Privacy Policy

1. Who we are

This Privacy Policy explains how MaidLink, an information site about maid cafes, concept cafes and similar venues (the "Service"), handles personal information, in accordance with Japan's Act on the Protection of Personal Information (APPI) and other applicable laws.

The Service is operated by Kurayami AI (kurayami.ai), a sole proprietorship based in Mexico ("we"). We will disclose our address and representative without delay upon request, as required by law. Contact: hello@maidlink.jp.

2. Information we collect

We collect the following information as needed to provide the Service.

• Browsing information: time of access, pages viewed, referrer, device and browser type. Your IP address is temporarily recorded in our hosting provider's access logs. For our own view and click counts we store only an irreversible hash of your IP address and browser information combined with a value that changes every day; we never store the IP address itself. • Cookies and similar technologies: for analytics (section 5) and to keep you signed in. • Location: only if you allow the "Near me" feature, we receive your device's approximate location, use it solely to find nearby venues, and do not store it in our database. • Information you send through forms: correction reports, requests to list a venue, advertising and listing inquiries (name, email address, venue name, etc.), and staff listing applications (stage name, workplace, X and Instagram handles). • Account information: your LINE identifier and display name if you sign in with LINE, or your email address if you sign in by email; and any reviews you post. • Messages: emails and X (Twitter) direct messages you send us, and our records of them.

Venue names, addresses, hours and similar details are information venues publish as businesses; we take them from their official websites and social media (see our Listing Policy).

3. How we use it

• To provide, display and improve the Service and investigate problems • To check and correct listings and handle listing and removal requests • To review and publish staff listing applications • To answer inquiries and send messages such as sign-in codes • To produce traffic statistics (which, in non-identifying form, we may share with listed venues) • To prevent abuse and spam and enforce our Terms of Service • To comply with the law

4. Information that is public

The following is visible to anyone on the Service. Reviews: your display name and the review. Staff listings: the stage name, workplace, X and Instagram handles that you submitted and we approved. Please do not send information you do not want published. We will delete it on request.

5. Analytics

We use Google Analytics (Google LLC) and Vercel Web Analytics (Vercel Inc.). Google Analytics uses cookies to collect usage data, which Google handles under its privacy policy; you can stop it by disabling cookies in your browser or with Google's Analytics opt-out browser add-on. Vercel Web Analytics does not use cookies and counts visits without identifying individuals.

6. Service providers and transfers outside Japan

We entrust the handling of personal data, as needed, to: Supabase, Inc. (database), Vercel Inc. (hosting), Resend, Inc. (email delivery), Google LLC (analytics) and LY Corporation (LINE sign-in). Their servers may be located outside Japan, including in the United States.

We are based outside Japan (in Mexico), so personal data collected through the Service is handled outside Japan by us and by the providers above. Under Article 28 of the APPI, we have put in place measures, including contracts with these providers, consistent with the purposes of the APPI. Information on other countries' data protection systems is available from Japan's Personal Information Protection Commission, and you may ask us for information about those systems and our measures.

7. Disclosure to third parties

We do not provide personal data to third parties without your consent, except where required by law, where necessary to protect life, body or property and consent is hard to obtain, or as otherwise permitted by the APPI. Entrusting providers under section 6 is not such a provision.

8. Security

We protect personal data against leaks, loss and damage with measures such as encrypted connections (HTTPS), restricted database access, limiting who can use the admin console, sign-in methods that do not store passwords, and collecting as little as we need.

9. Retention

We keep personal data only as long as needed for its purposes and then delete it without delay. View-count hashes are kept only as long as needed for statistics, and rejected staff applications only as long as needed for review and its records. When you ask us to delete an account or a listing, we delete it except where the law requires us to keep it.

10. Your rights

You may ask us to tell you how we use your personal data, disclose it, correct, add to or delete it, stop using or erase it, stop providing it to third parties, and disclose records of such provision. Contact hello@maidlink.jp. We will verify your identity and respond without delay as required by law, free of charge.

11. Age

Creating an account, posting reviews and applying for a staff listing are limited to persons aged 18 or older.

12. Changes to this Policy

We may update this Policy to reflect changes in law or in the Service. Changes take effect when posted on the Service.

13. Contact

For questions or complaints about how we handle personal information, contact hello@maidlink.jp.