Privacy Policy

1. Controller and scope

The controller is [operator legal name] (contact: [privacy contact email or form URL]). This policy applies to information handled through ZERO-1 EXPO, its profile pages, QR sharing, notifications and support features.

2. Information we handle

• Google account identifiers, name, email address and profile image received when you sign in, subject to the permissions you grant.
• Profile data you enter: username, display name, title, biography, avatar, links, tags and roles.
• Settings, language preference, notification preference, timetable interactions and support messages.
• Security and technical information needed to operate the service, such as session identifiers, timestamps and error records.

We do not request advertising identifiers or collect sensitive information unless clearly explained and lawfully permitted.

3. Purposes

• Authenticate users, maintain sessions and prevent abuse.
• Create and display profiles, QR pages, roles, links and event participation information chosen by the user.
• Send in-service notifications and show timetable, venue and calendar features.
• Respond to support requests, investigate reports and resolve disputes.
• Maintain, secure, troubleshoot and improve the service.
• Measure usage with optional analytics only after consent; we do not use analytics for advertising or cross-site behavioural targeting.
• Meet legal obligations and exercise or defend legal claims.

4. Public disclosure

Information you mark as public, including profile fields, avatar, roles and links, may be viewed, copied and shared by anyone who has the page URL or QR code. Do not publish information you want to keep private.

5. Providers and sharing

We use service providers under contracts or equivalent controls for the purposes above: Google (authentication), Turso/libSQL (database), Cloudflare R2 (avatar storage), Vercel (hosting and delivery), map/calendar providers, and an analytics provider only when enabled with consent. We do not sell personal information or share it for advertising. We may disclose information when required by law, to protect users or the service, or during a business transfer with appropriate safeguards.

6. International processing

Some providers may process information outside Japan. Before launch, the Operator will identify the relevant countries and legal safeguards in the provider agreements and public documentation, and will take the measures required by applicable law.

7. Retention and deletion

We retain information while your account or the relevant purpose continues, then delete or anonymise it within a reasonable period unless retention is required for law, security, backups or dispute resolution. You can request account deletion from settings or support.

8. Security

We use access controls, least-privilege administration, encrypted connections, provider security controls, monitoring and incident response appropriate to the risk. No internet service can guarantee absolute security. If a legally reportable incident occurs, we will investigate, notify affected people and authorities where required, and take steps to prevent recurrence.

9. Cookies and similar storage

Essential cookies maintain login, security and language settings. Optional analytics storage is used only after your choice. Advertising cookies are not used. The available choices and storage periods are described in our Cookie Policy; you can change your choice from the cookie settings control.

10. Your rights and requests

Subject to legal exceptions, you may request notice of purpose, access, correction, addition, deletion, suspension of use, suspension of third-party provision, or disclosure of records as provided by the Act on the Protection of Personal Information. Send a request to [privacy contact email or form URL] with the account identifier, request details and reasonable identity verification. We will respond without undue delay; a lawful fee may apply only if disclosed in advance.

11. Children and changes

Minors should use the service with a parent or legal guardian’s consent where required. We will post revisions with a new effective date. Material changes will be announced through the service or another appropriate method.

12. Contact

Terms of Service · Cookie Policy