Privacy policy

English translation of the Japanese privacy policy. Policy version: 2026-10-29-paid-v1. Effective October 29, 2026.

NISHIKI LLC handles the following information to provide PicPrep.

Information and purposes

Device identification is based on an identifier created by the app. The server uses hashing and similar measures, but information linked to orders is not simply treated as anonymous.

Image compression and conversion run on your PC. The app does not upload images to our server for these operations. If you provide an image for support, remove unnecessary personal information and use the method we specify.

Stripe handles card payment information. Our license database does not store full card numbers or card security codes. Also consult Stripe’s policies.

External services

• Stripe: payments, orders and refunds.
• Cloudflare Workers / D1: license API, order and activation data, access protection.
• Resend: license notification and reissuance emails.
• Xserver: website hosting, receiving support email and replies.

These services may store or process information outside Japan. Resend states that its principal processing occurs in the United States. Cloudflare APAC placement or an email sending region alone does not mean Japan-only processing. See the providers’ processing terms, safeguards and subprocessors linked below.

Retention and security

We use access control, protected connections and encryption or matching hashes where needed. The app uses operating-system protection for stored activation information.

Order and accounting records follow applicable law and company retention rules. License and activation data is kept as needed to provide usage rights, manage device limits and respond to misuse.

Inquiries and reply histories are normally retained for two years after resolution, then unnecessary information is reviewed and deleted. Ongoing cases, disputes or legal retention requirements may require longer storage for those purposes. Connection and delivery logs follow the relevant service settings and retention conditions.

For deletion requests, contact us. Where records must be retained by law or are necessary to maintain a license, we explain the scope of deletion and its effect on use.

Contact form

Google Forms collects a reply email address, optional name, inquiry type and message, and optional order number and purchase date. We use this to handle and reply to your request. Google stores and processes submissions; our staff reviews them. Notifications may be emailed to our support mailbox; receiving and replying use Xserver.

Opening the form takes you to Google’s service, where Google cookies may be used and information may be processed outside Japan. See Google’s privacy policy. We do not send form contents to Google Analytics.

Cookies

Cookies associate the purchase browser with the purchase result. Payment and hosting providers may use necessary cookies. We do not use advertising tracking features. Analytics is described below.

Access, correction and other requests

Contact us about personal information we hold. After verifying identity, we respond under applicable law. Do not email full license keys, card numbers or passwords for verification.

Business: NISHIKI LLC (合同会社NISHIKI). Representative: Koichi Kuze (久世 晃一). Address: 9-1-7 Akasaka, Minato-ku, Tokyo 107-0052, Japan.

Provider information

• Resend DPA and subprocessors
• Cloudflare DPA
• Stripe DPA and privacy policy

Google Analytics

Only if you consent, we use Google Analytics (GA4), provided by Google LLC, to understand site use and improve it. Before consent, the Google Analytics script is not loaded and no analytics information is sent to Google.

With consent, cookies and related technologies send page views, download-button clicks (app version, page language and button position), referrer, time, browser, operating system, screen size, approximate region, IP address and similar information to Google. Google signals and advertising personalization are disabled.

We limit reported page URLs to the origin and path, removing query strings and fragments, and do not intentionally send email addresses or license keys.

Google may process and store this information outside Japan, including in the United States. See Google’s privacy policy and how Google uses information from partner sites.

Use the first-visit notice or “Analytics settings” at the bottom left to accept, decline or change your choice. Withdrawing consent stops further measurement and removes this site’s Google Analytics cookies such as _ga. Your choice is stored in the browser and requested again after 180 days. Previously sent information remains subject to Google’s retention settings.