Privacy Policy

1. Scope

This Policy applies to websites operated by the Company and to LinkBento and other services provided by the Company (collectively, the “Services”). When a service requires additional rules specific to that service, those rules will be displayed within the relevant service in addition to this Policy.

2. Information We Collect

We may collect the following information to the extent necessary to provide the Services.

We do not collect the full contents of websites registered in LinkBento for the purpose of permanently storing them. We may, however, access and process a target URL as necessary to retrieve page titles or favicons, investigate defects, or maintain security.

1. Account information, including email address, user identifiers, authentication method, registration date, registration country, and other information needed to manage an account
2. Information users save, including category names, link names, URLs, notes, display settings, imported data, text or files temporarily saved to Bridge, and other information entered or stored by a user
3. Usage information, including login times, feature usage, numbers of categories and links, link usage counts, display mode, language, operation history, error information, and other information needed to operate and improve the Services
4. Technical information, including IP address, browser and device information, cookies or similar identifiers, access times, referrer information, and communication and security logs
5. Consent and request records, including the date and version of terms accepted, participation in early-access programs, account deletion requests, and other procedures completed through the Services
6. Inquiry information, including name, email address, message content, and other information provided to the Company
7. Information supplied by external authentication providers, including identifiers, email addresses, and other information required for authentication when a user chooses a provider such as Google

3. Purposes of Use

We use collected information for the following purposes.

We do not use private saved content—such as registered URLs, category names, notes, or Bridge text and files—for advertising or personal profiling without the user's consent.

1. Registration, authentication, identity verification, and account management
2. Storage, synchronization, display, import, export, and other functions needed to provide the Services
3. Responding to inquiries and communicating about incidents, security issues, and support
4. Preventing misuse, controlling access, maintaining security, and investigating failures
5. Aggregating and analyzing usage, improving quality, considering features and usage limits, and planning new services
6. Responding to violations of terms or law
7. Providing important notices about changes to conditions, suspension, or termination of services
8. Sending information about the Company or Services only where the user has separately consented
9. Meeting legal obligations and handling disputes

4. Cookies and Similar Technologies

The Services may use cookies or browser storage to maintain sign-in state, language, display settings, and other functionality. We may also use analytics to understand overall usage trends and display performance.

Users may restrict cookies through browser settings, but doing so may prevent sign-in or other features from working correctly.

5. Service Providers and Outsourcing

We may entrust the handling of personal data to external providers for authentication, data storage, service delivery, email, contact handling, and related operations. The Services primarily use the following providers.

We select providers appropriately and require suitable handling through contracts or other measures. Provider facilities or subprocessors may be located outside Japan. We take required safeguards and provide information in accordance with applicable law.

• Firebase: administration authentication and storage of blog data and images
• Vercel: web application delivery and execution
• Google Analytics: understanding site usage and article readership when enabled
• Google: external authentication when selected by a user
• Cloudflare Turnstile: preventing abusive contact form submissions
• Resend: sending inquiry notifications and confirmation emails
• XServer Mail: receiving and managing Company email

6. Disclosure to Third Parties

We do not provide personal data to third parties without the individual's consent except in the following cases.

Outsourcing described in the preceding section is carried out to the extent that it is not legally treated as disclosure to a third party.

1. When required by law
2. When necessary to protect a person's life, body, or property and obtaining consent is difficult
3. When especially necessary to improve public health or promote the sound development of children and obtaining consent is difficult
4. When cooperation with a national or local public body performing legally prescribed duties is necessary and obtaining consent could impede those duties
5. When provided in connection with a succession of business through merger, company split, business transfer, or similar reason

7. Security Measures

We implement necessary and appropriate safeguards—including access controls, authentication, permission management, protected communications, log review, and provider selection—to prevent leakage, loss, or damage of handled information.

8. Retention and Deletion

We retain information for the period necessary to fulfill its purpose or as required by law.

When a LinkBento user requests account deletion, we generally provide a 30-day cancellation period and then delete the account and associated categories, links, settings, and other data. Information required for legal retention, security, fraud prevention, dispute handling, or another legitimate purpose may be retained only to the necessary extent and for the necessary period.

Communication logs, security logs, and backups retained by external providers are deleted or expire according to each provider's retention policy.

9. Access, Correction, Suspension, and Deletion

Subject to applicable law, users may request notice of purpose, access, correction, addition, deletion, suspension of use, erasure, or suspension of third-party disclosure for their personal data held by the Company. We will verify the requester's identity and respond in accordance with law.

Where information can be viewed, corrected, exported, or deleted by the user through the Services, please use those features in principle.

10. Use by Minors

Minors using the Services should obtain the consent of a parent, guardian, or other legal representative when required.

11. Changes to This Policy

We may amend this Policy in response to changes in law, the Services, or our information handling. For material changes, we will provide advance notice of the effective date and details through our website, the Services, or another appropriate method. We will obtain separate consent where required by law.

12. Contact

Questions about this Policy or our handling of personal information may be submitted through the contact form on the AJA Works website.

AJA Works LLC
49-2 Asahiekimae-cho, Kochi, Kochi 780-0938, Japan