Privacy Policy

1. Data we collect

Account and company data: name, business email, company name, country, website, brand URL, language, and the production information you enter (categories, quantities, countries).

Project data: production requests, tech packs, patterns, photos, messages, quotes, orders, payment status and shipment details, including the content of emails you send to a project address.

Technical data: log data, IP address, browser type and pages visited, collected to operate and secure the service and to measure how the site is used.

2. Purposes and legal bases

We process this data to provide the service you request (performance of a contract or pre-contractual steps), to communicate with you about your projects, to comply with legal obligations such as invoicing and export documentation, and for our legitimate interests in securing the platform, preventing fraud and improving the service. Where required, we ask for your consent.

3. Automated processing

We use AI models to check tech packs, translate and classify messages and detect specification changes. The content you provide for a project may be sent to our AI provider for this purpose. These tools support our staff; they do not make decisions with legal or similarly significant effects on you without human review.

4. Processors and transfers

We use service providers who process data on our behalf: Supabase (database, authentication and file storage, hosted in the EU, Frankfurt), Vercel (hosting and web analytics), Resend (email delivery and receipt) and Anthropic (AI processing). Providers are bound by data processing agreements.

We are based in Japan and access data from Japan. Japan is recognised by the European Commission as providing an adequate level of data protection. Where a provider processes data outside the EU or Japan, we rely on standard contractual clauses or an adequacy decision.

5. Sharing with factories and suppliers

To produce your order we share the necessary product information (tech packs, patterns, specifications, quantities) with the factories and suppliers involved. We share your company name where needed for labels and documents; we do not share your personal contact details with them unless you ask us to.

6. Retention

We keep account and project data for as long as your account is active and thereafter as needed to meet legal obligations (for example accounting records) and to handle claims, typically up to 10 years for order records under Japanese law. Technical logs are kept for a shorter period. You can ask us to delete data that we are not required to keep.

7. Your rights

Depending on your location you may have the right to access, correct, delete or receive a copy of your data, to restrict or object to processing, and to withdraw consent. You can exercise these rights by writing to info@aurumplan.com. You may also lodge a complaint with a supervisory authority in your country.

8. Cookies and analytics

We use only cookies that are necessary to keep you logged in and to remember your language. For site statistics we use Vercel Web Analytics, which does not use cookies and does not track visitors across sites.

9. Security

Data is transmitted over encrypted connections and stored with access controls. Project files are private and served only through time-limited links to authorised users. Access within our team is limited to staff who need it for your projects.

10. Contact and changes

Contact us at info@aurumplan.com or 株式会社オーラムプラン (Aurumplan Inc.), Futaba Bldg. 8B, 1-16-6 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan（〒150-0043 東京都渋谷区道玄坂1-16-6 二葉ビル8b）. We may update this policy; the current version is published on the platform and material changes are announced by email.