g., a feature comparing performance against overall averages).

2. Anonymized and aggregated data does not contain personal information. It is not made publicly available and is used only within the scope of user-facing features of the Service.

Article 8 (Compliance for Amazon-Linked Data)

1. The Company collects, stores, and uses Amazon-linked data in accordance with Amazon's DPP and other policies and agreements. The scope of collection and use is limited to the purposes for which the User connected and consented, and to the scope of this Policy.

2. Operation records may include Amazon-linked data displayed on the screen. The Company uses Amazon-linked data contained in operation records only for the purposes of checking the User's situation at the time of an inquiry, improving the Service, and investigating defects, and allows entrusted providers to handle it only to the extent necessary for these purposes.

Article 9 (Retention Period and Deletion)

1. The Company retains collected data for the period necessary to provide the Service, prevent unauthorized or improper acts, comply with laws, and otherwise achieve the purposes of use in Article 5. Even after a User deletes their account, the Company may retain data to the extent necessary for these purposes.

2. The Company may delete Amazon-linked data and similar data once the retention period that the Company sets for each plan has elapsed. The retention period will be announced in advance through the Service's help pages, the pricing page, or another method the Company deems appropriate.

3. In addition to Article 11, Users may request deletion of their own data (including Amazon-linked data) through the contact point listed in "Business Information and Contact" at the end of this Policy. After verifying the User's identity, the Company will delete the data within a reasonable period.

4. If Amazon requests deletion of data, the Company will comply and delete the relevant data within 30 days of the request.

5. Notwithstanding the preceding two paragraphs, information that must be retained by law (billing information, accounting books, etc.) and information that must be retained as a record of consent or transactions will be retained for the necessary period. In the case of deletion under paragraph 3, information necessary to prevent unauthorized or improper acts may also be retained for the necessary period. In addition, information processed or stored by payment service providers (such as Stripe) may not be directly deletable by the Company.

6. Data remaining in backups is deleted by the Company after the backup retention period has elapsed.

7. The Company may accumulate data in a data warehouse or similar system in the future, in addition to the database, for service provision and improvement, but will handle such data within the scope of this Policy.

Article 10 (Security Management Measures)

The Company implements technical and organizational security management measures including access control, least-privilege and authentication management, encryption of data in transit and at rest, audit logging, vulnerability countermeasures, employee training, and oversight of entrusted providers. Where personal data is handled in a foreign country, the Company implements security management measures after understanding that country's personal information protection system.

Article 11 (Users' Rights)

1. Users may request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, erasure, or cessation of third-party provision of their own personal information held by the Company (subject to the requirements and exceptions provided by law).

2. When making such a request, Users may be asked to provide information to verify their identity. Depending on the nature of the request, Users may lose access to all or part of the Service.

3. For requests and inquiries, please see "Business Information and Contact" at the end of this Policy.

Article 12 (Use of Cookies and External Transmission)

1. The Company may use cookies and similar technologies to improve convenience, analyze access, and enhance features.

2. On the Service and the Company's website (lismoa.com), information may be transmitted from the devices of Users (including visitors to the Company's website; the same applies in this Article) to external service providers for the following purposes. The recipients include businesses located in the United States.

  • Access analysis: The following are transmitted: the URL and referrer of pages viewed; browser, device, and OS type; identifiers such as cookies; IP address; and main operations within the Service. The purpose is to measure and analyze usage and improve the Service.
  • Analysis of operation records (the Service only): The operation records described in Article 3, together with identification information of the signed-in User (user ID, email address, plan, etc.), are transmitted. The purpose is to check the User's situation at the time of an inquiry, improve the Service, and investigate defects.
  • Management of inquiries and feedback: User ID, name, email address, profile image, plan, and similar data are transmitted. The purpose is to respond to inquiries and feedback and to send announcements about new features, improvements, and specification changes of the Service (product updates).
  • Prevention of fraudulent use: Information about the browser and device is transmitted. The purpose is to prevent fraudulent registrations and submissions.
  • Video playback (the Company's website only): Access information from playing a video is transmitted. The purpose is to display the video.
  • Advertising delivery and measurement: The URL and referrer of pages viewed, identifiers such as cookies, IP address, and main operations within the Service (starting a free trial, connecting an Amazon account, subscribing to a paid plan, etc.) are transmitted. The purpose is to deliver the Company's advertisements (including showing advertisements to people who have visited the Company's website or used the Service) and to measure their effectiveness. The advertising providers that receive this information may also use it to improve their own services and optimize advertising. For details, please see each advertising provider's privacy policy.
  • Marketing and customer relationship management: The URL and referrer of pages viewed and identifiers such as cookies are transmitted. The purpose is to understand how the Company's website and the Service are used, and to improve the Company's marketing and manage customer relationships.

3. Users may restrict cookies through their browser settings, but some features of the Service may become unavailable. Transmission for advertising delivery and measurement can also be stopped by the methods each advertising provider offers, in addition to browser settings.

Article 13 (Use by Minors)

The Service is intended primarily for business operators. If a minor uses the Service, please obtain the consent of a parent or guardian.

Article 14 (Changes to Purposes of Use)

The Company may change the specified purposes of use to the extent reasonably deemed to have a substantial connection to the original purposes. In the event of a material change, the Company will announce and notify Users at least 30 days before the effective date.

Article 15 (Changes to This Policy)

The Company may update this Policy as necessary. For material changes, the Company will notify Users at least 30 days before the effective date via posting on the Service or another method the Company deems appropriate. If a User uses the Service on or after the effective date, or does not cancel their paid plan or delete their account within the period defined by the Company, they are deemed to have agreed to the change.

Business Information and Contact

  1. Business name: illustrious Inc.
  2. Address: Imon Mitake Building 3F, 1-20-1 Shibuya, Shibuya-ku, Tokyo, Japan
  3. Phone: +81-50-1791-1726

For inquiries regarding the handling of personal information, please contact us via the contact form.

Supplementary Provisions

  1. Established: August 1, 2024
  2. Last revised: October 7, 2026 (effective November 6, 2026)