Privacy Policy

About the Handling of Personal Information

Hariini Inc. (hereinafter the “Company”) recognizes the importance of customers’ personal information. In compliance with the Act on the Protection of Personal Information (hereinafter the “APPI”) and other related laws and regulations, the Company has established this Privacy Policy (hereinafter this “Policy”) as set out below and strives to acquire, use, manage and protect personal information appropriately.

This Policy applies to the websites, photography services, survey systems and other services operated or provided by the Company.

Article 1: Acquisition of Personal Information

In providing its services, the Company may acquire the following information to the extent necessary.

1.: Contact information such as name, email address and telephone number

2.: Information relating to inquiries, reservations and applications

3.: Details and timing of shoots, and service usage history

4.: Survey responses, ratings, opinions and comments

5.: Text, images and other information that customers send to the Company

6.: IP address, browser information, cookies, access history and other service usage information

7.: Any other information customers provide to the Company

The Company acquires personal information by lawful and fair means.

Article 2: Purposes of Use of Personal Information

The Company uses the personal information it acquires for the following purposes.

1.: Providing the Company’s services, managing reservations, performing contracts and contacting customers

2.: Responding to inquiries, consultations and requests

3.: Improving the quality of photography services and other offerings

4.: Conducting surveys, analyzing responses and researching customer satisfaction

5.: Providing and improving services using customers’ opinions and comments

6.: Providing writing assistance, information organization and related functions using AI and other technologies

7.: Analyzing the use of the Company’s services and planning and developing new services

8.: Sending notices, campaign information and other announcements from the Company

9.: Preventing misuse, maintaining systems and ensuring security

10.: Responding as required by law and protecting the rights and interests of the Company

Except where permitted by law, the Company will obtain the necessary consent in advance before handling personal information beyond the scope necessary to achieve the above purposes of use.

Article 3: Handling of Survey Information

The Company may ask customers who have used its services to cooperate with a survey.

Responses obtained are used to improve service quality, analyze customer opinions, improve staff conduct, plan and develop services, and provide related writing assistance.

In principle, survey responses are managed internally by the Company and will not be made public in a form linked to a customer’s name or other personal information without the customer’s permission.

Content that customers post on external review sites or similar services on their own is governed by the terms of use and privacy policy of the relevant service.

Article 4: Services Using AI

The Company may use AI services provided by external providers to provide and improve its services and enhance customer convenience.

AI-based functions use only the portion of survey responses and other information provided by customers that is necessary to provide the relevant function.

The review writing assistance function currently planned uses the details of the customer’s shoot and the text entered in the “What you liked” field of the survey.

The name field, rating score, responses regarding improvements, shoot date and IP address are not sent to external AI services for the purpose of generating review text.

In addition, email addresses, telephone numbers, addresses and similar information contained in free-text responses are removed or replaced before sending. However, it may not be possible to completely remove all personal information contained in free-text responses.

The Company sends information to external AI services for this function only after providing the necessary explanation and obtaining the necessary consent from the customer.

Customers can review and edit text created by AI themselves. The Company will never automatically post to external review sites on a customer’s behalf.

Customers who do not consent to the use of AI can still answer the survey.

Article 5: Provision of Information to External AI Services

The Company uses the following external service to provide AI-based functions.

・: Service provider: Anthropic PBC

・: Country: United States of America

・: Service used: Anthropic API

・: Purpose of use: Writing assistance based on survey responses

・: Information sent: Details of the shoot and text entered in the “What you liked” field

Under the standard handling for commercial services published by Anthropic, input information and generated output are, in principle, not used to train AI models.

In addition, with the Anthropic API, input information and generated output are, in principle, deleted within 30 days. However, they may exceptionally be retained for reasons such as legal compliance or prevention of misuse.

This handling is subject to Anthropic’s contractual terms and privacy provisions.

Article 6: Provision of Personal Data to Business Operators in Foreign Countries

In connection with AI-based functions, the Company may provide customers’ personal data to business operators located in foreign countries. In such cases, the Company will obtain the customer’s consent in advance pursuant to Article 28 of the APPI. Before obtaining consent, the Company provides the following information.

(1) Name of the country where the recipient is located

United States of America (recipient: Anthropic PBC)

(2) Personal information protection system in that country

In the United States, there is no comprehensive federal law on the protection of personal information; personal information is protected by sector-specific federal laws (such as the Federal Trade Commission Act) and state laws (such as the California Consumer Privacy Act). Consequently, for some of the obligations of business operators and rights of individuals corresponding to the eight principles of the OECD Privacy Guidelines, there may be no provisions equivalent to those of Japan’s APPI.

For details, please refer to the “Survey on Personal Information Protection Systems in Foreign Countries” (United States) published on the website of the Personal Information Protection Commission of Japan.

