Privacy Policy

Prizd ("we," "us," or "our") is a platform for collectors operated under the laws of Japan. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

For information about our business entity as required under Japanese law, please see our Commercial Transaction Act Disclosure (特定商取引法に基づく表記).

By using Prizd, you consent to the data practices described in this policy. If you do not agree with the practices described here, please do not use the Service.

We process your personal information based on the following legal grounds, as applicable under GDPR and other data protection laws:

• Contract Performance: Processing necessary to provide the Service you requested (account management, content hosting, payments).
• Consent: Where you have given explicit consent, such as opting into AI-powered features or marketing communications. You may withdraw consent at any time.
• Legitimate Interests: Processing necessary for our legitimate business interests, including improving the Service, fraud prevention, and security, where these interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including tax, accounting, and law enforcement requirements.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and customer service requests
• Personalize your experience and provide content recommendations
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent or unauthorized activities

We may share your information in the following circumstances:

Prizd is operated from Japan. Your information may be transferred to and processed in countries other than your country of residence. Specifically, your data may be processed in:

• United States — Cloud infrastructure (AWS, Google Cloud), payment processing (Stripe), AI service providers (OpenAI, Anthropic)
• Japan — Primary operations and data storage

When we transfer your information internationally, we take appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EU/EEA.
• Japan's adequacy decision from the European Commission, which recognizes Japan as providing an adequate level of data protection.
• Ensuring that our service providers maintain appropriate security measures and contractual obligations.

We retain your personal information for as long as your account is active or as needed to provide you with the Service.

After you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Some information, such as content you shared publicly or with other users, may remain visible even after account deletion if other users have saved or interacted with it.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Restriction: Request that we restrict processing of your information
• Objection: Object to processing of your personal information
• Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@prizd.app. We will respond to your request within 30 days.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

To exercise your CCPA rights, please contact us at privacy@prizd.app. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

Under Japan's Act on the Protection of Personal Information (APPI), residents of Japan have the following rights:

To exercise your APPI rights, please contact us at privacy@prizd.app. We will respond to your request within 30 days.

Prizd does not knowingly collect personal information from children under the age of 13. If you are under 13, please do not use the Service or provide any personal information.

If you are between the ages of 13 and 18, you may use the Service only with the consent and supervision of a parent or legal guardian. Your parent or guardian must agree to these terms on your behalf.

If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe we have collected information from a child under 13, please contact us at privacy@prizd.app.

In the event of a data breach that affects your personal information, we will take the following steps:

• Notify affected users via email and in-app notification within 72 hours of becoming aware of the breach.
• Report to relevant supervisory authorities as required by applicable law (including Japan's Personal Information Protection Commission and other relevant authorities).
• Provide details about the nature of the breach, the types of data affected, and the measures we are taking to address the breach and mitigate potential harm.
• Recommend steps you can take to protect yourself.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication requirements
• Secure development practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

For material changes, we will provide additional notice via email or in-app notification at least 30 days before the changes take effect. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy, please contact us:

For details about our business entity, see our Commercial Transaction Act Disclosure.