Privacy Policy

park13 K.K. (“we”) handles personal information in this service as follows.

1. Information we collect

Uploaded documents (PDFs or images) and their contents; your email address; the name, katakana reading and submission office if you enter them; payment information (card details are collected by our payment provider, and we do not hold them); and access logs.

Documents may contain special care-required personal information (要配慮個人情報), such as criminal records, medical history or race. We collect and use it only to prepare the translation and the certificate of translation, with your consent given when you order. If you order a translation of someone else’s document, we ask you to confirm when you order that you have that person’s consent.

2. Purposes of use

Preparing and providing translations and certificates of translation; payments and refunds; contacting you; verifying issued certificates; preventing misuse; and improving the service (using statistically processed information only).

3. Provision to third parties in foreign countries (Act on the Protection of Personal Information, Article 28)

We provide personal data to the following businesses outside Japan for translation processing, payment, running the application, the database, file storage and sending email. We ask for your consent with each order.

• Translation processing: Anthropic, PBC, in the United States. Under its Commercial Terms, the contents of documents sent to it are not used to train models and are processed under its Data Processing Addendum (DPA). Inputs and outputs are deleted within 30 days, except where needed to address Usage Policy violations or where required by law.
• Payment: Stripe, Inc., in the United States. It is certified to PCI DSS Level 1, the security standard for card data.
• Running the application: Fly.io, Inc., in the United States (servers located in Japan). It has been audited under SOC 2 Type 2 and uses data centres certified to ISO 27001.
• Database: Neon, in the United States (data stored in Singapore). It has been audited under SOC 2 Type 2, is certified to ISO 27001 and ISO 27701, and encrypts stored data (AES-256).
• File storage: Tigris Data, Inc., in the United States (data stored in Japan). It has been audited under SOC 2 Type II and encrypts stored data (AES-256).
• Sending email and receiving enquiries by email: Resend, in the United States. It has been audited under SOC 2 Type II and encrypts stored data.
• Measuring advertising effectiveness: Google LLC, in the United States (see section 7).
• Understanding how the website is used: Cloudflare, Inc., in the United States (see section 7).

Singapore has a comprehensive personal data protection regime under the Personal Data Protection Act 2012. The United States has no comprehensive personal data protection law equivalent to Japan’s Act on the Protection of Personal Information, but it has regulation such as state laws. Each business’s measures are as stated in its published materials as of October 2026. For details, see each business’s privacy policy and security materials.

We may change our translation processor to test quality or cost. Before changing it, we will update this policy, and each order uses only the processors listed in this policy at the time of the order. If the new processor is in a country other than the United States, this policy will state that country, information about its personal data protection system, and the measures the processor takes.

4. Retention

Uploaded documents and the translation and certificate files we produce are deleted automatically 7 days after they are created. Documents for which payment was not completed are deleted after 1 day. The certificate number, issue date, page count and file identifiers (hash values) are kept with no time limit so that certificates can be verified (they do not include the document’s contents or anyone’s name). Accounting records are kept for the period required by law.

5. Security measures

Our measures include encrypted connections, storage in private storage, download links that are valid only for a short time, and limited access rights. Our translation processor processes documents only to translate them, and we do not permit it to use them for training.

6. Requests for disclosure and enquiries

To request disclosure, correction, deletion or similar action on retained personal data, contact support@mail.park13.digital.

On request, we will tell you our address and the name of our representative by email without delay (Act on the Protection of Personal Information, Article 32(1)).

7. Cookies and information sent to third parties

To measure the effectiveness of our advertising, we have placed an advertising tag from Google LLC (Google Ads) on this service’s website. As a result, the following information is sent from your browser to Google LLC.

• Recipient: Google LLC (United States)
• Information sent: the URL of the pages you view (order page numbers, access details and the like are removed before sending), identifiers such as cookies, your IP address, browser and device information, and, for payments that came through an ad, the order amount and order identifier
• Purpose: measuring advertising effectiveness (which ad an order came from)

We do not send your name, your email address, or uploaded documents or their contents. For how Google handles the information, see Google’s Privacy Policy. You can turn off ad personalisation in Google’s ad settings, and you can refuse or delete cookies in your browser settings.

To understand how our website is used, we have placed an analytics tool from Cloudflare, Inc. (Cloudflare Web Analytics) on this service’s website. As a result, the following information is sent from your browser to Cloudflare, Inc. It is not placed on order pages or on certificate verification results.

• Recipient: Cloudflare, Inc. (United States)
• Information sent: the URLs of the pages you view and of the referring page (in both cases without the part after “?”), your IP address, browser and device information, and page loading performance
• Purpose: understanding and improving how the website is used (statistics such as visits, pages viewed and referring sites)

No cookies or similar identifiers are used. Cloudflare states that it does not use this information to identify or track visitors. For how Cloudflare handles the information, see Cloudflare’s Privacy Policy.