1. Information We Collect
The Company may collect the following information to the extent necessary to provide the Service.
- Account information such as name, display name, profile image, email address, and authentication ID
- Information on profiles, friendships, blocks, invitations, RSVPs, and plan creation, editing, viewing, and check-in
- Transaction-related information such as ticket purchases, free ticket acquisition, refunds, payment status, and Stripe account connection status
- Information related to location, region, map display, and nearby-plan discovery
- Delivery-related information such as notification settings, email settings, unsubscribes, and opens/clicks of notifications
- Inquiries, surveys, feedback, and communications with us
- Technical information such as device, browser, IP address, cookies, access logs, error information, and usage
2. Purposes of Use
The Company uses collected information for the following purposes.
- Account registration, identity verification, login, and user management
- Providing plan creation, publication, search, participation management, ticketing, and check-in
- Providing features such as friendships, plan sharing, feed, map, and notifications
- Payments, refunds, revenue management, fraud prevention, and inquiry handling
- Delivering important announcements, plan-related notifications, service information, and campaigns
- Analyzing and improving the safety, quality, and convenience of the Service
- Responding as necessary for law, terms, disputes, audits, and security
3. Information Visible to Other Users & Organizers
Given the nature of the Service, information such as display name, profile image, RSVPs, plan participation status, check-in status, and plans you create may be visible to other users, plan organizers, co-organizers, and staff. The scope of display follows each plan’s visibility settings, friendships, user settings, and the specifications of each feature.
4. Location Information
To provide the map, nearby-plan display, the Now feature, and similar functions, the Company may obtain location information based on the user’s consent or device settings. Location is used, to the extent necessary, for region names, cities, and display of nearby plans. Users may restrict the use of location via device settings or in-app settings.
5. Payment Information
Payments, revenue, refunds, and identity verification for paid plans are processed through services provided by Stripe, Inc. and its affiliates. Payment instrument information such as credit card numbers is, in principle, managed by Stripe; the Company obtains information necessary to operate the Service, such as payment status, transaction identifiers, and ticket information.
6. AI Features
To support plan creation, text extraction, announcement generation, and similar tasks, the Company may use text, images, URLs, and other content that users enter or upload for AI processing. AI processing may use external services such as Google Vertex AI. If there are material changes to what is sent, retention periods, whether data is used for training, the processing region, or similar matters, we will notify you as needed via this Policy or in-app display.
7. External Services, Subcontractors & Overseas Transfer
The Company may use external services or subcontractors — such as Firebase, Google, Supabase, Stripe, email delivery infrastructure, and analytics infrastructure — for providing the Service, authentication, data storage, notifications, email delivery, payments, analytics, AI processing, and incident investigation. The Company exercises necessary and appropriate supervision over subcontractors.
These external services or subcontractors include entities located outside Japan (chiefly in the United States). When providing personal data to a third party in a foreign country, the Company, in accordance with law, either obtains the individual’s prior consent or confirms that the third party has established a system conforming to the standards of Japan’s Act on the Protection of Personal Information. Information about the destination country, that country’s personal-information protection regime, and the safeguards taken by the recipient is available through the contact desk below.
8. Provision to Third Parties
The Company does not provide personal data to third parties except where the individual consents, where required by law, where necessary for payments, plan operation, or inquiry handling, or where necessary to protect a person’s life, body, or property.
9. Notifications & Email Delivery
The Company may send operationally necessary notifications (transactional messages) regarding plans, tickets, accounts, and security.
Email intended for advertising or promotion — such as plan recommendations, service information, and campaigns — is sent only to users who have opted in in advance (opt-in under the Act on Regulation of Transmission of Specified Electronic Mail). Such email displays the sender’s name and a method to unsubscribe, and users may unsubscribe at any time.
10. Cookies, etc.
The Company may use cookies, local storage, and similar technologies to keep you logged in, remember language settings, understand usage, improve quality, and ensure security. You can restrict cookies via browser settings, but some features may become unavailable.
11. Security Measures
To prevent leakage, loss, damage, unauthorized access, and similar risks to personal data, the Company implements necessary and appropriate security measures, including access control, privilege management, log management, protection of communications, and subcontractor management.
12. Disclosure, Correction & Deletion
In accordance with law, users may request disclosure, correction, addition, deletion, suspension of use, or suspension of provision to third parties of their own retained personal data. We may ask you to verify your identity, and we may charge a fee to the extent permitted by law.
13. Retention Period
The Company retains user information for the period necessary to achieve the purposes of use, or for the period necessary for law, payments, audits, fraud prevention, and dispute resolution. Information that is no longer needed is deleted or anonymized within a reasonable period.
14. Revisions
The Company may revise this Policy as necessary. For material changes, the Company will provide notice by displaying it within the Service or by other appropriate means, and will seek renewed consent where necessary.
15. Minors
The Service is intended for users aged 13 or older. Where a minor uses the Service, they must first obtain the consent of a parent or other legal guardian. The Company does not intentionally collect the personal information of anyone under 13. If we learn that we have collected the personal information of a person under 13, we will promptly delete it to a reasonable extent.
16. Business Operator Information
The operator of the Service is NomadResort Inc. Company information, including our name, address, and representative’s name, is published on our corporate site (company profile). Business-operator information relating to retained personal data is also available on that page or through the contact desk below.
17. Contact
For inquiries about the handling of personal information, please contact the NomadResort Inc. contact desk.