Last updated:
I's Co., Ltd. (the "Company") recognizes the importance of protecting personal information in providing KeyCenter, its AI agent automation services for Amazon sellers (the "Services"). The Company handles personal information in accordance with the Act on the Protection of Personal Information of Japan (APPI), related guidelines and this Privacy Policy, and, where applicable, gives due consideration to the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA). This English version is provided for reference only. In the event of any discrepancy or inconsistency between the Japanese version and this English version, the Japanese version shall prevail.
1. Business Operator
The business operator responsible for handling personal information is I's Co., Ltd., Corporate Number 2011101078947, B1F Sankei 75 Bldg., 2-20-9 Kabukicho, Shinjuku-ku, Tokyo 160-0021, Japan. Representative Director: Murataka.
2. Personal Information We Collect
The Company collects the following information by lawful and fair means, to the extent necessary for the purposes set out in Section 3.
- Contact and identity information: name, company name, department, job title, email address, telephone number, country or region.
- Contract and billing information: billing address, invoice details, bank transfer records and payment information processed through payment service providers (the Company does not store full credit card numbers).
- Account information: login IDs, authentication information and user settings for the Services.
- Amazon-related data: information obtained through the Amazon Selling Partner API (SP-API) and Amazon Ads API under the customer authorization, such as inventory, orders, listings, pricing, advertising and performance data, which may incidentally include personal information of end buyers.
- Inquiry information: content of inquiries, consultations and correspondence submitted via the contact form or email.
- Technical information: IP address, browser type, device information, access logs, cookie identifiers and usage history.
3. Purposes of Use
The Company uses personal information for the following purposes and will not use it beyond the scope necessary to achieve them without the prior consent of the individual, except as permitted by law.
- To provide, operate, maintain and improve the Services, including AI-driven inventory, analytics, listing, repricing, advertising and customer service automation.
- To respond to inquiries and to provide free consultations and assessments.
- To conclude and perform contracts, issue invoices and process payments.
- To provide customer support and onboarding and to send service-related notices.
- To send information on new features, events and services (individuals may opt out at any time).
- To analyze usage in statistical form in order to improve the quality of the Services.
- To ensure security, prevent fraud and unauthorized access, and respond to violations of the Terms of Service.
- To comply with laws and regulations and respond to requests from public authorities.
4. Provision to Third Parties
The Company will not provide personal data to third parties without the prior consent of the individual, except in the following cases:
- Where required by laws and regulations.
- Where necessary to protect the life, body or property of a person and it is difficult to obtain the consent of the individual.
- Where especially necessary to improve public health or promote the sound growth of children and it is difficult to obtain consent.
- Where cooperation is necessary for a national or local government agency, or its delegate, to perform duties prescribed by law.
- Where personal data is entrusted to a contractor within the scope necessary to achieve the purposes of use (see Section 6).
- Where personal data is transferred as a result of a merger, business transfer or other succession of business.
5. Transfer to Third Parties in Foreign Countries
In providing the Services, the Company may store or process personal data using cloud infrastructure, AI model and other service providers located outside Japan, including in the United States and member states of the European Union, as well as Amazon services operated in the relevant marketplaces.
When transferring personal data to a third party in a foreign country, the Company obtains the consent of the individual or confirms that the recipient has established a system conforming to the standards prescribed under the APPI, and provides information on the personal information protection system of the relevant country and the measures taken by the recipient as required by law. Upon request, the Company will provide information on the necessary measures it has taken.
6. Outsourcing
The Company may entrust all or part of the handling of personal data to contractors, such as cloud hosting providers, payment processors, email delivery providers and AI service providers, within the scope necessary to achieve the purposes of use. In such cases, the Company selects contractors that meet appropriate standards, concludes contracts including confidentiality and security obligations, and exercises necessary and appropriate supervision over them.
