Privacy Policy

Effective / last updated: November 6, 2026

This is an English translation for convenience. If it differs from the Japanese original, the Japanese original prevails.

Japan Regulation Watch handles only the information needed to deliver its emails. This page explains what we store, what we use it for, and when we delete it.

1. Who we are

Hiroshi Hasegawa (trade name "Nearia") handles users' information in accordance with Japan's Act on the Protection of Personal Information (APPI) and other laws, and is responsible for it. Our address is disclosed without delay upon request.

2. Information we collect

• Email address: stored encrypted; matching uses an irreversible value (hash). It is never shown or logged as is.
• If you subscribe to the paid plan: your subscription status (plan, renewal date). The company name, billing address (country) and optional tax ID you enter on Stripe's checkout page are managed by Stripe; we check the billing country to determine tax treatment. Card numbers never reach us.
• Delivery and rate-limit records: handled as irreversible values, not raw IP addresses.
• Access information (IP address, browser type, time, pages viewed), processed automatically by Cloudflare, which delivers the site, for delivery and security. The Operator does not use it to identify users.
• Inquiries: the email address and message you send through the inquiry form or by email, stored encrypted.

We do not collect real names or phone numbers, except when you send them in an inquiry. Company names and billing addresses are handled by Stripe only at checkout.

3. Purposes

• Delivering notification and digest emails, and confirming sign-ups and unsubscribes
• Managing paid-plan contracts, billing and cancellation
• Determining tax treatment (inside or outside Japan) and keeping transaction records required by law
• Rate limiting against overuse and attacks
• Responding to inquiries (AI may draft a reply, which the Operator checks where needed) and sending important notices (such as changes to the terms or prices)

We do not use the information for other purposes. If we change the purposes, we will announce it in advance as required by law.

4. Retention and deletion

• Your email address is kept, encrypted, until you unsubscribe. After unsubscribing it remains encrypted to check for re-registration and duplicates. To have it deleted completely, contact us below. Deleted data also disappears from backups within 30 days.
• Contract and payment records are kept by Stripe and our payment gateway for the period required by tax and other laws (up to 7 years).
• You can unsubscribe at any time from the "Unsubscribe" link at the bottom of every email.
• Inquiry email addresses and messages are deleted one year after the last message.

5. Provision to third parties

We do not provide personal data to third parties without your consent, except as required by law, to protect life, body or property when consent is hard to obtain, to cooperate with public authorities, or when entrusting processing to the providers below within the stated purposes. We never sell personal information or share it with others for advertising.

6. Service providers

We check each provider's terms and data processing agreements and supervise them as needed so that they handle information properly.

7. Providers in foreign countries

All providers above are U.S. companies, and data may be processed on servers in the U.S. and elsewhere. The U.S. has no comprehensive federal privacy law equivalent to the APPI, but has state laws (such as the California Consumer Privacy Act) and sector-specific laws. See the Personal Information Protection Commission's survey of foreign systems (Japanese). Through contracts and terms with each provider, we maintain a system for them to continuously take measures equivalent to those required by the APPI (Article 28(1)); details are available on request.

8. Security measures

• Organizational: a person responsible for handling is appointed and handling rules are set. Leaks are reported to the Personal Information Protection Commission and the people affected as required by law.
• Personnel: only the Operator can access personal data.
• Physical: data is kept in cloud data centers with controlled access. The Operator's devices are protected with passwords and similar measures.
• Technical: all communication is encrypted (HTTPS). Email addresses are stored encrypted and matched by hash. Admin screens and keys are protected with two-factor authentication and limited to those who need them.
• Understanding foreign systems: as described in 7, we take measures after checking the U.S. system.

9. Cookies, device storage and external transmission

The Service's pages do not use cookies to identify users. When you sign up for or manage the paid plan, you move to Stripe's pages, where Stripe uses cookies for payment and fraud prevention.

The Service's pages do not use mechanisms that send your information from your device to outside companies (external analytics, ad tags, social media buttons, etc.).

10. Children's information

The Service is for businesses and is not intended to collect information about children.

11. Requests for disclosure, correction, deletion, etc.

You can ask us to notify you of the purposes of use, disclose your information (including records of provision to third parties), correct, add to or delete it, stop using or erase it, or stop providing it to third parties. You can unsubscribe yourself at any time from the link in any email. Send requests through the inquiry form (choose "Personal information"; no login needed) or by email to [email protected]. After confirming your identity, we will respond without delay, free of charge.

Because the Service is designed to store as few names and contact details as possible, we may not be able to respond if we cannot confirm your identity. In that case we will tell you why.

12. Changes to this policy

We may change this policy to reflect changes in laws or the Service. Major changes will be announced in the Service.

13. Contact and complaints

Operator: Hiroshi Hasegawa (長谷川 洋志) (trade name "Nearia")
Address: disclosed without delay upon request
Inquiry form: https://support.nearia.io/?service=jpreg
Email: [email protected]