Xtoon

Privacy Policy

Creator Plus Inc. (hereinafter referred to as the "Company") recognizes the importance of protecting personal information and will comply with the Act on the Protection of Personal Information (hereinafter referred to as the "Personal Information Protection Act") and handle personal information appropriately in accordance with this Privacy Policy.

1. Definition of Personal Information

In this Privacy Policy, personal information refers to personal information as defined in Article 2, Paragraph 1 of the Personal Information Protection Act.

2. Purpose of Use

The Company will use personal information for the following purposes: (1) To provide the Service; (2) To respond to inquiries regarding the Service; (3) To provide information about the Company's products and services; (4) To process payments related to the Service; (5) To respond to violations of the Company's Terms and policies; (6) To notify users of changes to the Terms and policies; (7) To send information about campaigns and events; (8) To analyze usage and improve the Service; (9) To create statistical data in a form that cannot identify individuals; and (10) For other purposes incidental to the above.

3. Collection of Personal Information

1. The Company collects the following personal information: (1) Information provided by users through forms: name, email address, age or date of birth, and other similar information; (2) Information collected through web tracking technologies such as cookies, IP addresses, and access logs: device information, browsing history, and preference information. Note that this information does not include information capable of identifying specific individuals.

2. The Company shall acquire personal information by lawful and fair means.

4. Third-Party Provision

1. The Company will not provide personal information to third parties without the prior consent of the user, except in the following cases: (1) Where required by law; (2) Where necessary to protect the life, health, or property of an individual; (3) Where entrusted to a third party to the extent necessary for the provision of the Service; (4) Where business succession occurs due to merger or other corporate reorganization; or (5) Where necessary to provide information to payment processing companies.

2. When transferring personal information outside Japan or the EEA, the Company will obtain prior consent from the user and provide information about the destination country's data protection regime.

5. Security Management

The Company shall implement necessary and appropriate security measures to prevent leakage, falsification, or loss of personal information.

6. Retention Period

The Company will retain personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. When personal information is no longer necessary, the Company will delete it without undue delay.

7. User Rights

1. Users may request the Company to disclose, correct, add, delete, or suspend the use of their own personal information held by the Company.

2. Such requests shall be made by the means prescribed by the Company.

3. Upon receipt of a request, the Company shall respond within a reasonable period after verifying the identity of the requester.

4. Users shall pay the following fee when requesting disclosure: Fee: JPY 500 + Shipping Fee

8. GDPR — Additional Provisions for EEA and UK Users

The following provisions apply to users located in the European Economic Area (EEA) or the United Kingdom (UK).

8.1 Legal Basis for Processing The Company processes personal data on the following legal bases: - Performance of a contract: Processing necessary to provide the Service; - Consent: Processing based on your explicit consent (e.g., marketing communications, cookies); - Legitimate interests: Processing necessary for the Company's legitimate business interests, provided such interests are not overridden by your rights; and - Compliance with legal obligations: Processing required by applicable law.

8.2 Your Rights under GDPR If you are located in the EEA or UK, you have the following rights: - Right of access: You may request a copy of the personal data we hold about you; - Right to rectification: You may request correction of inaccurate or incomplete personal data; - Right to erasure (Right to be forgotten): You may request deletion of your personal data where there is no legitimate reason for continued processing; - Right to restriction of processing: You may request that we restrict the processing of your personal data; - Right to data portability: You may request transfer of your personal data to another service provider in a structured, commonly used format; - Right to object: You may object to processing based on legitimate interests; and - Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

8.3 International Data Transfers The Company may transfer personal data outside the EEA or UK. Where such transfers occur, the Company will ensure appropriate safeguards are in place in accordance with applicable data protection law.

8.4 EU/UK Representative As the Company is based outside the EEA and UK, we have appointed an EU/UK representative for data protection purposes. For inquiries regarding the processing of your personal data, please contact: Email: [email protected]

8.5 Data Protection Officer For questions regarding data protection, please contact us at: [email protected]

9. Use of Cookies and Tracking Technologies

The Service uses cookies and similar technologies to understand usage patterns and improve the Service. Users may disable cookies through their browser settings, though this may affect the availability of some features.

ServiceInformation TransmittedRecipientPurpose (Company)Purpose (Recipient)
Google AnalyticsDevice info, browsing history, access URLGoogle LLCUsage analysis, service improvementAd delivery and analysis per Google's privacy policy
FirebaseDevice info, user ID, error infoGoogle LLCUsage analysis, push notifications, error analysisAd delivery and analysis per Google's privacy policy
Google AdsAge, gender, interest info, browsing historyGoogle LLCAd delivery and optimizationAd delivery and analysis per Google's privacy policy
X (Share button)Content ID, browsing history, device IDX Corp.SNS integrationAd delivery and analysis per X's privacy policy
Facebook (Share button)Content ID, browsing history, device IDMetaSNS integrationAd delivery and analysis per Meta's privacy policy
Google Tag ManagerContent ID, browsing history, device IDGoogle LLCBrowsing analysis, ad effectiveness, external service integrationAd delivery and analysis per Google's privacy policy
TikTok AdsAge, gender, interest info, browsing historyByteDanceAd delivery and targetingAd delivery and analysis per TikTok's privacy policy

10. Governing Law and Jurisdiction

1. This Privacy Policy shall be interpreted in accordance with the laws of Japan and the United Kingdom.

2. Users agree that the Tokyo District Court shall have exclusive jurisdiction for the first instance over any disputes arising in connection with this Privacy Policy.

11. Contact Information

For inquiries, requests for disclosure, or complaints regarding personal information, please contact:

Creator Plus Inc. 2F Kuwano Building, 6-23-4 Jingumae, Shibuya-ku, Tokyo 150-0001, Japan Operating Manager: Daichi Ota

Inquiry Contact: Phone: 050-1725-8356 Email: [email protected] (Business hours: Weekdays 9:00–18:00 JST)

12. Continuous Improvement

The Company will periodically review its handling of personal information and endeavor to continuously improve its practices. The Company may revise this Privacy Policy as necessary.

【Enacted: June 1, 2026】