(3) Measures taken by the recipient to protect personal information

Anthropic PBC takes measures corresponding to the eight principles of the OECD Privacy Guidelines. Specifically, Anthropic publicly states that, under the contractual terms of its commercial services, it does not in principle use input information or generated output to train AI models, limits the data retention period, implements security measures such as encryption in transit and at rest and access restrictions, and has obtained third-party information security certifications (such as SOC 2 Type II and ISO/IEC 27001).

If the above information changes, the Company will revise this Policy and give notice.

Article 7: Provision of Personal Information to Third Parties

Except in the following cases, the Company will not provide personal data it has acquired to third parties without the customer’s consent.

1.: Where the necessary consent has been obtained from the customer

2.: Where required by law

3.: Where necessary to protect a person’s life, body or property and it is difficult to obtain the individual’s consent

4.: Other cases permitted under the APPI

The Company may entrust the handling of personal data to external business operators to the extent necessary to achieve the purposes of use. In such cases, the Company selects contractors appropriately and supervises them as necessary and appropriate.

Entrustment to business operators located in foreign countries is also subject to the provisions of the APPI concerning provision to third parties in foreign countries.

Article 8: Security Management of Personal Information

To prevent leakage, loss, damage, unauthorized access and other risks to personal information, the Company takes necessary and appropriate security measures, including the following.

1.: Establishment of a basic policy: The Company has established this Policy for the proper handling of personal data.

2.: Rules for handling: The Company has defined handling methods and responsible persons for each stage, including acquisition, use, storage, provision and deletion.

3.: Organizational security measures: The Company has appointed a person responsible for handling personal information and established a reporting system for cases where facts in violation of laws or this Policy are identified.

4.: Human security measures: The Company informs its employees of matters to note when handling personal data.

5.: Physical security measures: The Company takes measures to prevent theft or loss of equipment and documents used to handle personal data.

6.: Technical security measures: The Company restricts access rights and has introduced mechanisms to protect against unauthorized external access and malicious software.

7.: Understanding the external environment: When handling personal data in a foreign country, the Company takes security measures after understanding that country’s personal information protection system.

The Company also supervises employees and contractors who handle personal information as necessary and appropriate.

Article 9: Retention Period of Personal Information

The Company retains personal information it acquires only for the period necessary to achieve the purposes of use or the period required by law.

Personal information that no longer needs to be retained will be deleted or its use suspended by appropriate methods in accordance with laws and the Company’s management policy.

Information sent to external services is handled in accordance with the contractual terms and data retention policies of those services.

Article 10: Use of Cookies and Similar Technologies

The Company may use cookies and other similar technologies to improve the convenience of its websites and services, analyze usage, deliver advertising and ensure security.

Cookies may include information such as website browsing status, access history and information about the device used.

The Company currently uses the following tools. For the handling of information acquired by each tool, please refer to the privacy policy of each provider.

・: Google Analytics (Google LLC): Analysis of site access
Google Privacy Policy / Google Analytics Opt-out Browser Add-on

・: Google Ads (Google LLC): Ad delivery and performance measurement
Google Ad Settings

・: Meta Pixel (Meta Platforms, Inc.): Ad delivery and performance measurement
Meta Privacy Policy

Customers can disable cookies through their browser settings. However, some functions may not work properly.

Article 11: Disclosure, Correction, Suspension of Use, etc. of Personal Information

Under the APPI, customers may request notification of the purposes of use, disclosure, correction, addition, deletion, suspension of use, erasure, or cessation of provision to third parties of their own retained personal data held by the Company.

After verifying the identity of the individual, the Company will respond appropriately in accordance with the law.

If you wish to make such a request, please contact the inquiry desk listed at the end of this Policy.

Article 12: External Websites

The Company’s websites and services may contain links to websites operated by Google and other external business operators.

For the handling of personal information on external websites, please refer to the privacy policy of each operator.

Article 13: Changes to This Privacy Policy

The Company may revise this Policy in response to changes in laws, changes in service content or as otherwise necessary.

The revised content and effective date will be announced on the Company’s website or by other appropriate means.

For changes that require customers’ consent under law, the Company will obtain the necessary consent.

Article 14: Business Information and Inquiry Desk

For questions, consultations, complaints and requests for disclosure, etc. regarding the handling of personal information, please contact the following.

Hariini Inc.
Address: Ishikawa Bldg. 2F, 4-25-1 Kuramae, Taito-ku, Tokyo 111-0051, Japan
Representative Director: Aozora Sakai
Person responsible for handling personal information: Aozora Sakai
Email: info@libars.jp

Established: August 31, 2023
Revised: October 3, 2026