Privacy Policy

Websites at https://*.boards.jp and the web service “BOARDS.JP” (together, the “Service”) respect users’ privacy and strive to protect personal information. This Privacy Policy explains how personal information is handled.

Definition of personal information

“Personal information” means information about a living individual that can identify that individual through their name, date of birth, contact details, or other descriptions contained in the information. It also includes information that can readily be matched with other information to identify an individual.

How we collect personal information

The Service may ask users for personal information such as their name, email address, and telephone number when they register. The Service may also collect transaction records in connection with purchases of products or provision of services between the Service and users.

Purposes of collecting and using personal information

The Service collects and uses personal information for the following purposes:

  • To provide and operate the Service.
  • To respond to inquiries from users.
  • To send information about new services, updates, campaigns, and similar matters.
  • To address conduct that violates the Terms of Service.
  • To provide other services that are useful and necessary for users.

Information collected through LINE Login

The Service has introduced LINE Login to make logging in more convenient and secure for users. Through this feature, the Service collects only the user identification ID from LINE. This lets users log in quickly and securely with their LINE accounts. The collected ID is used only for account creation and for measures against disruptive behavior within the Service. The Service does not disclose or provide this information to third parties.

Login by telephone number or email address

In addition to LINE Login, the Service offers login methods using a telephone number or email address. These methods let users access their accounts and use the Service in multiple ways.

When users log in by telephone number or email address, this information is encrypted for security and securely stored in an external cloud service. The Service uses this information only for identity verification and service provision, including account verification, password resets, and user support.

To protect the security of user information, we take several security measures, including data encryption, access controls, security audits, and regular security training for employees.

Disclosure of personal information to third parties

The Service does not disclose users’ personal information to third parties without their consent, except in the following cases:

  • When required by law.
  • When necessary to protect a person’s life, body, or property.
  • When particularly necessary to improve public health or promote the sound development of children.
  • When necessary to cooperate with a national or local government body, or a party entrusted by such a body, in carrying out duties prescribed by law.
  • When the possibility or purpose of disclosure or use to a third party, and the items of data to be provided to that party, have been specified in advance.

Management of personal information

To protect the accuracy and security of users’ personal information, the Service takes necessary and appropriate measures, including maintaining and improving its security systems and training employees, to prevent unauthorized access, loss, destruction, alteration, or leakage of personal information.

Information management

Information collected from users is protected using appropriate security measures. We take appropriate measures to prevent unauthorized access, loss, damage, alteration, and leakage of information. These measures include:

  • Data encryption: Users’ personal information is encrypted during transmission and storage. This includes the use of industry-standard SSL (Secure Socket Layer) technology.
  • Access management: Access to our systems is strictly controlled, and only the minimum necessary employees are permitted to access user information.
  • Regular security audits: We regularly conduct security audits to identify and address system vulnerabilities.
  • Security training: Our employees receive regular security training concerning the handling of personal information and are kept informed of the latest security practices.

NIERU Board Settings Assistant beta and external AI integrations

If a board administrator chooses to use the “NIERU Board Settings Assistant beta” or a compatible external AI, NIERU’s settings draft API handles the following information to the extent necessary to verify authority to manage the board and create proposed settings:

  • The URL of the target board, a connection code valid for 10 minutes and one use, and a connection token issued after connection that is valid for 60 minutes.
  • The setting keys that the AI requests to view and their current values.
  • Settings drafts created by the AI and saved for review in the administration screen.
  • The “request for creating a settings draft” sent to the settings draft API by the AI or an external client when a draft is created.

Connection codes and connection tokens are not stored in plain text; only hashes for verification are stored. Settings drafts remain valid for 24 hours and cannot be used after they expire. Administrators can disconnect at any time from the administration screen.

When a draft is created, the “request for creating a settings draft” that directly relates to the proposed settings is sent to NIERU and stored in encrypted form. NIERU operators may review it for quality improvement, troubleshooting, and prevention of misuse. NIERU does not automatically obtain the entire ChatGPT conversation, the AI’s responses, reasoning, or internal instructions, connection codes or tokens, or current setting values and add them to the request.

Requests are periodically deleted from the operational database once 30 days have passed since submission. Encrypted data included in automated RDS backups may remain for up to 7 days after deletion from the operational database. Disconnecting or discarding a draft does not change this retention period for a request that has already been saved.

This feature is not intended to send administrator passwords, registered email addresses, or board post content to an AI. Users must not include personal information, authentication information, advertising tags, administrator passwords, connection codes, API keys, or other secrets in proposed settings or requests to create settings drafts. The Service rejects saving a draft if it detects an obvious connection code, authentication information, or similar secret. AI-created drafts are not applied automatically; settings change only when an administrator reviews the differences in the administration screen and explicitly applies the draft.

When using the ChatGPT version, information entered by users into ChatGPT and information needed to run Actions passes through OpenAI’s service. See the guidance in ChatGPT and this section for information on how requests sent to NIERU when a draft is created are handled. For information on OpenAI’s handling of data, see OpenAI’s Privacy Policy (Japanese).

Use of Microsoft Clarity

The Service uses Microsoft Clarity to analyze user behavior data. Clarity records users’ clicks, scrolling, and other actions to help improve the user experience.

The data collected includes:

  • Page views and time spent viewing pages.
  • Click and scroll activity.
  • Browser and device information.

This data is collected anonymously and does not include information that identifies individuals.

Users can opt out of Clarity’s data collection by changing their browser settings. For details, see the Microsoft Clarity Privacy Statement (Japanese).

Consent

By using the Service, users are deemed to consent to the collection and use of information described in this Privacy Policy.

Use of cookies

The Service may use cookies to improve the user experience. By continuing to use the Service, users are also deemed to consent to the use of cookies. For details, see the Cookie Policy (Japanese).

Use of Google AdSense

The Service uses Google AdSense to generate advertising revenue. Through AdSense, Google and its partners serve advertisements on the Service and may store cookies in users’ browsers.

  • Data collection and use: Google AdSense may display relevant advertisements based on users’ visit history on the Service and other websites.
  • Use of cookies: Google AdSense may store cookies in users’ browsers to collect information about advertising displayed to them. This may include their past visits and click history on the Service. Users may refuse cookies through their browser settings. For details, see the Cookie Policy (Japanese).
  • Other information: For details about Google’s use of data, see Google’s Privacy Policy (Japanese) and Google’s Advertising Policy (Japanese).

Changes to this Privacy Policy

The Service may change this Privacy Policy as needed. The revised Privacy Policy takes effect when it is posted on the Service.

Contact

For questions about this Privacy Policy, please use the privacy inquiry form (Japanese).