Privacy Policy

We collect information you provide directly — such as your name, email address, company, and the contents of any message or service request you submit through our contact and package-building forms. When you purchase services, payment is processed by our payment provider; we receive confirmation of the transaction but never your full card number. We also automatically collect limited technical data, such as your IP address, browser type, and language preference, to operate and secure the Service.

We use your information to respond to your enquiries, prepare quotes, deliver and coordinate the services you request, process payments, send you transactional messages about your case, comply with our legal obligations, and improve the Service.

We handle personal information only for the purposes described in this policy and within the scope necessary to provide the Service, in accordance with Japan's Act on the Protection of Personal Information (APPI). Where required, we obtain your consent before using your information for a new purpose.

We do not sell your personal information. We share it only with: (a) service providers that operate our platform on our behalf — including Supabase (database hosting), Stripe (payment processing), and Resend (transactional email); and (b) the partner agencies and professionals who carry out the specific services you order (for example company setup, visa, housing, banking, or tax providers), strictly to the extent needed to fulfil your request. All such parties are required to handle your information securely.

Some of our service providers process data on servers located outside Japan. Where personal information is transferred internationally, we take the steps required by applicable law to ensure it remains protected to a comparable standard.

We retain personal information for as long as needed to provide the Service and to meet our legal, accounting, and tax obligations. When information is no longer required, we delete or anonymise it.

We use technical and organisational measures appropriate to the sensitivity of the data — including encrypted connections and access controls — to protect personal information against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

We use a small number of cookies that are necessary for the Service to function — for example, a cookie that remembers your chosen display language. We do not use cookies for advertising. You can clear or block cookies in your browser settings, although some features may then not work as intended.

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, or ask us to stop using it. To exercise these rights, please get in touch through our contact page; we will respond within a reasonable period.

The Service is intended for adults and is not directed at children below the age of majority. We do not knowingly collect personal information from children without appropriate consent.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date above. Material changes will be communicated where required.

If you have questions about this Privacy Policy or how we handle your information, please reach out to MuseLab Inc. through our contact page.