Skip to content
Shopwise

Privacy Policy

This page has not yet been reviewed by a legal professional. Its content may be revised before the service's public launch.

Last updated: October 12, 2026

Max Miyazaki ("we", "us") handles the personal information entrusted to us in "Shopwise" (the "Service") as follows, in accordance with Japan's Act on the Protection of Personal Information ("APPI") and other laws.

1. Who we are

  • Operator: Max Miyazaki (sole proprietor, Japan)
  • Address: We will disclose it without delay upon request.
  • Contact: support@getshopwise.com

2. What we hold

  1. Account information: your email address, when the account was created and when you last logged in, and your language setting. There is no password.
  2. Login records: what keeps you logged in (a random string in a browser cookie; our database stores only a value calculated from it). When you request a login, your IP address is used briefly, only in our server's memory and never stored, to stop repeated requests. Login emails are sent and confirmed by an outside login service (WorkOS), which receives your email address, IP address, browser information and the time.
  3. What you enter or import: store names and settings, monthly figures (sales, costs, customer counts and so on), optional data (cash at month end, sales by time of day and by item, item and time-slot names), change history, and the reports made. Files you upload for an import are deleted after 7 days. If you include a person's name in a store name or similar, we treat it as personal information too.
  4. Payment information (only if you choose to pay): the name on receipts (your name or shop name), your billing country and address (as the payment service Stripe gives them to us), the card's issuing country, the date, amount, currency and invoice number of each payment, and the state of your subscription. Card numbers and other card details are handled by Stripe; we never receive them.
  5. Your messages: emails you send us and our replies.

We use no analytics, advertising or tracking (no analytics tools, ad tags, tracking scripts, external fonts or CDN).

3. Why we use it

  1. To provide the Service (login, storing data, making reports, exporting data).
  2. To charge for the Service, issue receipts, and keep payment records for accounting and tax.
  3. To record your billing country as the basis for how Japanese consumption tax applies.
  4. To keep the Service safe (preventing misuse, investigating failures).
  5. To answer your questions and send important notices about the Service (prices, changes to the terms and so on).
  6. To maintain and improve the Service (only through totals that identify no one).

We do not sell your information or use it for advertising.

4. Sharing with others

We do not provide personal information to others without your consent, except:

  1. where the law requires it;
  2. where needed to protect someone's life, body or property and consent is hard to obtain;
  3. when we entrust its handling to the outside services in section 5, as far as needed to run the Service.

5. Outside services we use

Each receives only what it needs for the Service to work.

Service What it receives Why Country / where stored
Fly.io (US company) Everything the Service stores (section 2, items 1–4) Runs the Service and stores its data Stored in Japan (Tokyo); company in the US
Cloudflare (US company) An encrypted copy of the database (without uploaded files) Backups Asia-Pacific location requested (not guaranteed); company in the US. It also answers DNS for our domain; your traffic does not pass through it
WorkOS (US company) Email address; the login request (IP address, browser information, time) Sends and confirms the login code United States
Anthropic (US company) Only the figures the Service calculated for a report and the Service's fixed wording. Never store names, notes, email addresses, item or time-slot names, or uploaded files Writes the report's explanation; suggests what an imported column means (only the column heading and up to 3 cell values) Stored in the US; may be processed outside the US
Stripe (US company) Email address, the name on receipts, billing country and address, the card details you type into Stripe's page, subscription, invoice and payment records Processes payments and renewals, sends receipts and payment emails United States
Sentry (US company) Only the type of an error, where in the program it happened, and the kind of page (e.g. /app/stores/{store_id}). No figures, names or email addresses Tells us something failed United States
Better Stack Only the answer of the Service's health-check address and a regular signal from the server. No customer information Tells us the Service is down Not stated, as it receives no customer information
Resend (US company) Email address; the email's text (plan, price, dates, how to cancel) Sends the confirmation emails for subscribing, cancelling and changing the plan, and the reminder before a yearly renewal United States (sent from Tokyo; records are stored in the US)

6. Transfers to companies outside Japan

As listed in section 5, we entrust personal information to companies in the United States.

  1. The US system: the United States has no comprehensive federal privacy law; there are federal laws for specific sectors and state laws.
  2. What the companies do: each company sets out its measures to protect personal information in its data processing agreement (DPA) and other documents.
  3. We take the steps needed so that these companies keep taking measures equivalent to those APPI requires.

7. How long we keep it

Information How long
Account, stores, monthly figures, reports, change history Until you delete your account (or the store or report). We never delete them automatically
Backups of deleted data Up to 30 days after deletion (encrypted backups; then erased)
Files uploaded for an import 7 days
Server logs (built not to contain customer information) 7 days
Error reports 30 days
Payment records (name on receipts, billing country and address, card's issuing country, date, amount, currency, invoice number) 7 years from the last payment. After you delete your account, only these are kept, for accounting and tax
Records Stripe keeps According to Stripe's privacy policy

8. How we keep it safe

  1. Organisation: only the operator handles personal information. Written rules say what may be sent to outside services and what is never logged.
  2. People: the operator keeps up with the laws and rules on personal information.
  3. Physical: data is stored in outside providers' data centres with physical security.
  4. Technical: all connections are encrypted (HTTPS). Stored data and backups are encrypted. Each customer's data is kept separate and reachable only from that customer's account. Logs and error reports never contain your figures, names or email address. There are no passwords. The administrator cannot see customers' data either.
  5. Foreign environment: we use US companies, as in section 6.

9. Your rights

  1. You can ask us to tell you how we use your personal information, to disclose it, correct, add to or delete it, stop using or erase it, or stop providing it to others.
  2. Much of this you can do yourself in the Service (export your data, delete data and your account).
  3. For anything else, email support@getshopwise.com. After confirming it is you, we respond without delay, free of charge.

10. Cookies

The Service uses only the cookies it needs to work; none for advertising or tracking.

Name Purpose Duration
sw_session Keeps you logged in The login ends 30 days after you last used it (the cookie itself lasts up to the browser limit of 400 days)
sw_csrf Stops forged form submissions Until the browser is closed
sw_lang Remembers your language before you log in 1 year
sw_login Checks the login while it is in progress 10 minutes

11. Customers in the United States

We do not sell your personal information or share it for targeted advertising. To use a right under a US state law, contact us as in section 9.

12. Changes to this policy

We announce the changed text and its effective date in the Service. Important changes are also sent to your registered email address.

13. Contact

support@getshopwise.com

14. Language

The Japanese version of this policy governs. This English version is a translation for reference; where they differ, the Japanese version prevails.

Back to the home page