Privacy Policy
This English version is a translation for reference. If there is any discrepancy, the Japanese version prevails.
toor Inc. (“we” or “us”) considers the proper handling of the personal information of our customers, business partners and website visitors to be a responsibility of doing business. We comply with the Act on the Protection of Personal Information of Japan (the “APPI”) and other applicable laws and guidelines, and handle personal information as follows.
1. Business operator
| Item | Details |
|---|---|
| Name | toor Inc. (株式会社 toor) |
| Address | 541 Hayato Idaira, Mishima-machi, Onuma-gun, Fukushima 969-7406, Japan |
| Representative | Yoshio Takaeda, CEO |
| Person responsible for personal information | Yoshio Takaeda, CEO |
2. Personal information we collect
We collect personal information by lawful and fair means in the following situations.
| Situation | Information collected |
|---|---|
| Contact form | Company name, name, email address, product of interest, inquiry details |
| vibeCheck free trial application form (Japan only) | Company name, department, name, email address, phone number, preferred start month, type, operating status and location (prefecture) of the target equipment, current challenges, confirmation of eligibility conditions, whether a quotation is requested |
| AI chatbot on the website | Questions and conversations entered; IP address (used temporarily to limit excessive use) |
| Browsing the website | IP address, URL of pages viewed, date and time, referrer, browser and device type, country or region |
| Meetings, trade shows, business card exchange, email and phone | Name, company name, department and title, contact details, content of communications |
| Contracts for and use of our products and services | Information needed for contracts, invoicing and delivery of devices; records of support |
Browsing information alone does not identify a specific individual. If we link it with information you provide through a form, we handle it as personal information.
Equipment data that customers record and analyze with our products, such as vibeCheck, is handled under the contract with each customer, not under this policy.
3. Purposes of use
We use personal information within the scope of the following purposes.
- Responding to inquiries and consultations, and sending materials and quotations
- Selecting free trial participants, notifying results, visiting sites, installing and collecting devices, and preparing and reporting evaluation results
- Performing contracts, shipping devices, invoicing, and providing operational and technical support
- Informing you about our products, services, trade shows and seminars
- Generating answers with the AI chatbot and preventing misuse or excessive use
- Operating the website, ensuring its security, and analyzing and improving its use
- Improving our products and services and planning and developing new ones (using statistical information that does not identify individuals)
- Creating case studies (only with the customer’s consent)
- Complying with laws and protecting our rights and property
We will stop sending the information in item 4 at your request. If we change the purposes of use, we will do so only within a scope reasonably related to the original purposes and will publish the new purposes on this page.
4. Provision to third parties and outsourcing
We do not provide personal data to third parties without your consent, except in the following cases.
- When required by law
- When necessary to protect a person’s life, body or property and it is difficult to obtain your consent
- When necessary to cooperate with a national or local government body performing duties prescribed by law, and obtaining your consent may impede those duties
- Other cases permitted under the APPI
We may outsource part of our operations, such as device delivery and IT system operation, to the extent necessary to achieve the purposes of use. In that case, we select contractors appropriately and supervise them as necessary.
We do not use personal data jointly with other businesses, and we do not create pseudonymously or anonymously processed information.
5. External services and handling outside Japan
We use the following external services. All of them are provided by businesses in the United States, so personal data may be handled outside Japan, including in the United States.
| Service | Provider (country) | Purpose | Information handled |
|---|---|---|---|
| Claude API | Anthropic, PBC (United States) | Generating answers for the AI chatbot | Content entered in the chatbot |
| Cloudflare | Cloudflare, Inc. (United States) | Website delivery and security; short-URL redirects and usage measurement | Browsing information; form submissions (in transit) |
| Google Workspace (Gmail) | Google LLC (United States) | Receiving inquiries; business email | Contact form content; email |
| Slack | Slack Technologies, LLC (United States) | Internal notification of trial applications | Trial application form content |
About the AI chatbot: Content you enter is sent to Anthropic, PBC (United States) to generate answers. We do not store conversation content on our servers. Under our contract terms, the content is not used to train Anthropic’s AI models. Please do not enter information that identifies you, such as your name or contact details. If you do, we will treat it as your consent to the handling described above.
