Article 1 (Introduction)
NGUYEN VIET ANH (the "Operator") develops and operates DXSpec (the "Service") as an individual in Japan. This policy describes how personal information is handled.
The Operator will handle personal information in accordance with applicable laws.
Article 2 (Information We Collect)
The Operator collects the following information in the course of providing the Service.
[Account Information] Name, email address, company name, department, phone number, password (stored as a hash)
[Usage Information] Login timestamps, access logs, operation history, features used, browser information, IP address, cookie data
[Payment Information] Credit card information (processed through payment processors; the Operator does not retain card numbers), billing address, transaction history
[Content Information] Design documents, documents, comments, and other data created or stored by customers through the Service
[Inquiry Information] Inquiry details, support correspondence history
Article 3 (Purpose of Use)
The Operator uses collected personal information for the following purposes.
(1) Provision, operation, maintenance, and improvement of the Service
(2) User authentication and account management
(3) Billing and payment processing for service fees
(4) Responding to inquiries and providing support
(5) Notification of important service announcements
(6) Service quality improvement through usage analysis
(7) Development of new features and services
(8) Detection and prevention of unauthorized use
(9) Compliance with legal requirements
Article 4 (Disclosure to Third Parties)
The Operator shall not provide personal information to third parties without customer consent, except in the following cases.
(1) When required by law
(2) When necessary for the protection of life, body, or property and obtaining consent is difficult
(3) When particularly necessary for improving public health or promoting the sound development of children and obtaining consent is difficult
(4) When cooperating with governmental agencies in performing legally prescribed duties
Article 5 (Outsourcing)
The Service uses external providers for hosting, authentication, payments, email delivery, and AI processing.
Implemented integrations include Stripe for payments, Resend for email delivery, Google sign-in, and OpenAI and Gemini for AI features.
Contact the Operator for details about the providers used for your deployment.
Article 6 (Data Storage Location)
Data may be processed by external hosting, payment, email, and AI providers, including outside Japan. Japan-only storage and processing are not guaranteed.
Please confirm data-processing requirements with the Operator before submitting confidential or regulated information.
Article 7 (Retention Period)
Personal information is retained as necessary to operate the Service and satisfy applicable legal obligations.
Contact the Operator for retention and deletion requests. No fixed deletion deadline is currently published.
Article 8 (Security Measures)
The Service implements account authentication, hashed password storage, two-factor authentication, and membership-based access controls.
DXSpec does not currently claim ISO or SOC certification, an independent penetration test, or an uptime SLA.
Article 9 (Customer Rights)
Customers may make the following requests to the Operator.
(1) Request for disclosure of personal information
(2) Request for correction, addition, or deletion of personal information
(3) Request for suspension or erasure of personal information
(4) Request to cease provision of personal information to third parties
Request method: Please contact us through the Service settings page or by email. After identity verification, we will respond within the period prescribed by law.
If we are unable to comply for legal or other reasons, we will notify you with an explanation.
Article 11 (AI Data Processing)
AI features send the input and relevant project context to the enabled external AI provider to generate suggestions.
OpenAI and Gemini integrations are implemented. Claude integration is planned and is not currently available.
The handling of submitted data depends on the provider and its applicable terms. No blanket guarantee about provider retention or training is made.
Review AI outputs before use. See the AI Terms of Use for further details.
Article 12 (Minors' Personal Information)
The Service is not intended for individuals under the age of 16.
If it becomes known that personal information of individuals under 16 has been inadvertently collected, such information shall be promptly deleted.
Parents or guardians who believe their child may have provided personal information to the Operator should contact us.
Article 13 (Changes to This Policy)
The Operator may modify this Policy due to changes in laws, service modifications, or other circumstances.
For material changes, the Operator shall notify customers of the content and effective date through the Service or by email.
The amended Policy shall take effect from the time it is posted on the Service.
Article 14 (Contact Information)
For questions or requests about personal information, contact the Operator:
Operator: NGUYEN VIET ANH
Email: [email protected]
Address: 〒660-0875 兵庫県尼崎市南竹谷町1-24-4, Japan
Phone: 080-1146-1993