Privacy Policy
This policy explains what Japan Home Atlas collects, why it is used, which providers help operate the service, and the choices available to you.
1 · Information we collect
You can visit public information pages without an account. Using the atlas, paid access, alerts, or newsletter creates the records described below.
Account and billing
We store your verified email address, optional display name, Supabase user ID, account status, onboarding state, consent choices, and entitlement. Stripe collects payment details; we retain Stripe customer/subscription IDs, plan, status, trial, renewal, and cancellation projections—not card numbers.
Your research
We store saved homes, plain-text notes, tags, read state, saved searches, alert preferences and delivery state, support requests, content reports, and account export/deletion state. Other customers cannot read these rows, and the administrator support view does not expose private notes.
Newsletter
If you request the newsletter, we store your normalized email, consent text version and time, confirmation and unsubscribe state, delivery events, and a provider contact ID. Creating an atlas account does not subscribe you.
Technical records
The service processes session cookies, request and workflow identifiers, approximate device/browser class, timestamps, rate-limit keys, security events, and privacy-minimized error diagnostics. We do not put emails, private notes, raw searches, exact map coordinates, request bodies, or payment details into product analytics.
2 · How we use information
We use data to authenticate you; enforce free, paid, and administrator access; provide saves, notes, comparison, alerts, billing, export, deletion, and support; prevent abuse; diagnose failures; meet legal obligations; and improve the service using consented, minimized analytics.
Cookies and analytics
Essential cookies support passwordless sessions, security, and account continuity. Product analytics is a separate manual choice. At launch it uses allowlisted events and coarse context only; general click autocapture, session replay, heatmaps, advertising profiles, raw search text, notes, emails, and precise coordinates are disabled.
You may withdraw optional analytics consent from Account. Essential session processing remains necessary while you are signed in.
3 · Service providers and disclosure
We disclose information only as needed to provide the service, follow your instructions, protect the service, complete a business transfer, or comply with applicable law and valid legal process. We do not sell your private notes or saved-home research.
Core platform
Vercel hosts the Next.js application. Supabase provides passwordless authentication and Postgres data storage. Cloudflare R2 stores permitted listing media and restricted source artifacts. Inngest runs durable import, enrichment, deletion, analytics, and email workflows.
Payments and email
Stripe hosts Checkout and the Customer Portal, processes payment and fraud signals, and returns subscription state to us. Resend sends confirmation, newsletter, alert, and service email and returns delivery, bounce, and complaint events when those features are enabled.
Reliability and analytics
Sentry receives minimized error classifications and operational context; IP storage, replay, tracing, request bodies, breadcrumbs, and named-user attachment are disabled in the configured boundary. PostHog receives only consented allowlisted product events with profile-free identifiers and no session replay or autocapture.
Translation and research
Google Cloud Translation processes source listing segments to create English research. When strict structured extraction is enabled, OpenAI may process bounded source segments—not your private notes, email, payment data, or raw account searches. Official MLIT, GSI, e-Stat, and OpenStreetMap sources supply property or locality context rather than customer profile data.
4 · Retention, deletion, and security
We retain account and research data while your account is active. Downgraded paid research is retained for at least 12 months so it can be restored if you resubscribe. An account deletion request begins a 30-day recovery window; after that window, the durable purge removes user-owned product data and the auth user.
Necessary exceptions
We may retain minimized audit, security, unsubscribe/suppression, dispute, tax, accounting, and legal records for the period reasonably necessary or required by law. Stripe separately retains payment records under its own legal obligations and privacy policy.
Protection
We use encrypted transport, provider-managed encryption, server-side access checks, Postgres Row Level Security for user-owned data, signed webhooks, scoped credentials, rate limits, monitoring, and backup procedures. No internet service can guarantee perfect security.
5 · Your choices and rights
Account lets you update an optional display name, manage separate newsletter and analytics choices, export account research in JSON and CSV, and request deletion. Newsletter emails include an unsubscribe path, while necessary account and billing messages remain separate.
Depending on where you live, applicable law may provide additional rights to know, access, correct, delete, restrict, object, withdraw consent, receive a portable copy, appeal a response, or complain to a regulator. Contact support@japanhomeatlas.com. We may need to verify your identity before acting on a request.
6 · Transfers, age, and changes
Providers may process information in Japan, the United States, and other countries where they operate. Privacy protections can differ from those in your home country; providers use their published transfer and data-processing terms where applicable. The service is for adults and is not directed to anyone under 18.
We may update this policy as the service, providers, or law changes. The effective date identifies the current version, and material changes may also be announced in the service or by email. Privacy questions and content reports may be sent to support@japanhomeatlas.com.