Privacy Policy
ReceiptRoller Inc. (hereinafter referred to as "the Company") establishes this privacy policy (hereinafter referred to as "this Policy") regarding the handling of personal information of users in relation to the services provided by the Company (hereinafter referred to as "the Services").
This Policy covers every product in the AB family — AB Projects, AB Sales and AB Support. Where something in this Policy applies to only some of those products it is labelled with the product name; anything not labelled applies to all of them.
Article 1 (Collection of Personal Information)
The Company may collect personal information such as name, email address, phone number, and address when users use the Services. Additionally, the Company may automatically collect history information, location data, cookies, and other data when users use the Services.
(AB Support) Where an organization uses the Services to operate a customer support desk, the Company also processes the content of messages sent to that desk by the organization's own customers — including any personal information those customers choose to include — together with the email address or phone number the message arrived from. The organization is the controller of that information; the Company processes it on the organization's behalf.
Article 2 (Purpose of Use of Personal Information)
The purposes for which the Company uses personal information are as follows:
- To provide and operate the Services
- To respond to inquiries from users
- To provide information about the Company's services to users
- To improve the Services and develop new services
- To prevent fraudulent activities and security issues
- Other purposes related to the above purposes
Article 3 (Provision of Personal Information to Third Parties)
The Company will not provide personal information to third parties without obtaining the user's consent. However, the following exceptions apply:
- When required by law
- When necessary for the protection of a person's life, body, or property, and it is difficult to obtain the individual's consent
- When particularly necessary for the improvement of public health or the promotion of the sound development of children, and it is difficult to obtain the individual's consent
- When it is necessary to cooperate with a national or local public agency in carrying out administrative duties based on law, and obtaining the individual's consent may interfere with the execution of such duties
Entrusting personal information to a service provider that processes it on the Company's behalf, as described in Article 4, is not a provision to a third party under this Article.
Article 4 (Entrustment to Service Providers)
The Company entrusts the handling of personal information to the service providers listed below, to the extent necessary to provide the Services. Each is bound by contract to protect the information and to process it only on the Company's instructions.
| Service provider | Product | What it processes | Why |
|---|---|---|---|
| Microsoft Corporation | All | Account and sign-in information, application and database content, stored files, and search indexes. Where an organization connects a mailbox to a support desk, the contents of that mailbox. | Hosting and operating the Services on Microsoft Azure, sign-in through Microsoft Entra ID, and mailbox synchronization through Microsoft Graph. |
| OpenAI, L.L.C. | All | The content of messages, tickets, notes and documents submitted for AI assistance. | Generating answers, summaries and suggested replies. Content sent for this purpose is not used to train the provider's models. |
| Google LLC | AB Projects, AB Sales | Publicly available business information and the search queries used to find it; meeting transcripts submitted for summarisation or task extraction. | Researching companies and websites, summarising meetings, and drafting replies and tasks. |
| Twilio Inc. (SendGrid) | All | Recipient email addresses and message content. | Delivering notification and transactional email. |
| Stripe, Inc. | All | Billing contact details and payment information. | Processing subscription payments. Card details are provided to Stripe directly and are not stored by the Company. |
| Vonage Holdings Corp. | AB Support | Phone numbers and message content for SMS and WhatsApp conversations, and the business registration details described in Article 5. | Delivering and receiving customer messages, and verifying an organization's messaging number with telecommunications carriers. |
Article 5 (Business Verification Information — AB Support)
Telecommunications carriers require a business messaging number to be verified before it can be used. Where an organization chooses to verify a number through the Services, it submits business registration details — the legal entity name, a business tax identifier, the registered address, and the name, email address and telephone number of a contact person.
These details are transmitted to the messaging provider named in Article 4 and, through that provider, to the relevant telecommunications carriers and registries, for the sole purpose of that verification. The Company does not retain them. Only the resulting registration reference, its status, and the number it relates to are stored in the Services.
Article 6 (Transfers Outside the Country of Collection)
Several of the service providers listed in Article 4 are established outside Japan, including in the United States, and personal information entrusted to them may be processed in those countries. Where personal information is transferred outside the country in which it was collected, the Company takes the measures required by the applicable data protection law of that country, including entering into the contractual safeguards those laws require.
Article 7 (Disclosure, Correction, and Deletion of Personal Information)
Users may request the Company to disclose, correct, or delete their personal information. The Company will respond promptly to such requests. However, this does not apply if disclosure is not possible based on laws or if it significantly interferes with business operations.
Where the Company processes information on behalf of an organization using the Services, requests relating to that information should be directed to that organization; the Company will assist the organization in responding.
Article 8 (Management of Personal Information)
The Company will appropriately manage personal information and implement necessary security measures to prevent unauthorized access, loss, destruction, alteration, or leakage.
Article 9 (Use of Cookies)
The Company may use cookies for the analysis of user activity and the improvement of services. Users may refuse to accept cookies by adjusting their browser settings. However, if cookies are disabled, some features of the Services may become unavailable.
Article 10 (Changes to the Privacy Policy)
The Company may change the content of this Policy. The updated privacy policy will become effective when it is posted on the Services.
Article 11 (Inquiries)
If you have any questions about this Policy, please contact us via the inquiry form here, or write to us at the address below.
ReceiptRoller Inc.
1535 Kawakami, Iizuna Town, Kamiminochi District, Nagano Prefecture 389-1226, Japan