Privacy Policy

1. Operator and Personal Information Manager

The operator that runs the Service and manages personal information is as follows. Management of personal information protection is carried out by the operator, M-Assets Corporation.

• Business name: M-Assets Corporation
• Address: 6-1-21 Kamisugi, Aoba-ku, Sendai, Miyagi, Japan
• Personal information management: the operator (M-Assets Corporation)

2. Information We Collect

In providing the Service, the Company collects the following information.

• Account information (email address, display name, etc.)
• Content posted by users (records of living specimens, photographs, claims about provenance and lineage, files attached as evidence, etc.)
• The content of inquiries
• Access logs, cookies, and device/browser information

3. Purposes of Use

The Company uses the information it collects for the following purposes.

• Providing and operating the Service
• Verifying the identity of users
• Responding to inquiries
• Preventing improper use and ensuring security
• Improving the Service and developing new features
• Sending important notices

4. Provision to and Outsourcing to External Services

In operating the Service, the Company uses the following external services. It entrusts the handling of information to these processors only to the extent necessary to achieve the purposes of use. Except as required by law and similar cases, the Company does not provide personal information to third parties without the user's consent.

• Cloudflare, Inc. (content delivery, CDN, DDoS protection)
• Supabase (database infrastructure; servers may be located outside Japan)
• Resend (sending email)
• Anthropic (AI generation of drafts and candidate entries). As a matter of policy, we do not send personal information or private evidence files as input to the AI.

5. Handling of Evidence Files (Private Attachments)

Private attachments such as evidence files that users attach to verify provenance or lineage are stored in private storage and are delivered only to the user and the Company's administrators via signed URLs. They are not stored as public images or public URLs.

6. Use of Cookies

The Service uses cookies necessary for session management, such as maintaining login state. It does not use cookies for advertising purposes.

7. Retention and Deletion

The Company retains information for the period necessary to achieve the purposes of use. When a member withdraws, we delete personal information and private medical/evidence files. However, lineage information (the chain of provenance and pedigree) that is necessary to preserve other users' records may be retained in a form that does not identify individuals.

8. Requests for Disclosure, Correction, Deletion, etc.

Users may request disclosure, correction, suspension of use, or deletion of their own personal information held by the Company. To make a request, please contact us at the email address below or via the contact form.

support@m.reefbook.jp

→ Contact form

9. Security Management Measures

To prevent the leakage, loss, or damage of personal information, the Company implements security management measures such as access control, encryption of communications, and recording of operation and audit logs.

10. Revisions to this Policy

The Company may revise this Policy as necessary. The revised content applies from the time it is posted on the Service.