7. Security Control Measures
The Company takes necessary and appropriate measures to prevent leakage, loss or damage of personal data and otherwise to ensure its secure management, including the following:
- Establishment of basic policy: adoption of this Privacy Policy and internal rules on the handling of personal data.
- Organizational measures: appointment of a person responsible for personal data handling, clarification of roles, and a reporting system for incidents or violations.
- Human measures: regular training for employees and confidentiality undertakings.
- Physical measures: control of areas where personal data is handled and prevention of theft or loss of devices and media.
- Technical measures: access control, multi-factor authentication, encryption in transit and at rest, logging and monitoring, and protection against unauthorized access and malware.
- Understanding of external environments: when storing data in foreign countries, the Company understands the personal information protection systems of those countries and takes security measures accordingly.
8. Retention Period
The Company retains personal data only for as long as necessary to achieve the purposes of use or as required by law. Data obtained through SP-API and Amazon Ads API is retained in accordance with Amazon data protection policies and is deleted or anonymized within a reasonable period after termination of the contract or revocation of authorization, unless retention is required by law. Personal data that is no longer needed is deleted or disposed of securely without delay.
9. Requests for Disclosure, Correction, Suspension of Use, etc.
An individual may request notification of the purposes of use, disclosure (including disclosure of records of provision to third parties), correction, addition or deletion, suspension of use, erasure, or suspension of provision to third parties of retained personal data concerning that individual, in accordance with the APPI.
Please submit requests to the contact window in Section 14. The Company will verify the identity of the requester and respond without delay within a reasonable scope. The Company may decline a request where permitted by law, in which case it will notify the requester of the reasons.
10. Cookies and Similar Technologies
The Company website uses cookies and similar technologies to ensure proper operation, remember language settings, analyze access and improve the Services. Users can disable cookies through browser settings, although some functions may not then be available. For details, please refer to the Cookie Policy.
11. Notes for Users in the EEA and the UK (GDPR)
Where the GDPR applies, the Company processes personal data on the following legal bases: performance of a contract, compliance with legal obligations, legitimate interests (such as service improvement and security), and consent (such as for marketing communications and non-essential cookies).
Data subjects have the right to access, rectify, erase, restrict processing of, and port their personal data, to object to processing, and to withdraw consent at any time without affecting the lawfulness of prior processing. Data subjects also have the right to lodge a complaint with the competent supervisory authority. Transfers outside the EEA or UK are carried out on the basis of an adequacy decision (including the EU adequacy decision for Japan), standard contractual clauses or other appropriate safeguards.
12. Notes for California Residents (CCPA)
California residents have the right to know the categories and specific pieces of personal information collected, the purposes of collection and the categories of recipients; to request deletion and correction; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.
The Company does not sell personal information and does not share it for cross-context behavioral advertising. The categories of personal information collected and the purposes of use are as described in Sections 2 and 3. Requests may be submitted to the contact window in Section 14, including through an authorized agent, subject to identity verification.
13. Minors
The Services are intended for businesses and are not directed to children. The Company does not knowingly collect personal information from children under 16. If a minor provides personal information, the consent of a legal guardian is required. If the Company learns that it has collected personal information from a child without appropriate consent, it will delete such information promptly.
14. Contact Window
For inquiries, complaints and requests regarding the handling of personal information, please contact: I's Co., Ltd., Personal Information Inquiry Desk, B1F Sankei 75 Bldg., 2-20-9 Kabukicho, Shinjuku-ku, Tokyo 160-0021, Japan. Email: privacy@keycenter.jp. Business hours: weekdays 10:00-18:00 (JST), excluding weekends and Japanese public holidays.
15. Changes to this Policy
The Company may revise this Privacy Policy as necessary in response to changes in laws, the Services or other circumstances. Material changes will be announced on the Company website. The revised policy takes effect when posted on the website unless otherwise specified.
株式会社I's（I's Co., Ltd.）／ 〒160-0021 東京都新宿区歌舞伎町2丁目20番9号 三経75ビル B1F