Privacy Policy

01 / Data collected

Personal information we collect

To provide authentication services, we may collect names, email addresses, addresses, phone numbers, application details, uploaded product photos, and related metadata.

Photos may include products, accessories, engravings, serial numbers, and similar details. Location metadata and other EXIF data are removed where technically possible during upload.

02 / Purpose

Purpose of use

We use personal information to provide authentication services, verify identity, send progress and result notifications, issue certificates, and respond to inquiries.

We may also use it where necessary to prevent abuse, improve service quality, or respond to legal and governmental requirements.

03 / Processors

Third-party disclosure and processors

We use external services as necessary to operate the product. Supabase Tokyo is used for authentication, database, and storage; Vercel for application hosting; Resend Tokyo for email delivery; and Cloudflare for DNS, security, and traffic protection.

Except where required by law, we do not sell or provide personal information to third parties for unrelated purposes without user consent.

04 / Retention

Retention period

Photos received for authentication are kept for 90 days after the decision (or cancellation), which is the recheck period. After that, all but one photo are deleted; one is kept so you can recognise the item in your history. If a recheck is requested, all photos are kept until the recheck and any compensation are complete. Purchase proof submitted for a recheck, compensation records, certificate records, the information you provided at registration (name, address, phone number, date of birth, etc.) and your agreement to the Terms are kept for as long as necessary to handle disputes and meet legal retention obligations.

05 / Rights

Disclosure, correction, and deletion requests

Users may request disclosure, correction, suspension of use, or deletion of their personal information held by us.

Please contact info@ijba-ai.com. After identity verification, we will respond within a reasonable period in accordance with applicable law.

06 / Security

Security measures

We use SSL/TLS, access controls, encryption where appropriate, and administrative permission controls to help prevent leakage, loss, or damage of personal information.

07 / History

Revision history

Established: 2026-04-26. If this policy is revised, the revision date and key changes will be shown on this page.