Privacy Policy
Last updated: 2026-07-26
numoment Inc. ("we", "us", or "our") establishes this Privacy Policy (this "Policy") as set forth below regarding the handling of customers' personal information in the services we provide (the "Service"). Terms used in this Policy are as defined in the Act on the Protection of Personal Information of Japan (Act No. 57 of 2003; the "APPI").
1. Compliance with laws, regulations, and guidelines
We handle personal information appropriately in compliance with the APPI and other applicable laws and regulations, the guidelines established by the Personal Information Protection Commission, and this Policy.
2. Information we collect
In providing the Service, we may collect the following information. We collect this information by lawful and fair means. - information about Users (name, email address, organization name, phone number, and other information provided through forms at the time of inquiries or document downloads); - authentication information (one-time links sent to email addresses, or identifiers provided by external OAuth authentication providers); - payment information (card information processed through payment processing services; card numbers are not stored on our servers); - information about use of the Service (feature usage history, error logs, IP addresses, cookies, and device information); - information provided through forms at the time of inquiries or document downloads (company name, name, email address, phone number, and inquiry details); and - personal information contained in meeting audio processed through the Service, transcripts thereof, and AI proposals, summaries, and other results generated from them.
3. Purposes of use
We use the personal information we collect for the following purposes, and will not use it for any other purpose except where the User consents or where permitted by law. [Purposes common to the Service] - to register Users for the Service and verify their identity; - to provide the Service and provide user support on the Service; - to inform Users of matters necessary for the operation of the Service and of new features, campaigns, and the like; - to distribute information about the Service and our other businesses; - to respond to inquiries from Users; - to perform analyses necessary for improving the Service and developing new services (provided that we will not allow the personal information we collect to be used for training our own or third parties' AI models; such "personal information" does not include information processed into a form in which individuals and specific companies or organizations cannot be identified and that cannot be restored); - to bill, refund, and process payments for the Service and to carry out related administrative processing; - to respond to acts that violate the Service's terms of service or other rules we prescribe, and to investigate, detect, and prevent fraudulent use of the Service; - to provide personal data to third parties as set forth in this Policy; and - to notify Users of changes to this Policy. [Purposes specific to "Stand"] - to generate meeting minutes, summaries, review materials, and the like; and - to provide features that propose questions, agenda items, and the like based on meeting content, and features that check the fulfillment status of items to be confirmed in meetings. [Purposes specific to "Stand Roleplay"] - to process audio, produce transcripts, and generate evaluations for roleplay sessions; and - to share practice results within the User's organization and for training and assignment management.
4. Provision to third parties
1. We will not provide personal data to third parties without the customer's consent, except in the following cases: - where required by laws and regulations; - where necessary to protect a person's life, body, or property and it is difficult to obtain the person's consent; - where particularly necessary to improve public health or promote the sound development of children and it is difficult to obtain the person's consent; - where it is necessary to cooperate with a national government agency, a local government, or a person entrusted by either of them in performing affairs prescribed by laws and regulations, and obtaining the person's consent may impede the performance of those affairs; or - where the third party is an academic research institution or similar body and needs to handle the personal data for academic research purposes (including cases where part of the purpose of handling the personal data is academic research, and excluding cases where there is a risk of unjustly infringing individuals' rights and interests). 2. Notwithstanding the preceding paragraph, we may entrust all or part of the handling of personal data, to the extent necessary to achieve the purposes of use, to service providers (including cloud service providers) in categories such as the following: - generative AI / AI development vendors; - cloud infrastructure and hosting providers; - database and authentication platform providers; - payment processors; - customer relationship management (CRM) platform providers; - internal notification and communication tool providers; and - external OAuth authentication providers (where used). 3. We may provide the personal data we collect to third parties (including contractors) located in the following foreign country: - Name of the country: United States of America - The country's system for the protection of personal information: https://www.ppc.go.jp/enforcement/infoprovision/laws/offshore_report_america/ - Measures taken by third parties in that country to protect personal information: such third parties have implemented all measures corresponding to the OECD's eight privacy principles. 4. In addition to the preceding paragraph, we may provide personal data to third parties in foreign countries that have established a conforming system (meaning a system that conforms to the standards prescribed by the rules of the Personal Information Protection Commission as necessary for continuously implementing measures equivalent to those that a personal information handling business operator is required to take with respect to the handling of personal data under the provisions of Chapter 4, Section 2 of the APPI; the same applies hereinafter). We will take the measures necessary to ensure the continuous implementation of the conforming system by such third parties.
5. Security control measures for personal data
We take necessary and appropriate measures for the security control of personal data, including preventing the leakage, loss, or damage of the personal data we handle.
6. Disclosure, correction, and suspension of use of retained personal data
1. When a User requests, pursuant to the APPI, disclosure of retained personal data or records of provision to third parties, or notification of the purposes of use of retained personal data, we will disclose or notify without delay after confirming that the request is from the User themselves. However, this does not apply where we are under no obligation to disclose or notify under the APPI or other laws and regulations. 2. When a User requests, pursuant to the APPI, correction, addition, or deletion ("Correction, etc.") of the content of retained personal data on the grounds that it is not factual, we will conduct the necessary investigation without delay after confirming that the request is from the User themselves, and will make the Correction, etc. based on the results. However, this does not apply where we are under no obligation to make the Correction, etc. under the APPI or other laws and regulations. 3. When a User requests, pursuant to the APPI, suspension of use or erasure of retained personal data, or suspension of its provision to third parties ("Suspension of Use, etc."), we will carry out the Suspension of Use, etc. without delay after confirming that the request is from the User themselves. However, this does not apply where we are under no obligation to carry out the Suspension of Use, etc. under the APPI or other laws and regulations. 4. To make any of the requests set forth in the preceding three paragraphs, please contact us as described in "9. Contact".
7. Use of cookies, etc.
The Service uses cookies and similar technologies (local storage, web beacons, etc.) to improve convenience, analyze usage, prevent unauthorized access, and for similar purposes. Customers may refuse to accept cookies through their browser settings, but in that case some features of the Service may become unavailable.
8. Changes to this Policy
We may change this Policy due to amendments to laws and regulations, changes to the content of the Service, or other reasons. The amended Policy takes effect when it is posted on our website.
9. Contact
For inquiries about this Policy, please contact us at: https://numoment.co.jp/#company