Data protection

Data Roles

• You (the merchant) are the collector of your customers' personal data. We process data as entrusted by you and use it only within the scope of that entrustment.
• The scope of entrustment, how data is processed, and the return or deletion of data after the engagement ends are set out in the quotation or the entrustment agreement.

Compliance with LINE Platform Rules

• User data obtained through LINE is used only for your service. It is not provided to third parties and is not used outside your service.
• The Official Account, provider, and channel are all created under your name.

Security Measures

• Credential protection: The channel secret and access tokens are stored encrypted and used only when processing requests. Access tokens are short-lived.
• Least privilege: We obtain only the permissions the service requires, and staff access is restricted according to job function.
• Encryption in transit: The website and services use HTTPS exclusively.
• Activity logs: We keep records of important operations and anomalies to support investigation.
• AI use: We do not use customers' conversations to train AI models. We send the model provider only the data needed to produce a reply.

Incident Notification

When we discover an incident that may affect your data or your customers' data, we take immediate action to keep it from spreading. We notify you of what happened, its scope of impact, and the measures taken, and we help you notify the affected individuals as required by law.

Sub-Processors

The vendors actually used for each project and the scope of data transfer are stated in the quotation or the entrustment agreement. We give advance notice of any change.

Reporting a Security Issue

If you find a security issue with this website or our services, please report it through the contact form and choose "Security report" as the topic.