Privacy Policy

Operator Information

Service name: Okinawa Tourism Guide URL: https://okinawa-guide.com Operated by: Individual operator Privacy inquiries: Please use the contact form at the bottom of this page.

Personal Information We Collect

We may collect the following personal information when providing the Service:

• ▸Account information (email address, user ID) — collected during registration and sign-in, managed via Clerk.
• ▸Payment information (coin purchase history, amount, status) — credit card details are managed directly by Stripe and are never stored on our servers.
• ▸Log information (IP address, browser/device info, access timestamps, login timestamps) — automatically recorded for security and fraud prevention.
• ▸User-generated content (reviews, ratings, photos, AI-generated travel plans) — content you create or post on the Service.
• ▸Inquiry information (name, email address, message) — collected when you use the contact form.
• ▸Analytics data (anonymized page views, referrer URLs, etc.) — collected via Cloudflare Analytics only with your consent.

How We Use Your Information

We use the personal information we collect solely for the following purposes:

1. ①Providing and operating the Service (account management, content display)
2. ②Identity verification and authentication (sign-in, session management)
3. ③Payment processing (coin purchases, credit balance management)
4. ④AI travel plan generation (transmitting input to Anthropic's Claude API for paid features)
5. ⑤Service improvement and feature development (analyzing access statistics)
6. ⑥Fraud detection and security management
7. ⑦Responding to inquiries and support requests

Disclosure to Third Parties

We will not provide your personal information to third parties without your consent, except in the following cases: • When required by law (e.g., legal requests from courts or government authorities) • When necessary to protect someone's life, body, or property • When sharing with service processors listed below (within the scope necessary for their services)

Service Processors (Third-Party Services)

We engage the following third-party service providers, who may receive personal information to the extent necessary to perform their services. Please review their respective privacy policies.

Cookies and Tracking

We use the following cookies: [Essential Cookies] Used for Clerk session management. These are required for basic functionality and are set regardless of your consent. [Analytics Cookies] Used by Cloudflare Analytics to collect access statistics. These are set only when you accept cookies via the consent banner on your first visit. You can delete or disable them at any time through your browser settings.

Data Retention

We retain personal information according to the following guidelines and promptly delete or anonymize data that is no longer needed:

• ▸Account information: 90 days after account deletion (for fraud investigation purposes)
• ▸Payment history: As required by law (generally 7 years for accounting/tax compliance)
• ▸Access logs and login history: 90 days
• ▸Inquiry records: 2 years after resolution
• ▸User-generated content (reviews, photos, etc.): Until account deletion (deletion requests processed promptly)

Security Measures

We implement the following technical and organizational measures to prevent unauthorized access, loss, destruction, alteration, or leakage of personal information: • Encrypted communications (HTTPS/TLS) • Access control for the admin panel via Cloudflare Access • Principle of least privilege for database access • Regular security reviews and dependency updates

Your Rights Regarding Personal Information

Under Japan's APPI, you have the right to request the following regarding your personal information held by us: • Notification of purpose of use / disclosure • Correction, addition, or deletion • Suspension of use or third-party provision To exercise these rights, please contact us via the form at the bottom of this page. We will verify your identity and respond within a reasonable timeframe (generally within 2 weeks). You may also delete your Clerk account directly from your account settings.

For Users in the EEA, UK, and Switzerland (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the GDPR: • Right of access (to receive a copy of your data) • Right to rectification • Right to erasure ("right to be forgotten") • Right to restriction of processing • Right to data portability • Right to object The legal basis for processing your personal data is: performance of a contract (service provision), legitimate interests (fraud prevention and security), and consent (analytics cookies). To exercise your rights, please contact us via the form below.

Children's Privacy

This Service is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child's information has been collected, please contact us via the form below and we will promptly delete it.

International Data Transfers

Our service processors (Cloudflare, Clerk, Stripe, and Anthropic) are based in the United States. Transfers of personal information to these providers are made pursuant to appropriate data protection safeguards, such as Standard Contractual Clauses or equivalent protections.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law or our practices. We will notify you of significant changes via the Service. Please check this page regularly for the most current version.

Privacy Inquiries and Requests

For privacy-related inquiries, requests for disclosure, or to exercise your data rights, please use our contact form. We will respond within 5 business days.