Privacy Policy

1. Introduction

This Privacy Policy sets forth how Liviro Inc. (hereinafter referred to as "the Company") handles personal information in connection with "Tattoo Japan" (tattoo-ja.com) and "Tattoo Japan Studio" (studio.tattoo-ja.com) (collectively referred to as "the Service"). The Company complies with the Act on the Protection of Personal Information and other relevant laws and regulations, and handles users' personal information appropriately.

2. Collection of Personal Information

The Service collects the following personal information. Common: Email addresses, display names, and profile images through Google Login and email login. Tattoo Japan (Portal) specific: Information related to facility registration and editing, review content, and tattoo design images. Tattoo Japan Studio specific: Account registration information (name, email address, studio information), customer information registered by users (name, contact details, health-related information such as allergies, treatment photos, consent form information, treatment history), appointment data, and design data. For customer personal information registered by users in Tattoo Japan Studio, users bear responsibility as "personal information handling business operators" under the Act on the Protection of Personal Information, and the Company processes such data in the capacity of a "commissioned party."

3. Purpose of Use

Collected personal information is used for the following purposes: Provision, operation, maintenance, and improvement of the Service. User authentication and account management. Facility information management and review features. Provision of business support features in Tattoo Japan Studio including customer management, appointment scheduling, and design management. Billing and payment processing for paid services. Notifications, announcements, and support responses to users. Prevention of unauthorized use and ensuring security. Statistical analysis and research for service improvement. Compliance with legal requirements.

4. Provision to Third Parties

The Company will not provide users' personal information to third parties except in the following cases: When the user has given consent. When required by law. When necessary for the protection of human life, body, or property and it is difficult to obtain the user's consent. When particularly necessary for improving public health or promoting the sound development of children and it is difficult to obtain the user's consent. When it is necessary to cooperate with a national institution, local government, or their delegate in executing affairs prescribed by law.

5. Integration with External Services

The Service integrates with the following external services: Google Analytics and Google Tag Manager for access analysis and usage tracking. Google AdSense and A8.net for advertisement delivery. Stripe for payment processing of Site Supporter and Tattoo Japan Studio subscriptions. Supabase for database and authentication infrastructure. Information collected through each external service is handled in accordance with the respective service's privacy policy. Credit card numbers and other payment information processed through Stripe are not stored by the Company and are processed in accordance with Stripe's security standards (PCI DSS compliant).

6. Use of Cookies

Cookies are used to improve user experience, maintain authentication states, and analyze traffic. Users can disable cookies via browser settings, though some features may be limited as a result.

7. Management of Personal Information

Personal information is securely stored in cloud databases such as Supabase and protected against unauthorized access, leaks, or alterations through appropriate access control. The Company takes necessary and appropriate measures for the security management of personal information. Health-related information (such as allergy information) of customers in Tattoo Japan Studio is managed under particularly strict access controls.

8. Data Storage Location and Retention Period

Personal information may be stored in Japan or in data centers of cloud service providers (such as the United States). Data is retained while the account is active. After account deletion, Tattoo Japan Studio data will be deleted within 90 days and Portal data will be deleted within a reasonable period, except where retention is required by law.

9. Correction, Deletion, and Disclosure Requests

Users may request disclosure, correction, addition, deletion, suspension of use, or erasure of their personal information pursuant to the Act on the Protection of Personal Information. Please contact us via the inquiry form or email (support@tattoo-ja.com). We will respond within the period prescribed by law after verifying your identity.

10. Response to Data Breaches

In the event of a leak, loss, or damage of personal information, the Company will promptly investigate the cause and take measures to prevent the spread of damage. When reporting to the Personal Information Protection Commission and notification to the affected individual are required under the Act on the Protection of Personal Information, the Company will do so without delay.

11. Data Processor Role in Tattoo Japan Studio

Regarding customer personal information registered by users in Tattoo Japan Studio, the Company acts as a data processor commissioned by the user. The Company processes such data only to the extent necessary for service provision based on user instructions. The Company will not use such data for its own purposes without user instruction.

12. Handling of Payment Information

Payments for Site Supporter and Tattoo Japan Studio subscriptions are processed through Stripe. Credit card numbers and other payment information are not stored by the Company and are securely processed in accordance with Stripe's security policy (PCI DSS compliant).

13. Handling of Sponsor Information

Display names and messages submitted via Site Supporter will be shown on the supporters page only with the user's consent. Users can explicitly choose not to display their information.

14. Personal Information of Minors

The Service is not intended for individuals under 18 years of age. If a person under 18 wishes to use the Service, parental consent is required. If the Company becomes aware that personal information has been collected from a person under 18, the Company will promptly delete such information.

15. Policy Revisions

The Company may revise this policy as necessary. For material changes, the Company will provide notice through reasonable means such as posting on the Service or sending email notifications. Revised policies shall become effective upon being published on the Service.

Last Updated：February 10, 2026