Nomilist

Privacy Policy

Last updated 2026-11-04

日本語

Kenya Masuko ("we", "us") sets out this Privacy Policy (the "Policy") for how we handle information about Users and Guests of "Nomilist" (the "Service"). "User" and "Guest" have the meanings given in the Service's Terms of Service.

1. Compliance with laws

We comply with Japan's Act on the Protection of Personal Information and other applicable laws, and handle personal information appropriately.

2. Information we collect

We collect the following information to provide the Service.

  • User account information: email address, password (stored as a hash), venue details such as name and address, and the menu content you register (drinks, dishes, prices, photos, map link, review link).
  • Billing information: paid-plan status and the customer and subscription IDs held by our payment processor, Stripe. We never receive card numbers; Stripe handles them.
  • Guest information: viewing records of Guest pages (date and time, pages viewed, language chosen, browser type). We do not collect Guests' names or contact details.

3. How we use information

We use the information for the following purposes.

  • To provide the Service, verify accounts and bill fees.
  • To answer enquiries and send important notices.
  • To improve the Service. Viewing statistics are counted per venue and per language and do not identify individuals.
  • To prevent misuse.

4. Cookies and access logs

The Service uses cookies to keep you logged in and to remember the language a Guest has chosen. We do not use advertising cookies.

5. Sharing with third parties

Except where required by law, we do not share personal information with third parties without the person's prior consent.

6. Service providers

We entrust the handling of information to the following providers, to the extent needed for the purposes above.

  • Supabase (database and authentication)
  • Stripe (payment processing for paid plans)
  • Vercel (hosting)
  • Google (Gemini) and xAI (AI generation of tasting notes, translations and illustrations). We send menu content such as drink names, dish names and the venue's default language. We do not send venue staff names or email addresses.

7. Retention

When a User account is deleted, its content is deleted within 1 year. Transaction records that must be kept by law are retained for the required period.

8. Security

We take measures to prevent leaks, loss or damage of personal information, including encrypted connections, access controls and careful selection of service providers.

9. Access, correction and deletion

If a person asks us to disclose, correct, add to, delete or stop using their personal information, we will respond in accordance with the law after confirming their identity. Users can review and correct their own content in the dashboard.

10. Changes to this Policy

We may update this Policy. The updated Policy takes effect when posted in the Service.

11. Contact

For questions about this Policy, please contact us below.

Operator
Kenya Masuko
Address
Disclosed without delay upon request
Email
koma.support117@gmail.com