For information on the personal information protection system of the United States, see the survey published by the Personal Information Protection Commission of Japan (外国における個人情報の保護に関する制度等の調査, in Japanese). Each of the providers above has established a privacy policy and contract terms for protecting personal information and takes security measures.
6. Cookies, access logs and external content
Our website does not use cookies for advertising or tracking browsing history, and does not use analytics tools such as Google Analytics.
- Browser storage: We record only whether you have closed the chatbot prompt, in your browser’s local storage. This is not sent to us.
- Cloudflare: Cloudflare may set cookies required for security to protect the website from attacks.
- Access logs: Our server records IP addresses, pages viewed, date and time, referrers and browser types. We use them to detect unauthorized access, investigate faults and understand usage, and delete them after 2 years.
- External content: We use YouTube (privacy-enhanced mode) to show videos and Google Fonts to display text. When you open a page, your browser sends information such as your IP address to Google LLC. If you play a video, Google may record information using cookies and similar technologies. Such information is handled under Google’s Privacy Policy.
7. Security control measures
We take the following measures to prevent leakage, loss or damage of personal data.
| Category | Main measures |
|---|---|
| Organizational | We have appointed a person responsible for handling personal data and limit who handles it and what information they handle. We have set procedures for reporting and responding to incidents such as leaks. |
| Human | We require employees to keep information confidential and inform them about the handling of personal information. |
| Physical | We prevent theft and loss of devices and documents that contain personal data, and take measures to prevent leaks when taking them outside the office. |
| Technical | All communication with our website is encrypted (HTTPS). Form submissions are not stored on our web server but are forwarded to the staff in charge. We apply access controls to our systems and protect them from unauthorized access. |
| Understanding the external environment | As described in Section 5, we handle personal data using services of businesses in the United States. We take security measures with an understanding of the personal information protection system of the United States. |
We reliably dispose of or delete personal information that we no longer need to keep, using appropriate methods.
8. Requests for disclosure, correction, suspension of use, etc.
You may make the following requests regarding your personal data that we hold.
- Notification of the purposes of use, and disclosure (including disclosure of records of provision to third parties)
- Correction, addition or deletion if the content is not true
- Suspension of use or erasure in the following cases
- When the data is used beyond the purposes of use, was obtained by fraudulent means, or is used in a way that may encourage or induce illegal or improper acts
- When we no longer need to use the data
- When a leak or similar incident (one that must be reported to the Personal Information Protection Commission) has occurred
- When your rights or legitimate interests may be harmed
- Suspension of provision to third parties in the following cases
- When the data has been provided to a third party (including a third party in a foreign country) without your consent
- When we no longer need to use the data, when a leak or similar incident has occurred, or when your rights or legitimate interests may be harmed
Please send your request by email to the contact in Section 9. We will explain our prescribed procedure to you. After verifying that you are the person concerned (or an authorized agent) with identification documents or other means, we will respond without delay in accordance with the law. Disclosure will be made electronically or in writing, as you prefer.
If a request for suspension of use, erasure or suspension of provision to third parties is found to be justified, we will respond without delay to the extent necessary and notify you of the result. If responding would be difficult, for example because it would require a large expense, we will take alternative measures necessary to protect your rights and interests.
The fee for notification of the purposes of use and for disclosure is JPY 1,000 (including tax) per request. We will tell you how to pay when we explain the procedure. If the law permits us not to disclose, we will notify you with the reason.
9. Contact
We accept questions, requests and complaints about the handling of personal information at the following contact.
- Contact: toor Inc., Personal Information Inquiries
- Email: [email protected]
- Address: 541 Hayato Idaira, Mishima-machi, Onuma-gun, Fukushima 969-7406, Japan
10. Revisions
We may revise this policy in response to changes in laws or in our business. The revised policy takes effect when it is posted on this page.
Established: November 3, 2026
toor Inc. Yoshio Takaeda, CEO
