Privacy Policy
Last updated: January 15, 2026
1. Introduction
Tokyo Asset Lab Co., Ltd. ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our analytics platform and related services. This policy has been designed in compliance with the Act on the Protection of Personal Information (APPI) of Japan and relevant international data protection frameworks effective as of 2026.
2. Data Controller
The data controller responsible for your personal information is Tokyo Asset Lab Co., Ltd., located at 2-14-27 Akasaka, Minato-ku, Tokyo 107-0052, Japan. For any privacy-related inquiries, please contact our Data Protection Officer at privacy@tokyoassetlab.com.
3. Information We Collect
We collect information you provide directly to us, including: your name and contact details when you submit our contact form; email address for communication purposes; usage data and interaction patterns when you use our platform; technical data such as browser type, device information, and IP address; and cookie data as described in our Cookie Policy. We do not collect sensitive personal information, financial account data, or any information related to specific transactions.
4. How We Use Your Information
We use the collected information to: provide and maintain our analytics and data visualization services; respond to your inquiries and contact form submissions; improve and optimize our platform's functionality and user experience; send you service-related communications and updates; analyze aggregate usage patterns to enhance our platform; and comply with legal obligations under Japanese law, including the APPI as amended in 2024.
5. Legal Basis for Processing
Under the APPI and applicable regulations, we process your personal data based on: your explicit consent when submitting contact forms or accepting cookies; our legitimate interests in improving our services and maintaining platform security; contractual necessity when providing our analytics services to registered users; and legal obligations as required by Japanese regulatory authorities.
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your data with: trusted service providers who assist in operating our platform, including cloud hosting and infrastructure providers located within Japan; professional advisors as required by law or regulation; governmental authorities when compelled by valid legal process under Japanese law; and business partners only with your explicit, informed consent. All third-party service providers are contractually required to maintain the confidentiality and security of your information.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable Japanese law. Contact form submissions are retained for a maximum of 24 months unless you request earlier deletion. Platform usage analytics data is anonymized after 12 months. Upon account termination, personal data is deleted within 90 days, except where retention is required by law.
8. Your Rights
Under the APPI and applicable data protection laws, you have the right to: request access to your personal information held by us; request correction or update of inaccurate personal data; request deletion of your personal data, subject to legal retention requirements; withdraw your consent for data processing at any time; object to specific processing activities based on legitimate interests; request restriction of processing in certain circumstances; and request data portability where technically feasible and applicable. To exercise any of these rights, please contact us at privacy@tokyoassetlab.com. We will respond to your request within 30 days.
9. International Data Transfers
Your data is primarily stored and processed on servers located within Japan. In cases where data may be transferred to service providers outside of Japan, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy assessments in accordance with APPI requirements for cross-border data transfers as updated in 2025.
10. Security Measures
We implement comprehensive security measures including: TLS 1.3 encryption for all data in transit; AES-256 encryption for data at rest; multi-factor authentication for administrative access; regular third-party security audits and penetration testing; automated threat detection and incident response procedures; and employee training on data protection and security best practices.
11. Children's Privacy
Our platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete such information promptly.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our data practices, technology, legal requirements, or business operations. Material changes will be communicated through prominent notice on our platform or via email to registered users at least 30 days before taking effect. Your continued use of our services after such changes constitutes acceptance of the updated policy.
13. Contact Information
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: Tokyo Asset Lab Co., Ltd., Data Protection Officer, 2-14-27 Akasaka, Minato-ku, Tokyo 107-0052, Japan. Email: privacy@tokyoassetlab.com. We aim to respond to all inquiries within 10 business days.