AirTA Sites

AirTA Sites legal

Privacy Policy

How AirTA G.K. handles personal information for AirTA Sites: on this website, for our customers, and on the recruitment sites we host for agencies.

Last updated 日本語で読む

In short

  • This website sets no tracking cookies and runs no analytics, apart from the private previews and proposals we prepare for an agency.
  • We never sell personal information or use it for anyone else's marketing.
  • On an agency's site, the agency decides how your data is used; we process it for them, store it in Japan and never use it for ourselves.
  • You can ask us to show, correct or delete what we hold about you. We reply within 2 weeks.

This summary is a guide to the text below. The text is what applies.

Who We AreLink to this section

Business
AirTA G.K.
Corporate number
6010903010683
Representative
Daniel Ray Smith
Address
201-23 Futatsugi-Futabacho, Matsudo-shi, Chiba 270-0028, Japan
Contact
hello@airtasites.jp

1.1 We handle personal information under Japan's Act on the Protection of Personal Information (APPI) and the guidelines of the Personal Information Protection Commission.

Our Two RolesLink to this section

2.1 For this website, our customers' staff and people who contact us, we decide how personal information is used. Every section of this policy applies to it except Section 6.

2.2 On the recruitment sites we host for agencies, the agency decides. When you apply for a job, register, set up a job alert or send an enquiry on an agency's site, the agency is the business responsible for your information, and its own privacy notice, linked from every form, tells you how it is used. We process that information only on the agency's instructions (委託), as Section 6 describes.

What We CollectLink to this section

Preview requests
Your name, work email, agency, current website, your message and, if you choose to send them, the choices you made in this site's demos.
Agencies we prepare a preview for
Text and job postings from the agency's public website, including the names, titles and published biographies of its consultants. We link to photos on the agency's own site rather than copying them.
Customers and their staff
Names, work email addresses and roles of the people who use the admin; their sign-in and activity records; profiles, photos and recordings they add to their site; billing contacts and payment records. Card payments are handled by Stripe; we never see full card numbers.
People who contact us
What you send us, and our replies.
Everyone who visits
Our hosting provider records technical request details, such as IP address and browser, for security. To limit how many preview requests arrive from one place, we keep a one-way code made from your connection and the day, which cannot be turned back into your address and changes daily.

How We Use ItLink to this section

We use the information in Section 3 only to:

  • prepare previews, reply to you and discuss AirTA Sites with you;
  • provide, secure, support and improve the service, and tell customers about changes to it;
  • make and manage contracts, invoice, and collect payment;
  • prevent abuse and fraud, and meet our legal obligations.

4.1 We don't sell personal information, share it for anyone else's marketing, or add you to a mailing list without asking. We improve the service from usage counts, not from reading customers' content or candidates' data.

4.2 For a preview or a trial, we see which pages of the preview and our proposal were opened, in what order and for how long, and which features your team tried, never who or what was typed, so we can follow up at a useful time.

4.3 Preview content built from an agency's public website is used only for that agency's private preview, is never published or indexed, and is deleted when the preview expires.

Sharing and Overseas ProvidersLink to this section

5.1 We give personal information to a third party only with your consent or where the law allows it, for example to comply with a court order. We do use service providers to run AirTA Sites; they handle data on our behalf under contract and are listed at airtasites.jp/subprocessors.

5.2 Our providers (Vercel, Supabase, Anthropic, Resend, Stripe, ElevenLabs, Google, DataForSEO, Serper, SE Ranking, SearchApi) are companies based outside Japan, mostly in the United States, and some process data there. For each, we have a contract that requires measures equivalent to those APPI requires, and we check how they are met (Article 28). On request we will tell you about these measures and how we check them. For information on each country's personal information system, see the Personal Information Protection Commission's survey at ppc.go.jp.

5.3 If AirTA Sites is transferred to another business, personal information may move with it, and this policy continues to apply to it.

On Agencies' Recruitment SitesLink to this section

6.1 For each agency we host the site and store what candidates and visitors send through it: applications and CVs, accounts, saved jobs, job alerts, enquiries and site assistant conversations. It is stored in Japan, separated from every other agency's data by the database itself, and deleted on the schedule the agency sets.

6.2 We never use this information for our own purposes, never add it to AirTA's own candidate database (airta.jp), and never contact candidates. Applicants' details are not sent to AI models unless the agency turns that on. The site assistant removes email addresses and phone numbers from what you type before sending it to our AI provider.

6.3 To see, correct or delete your information on an agency's site, contact that agency, or use My page on its site. If you contact us, we pass your request to the agency without delay.

Cookies and Information Sent from Your BrowserLink to this section

7.1 This website (airtasites.jp) sets no cookies for tracking or advertising, runs no analytics apart from the private previews and proposals we prepare for an agency (see How We Use It), and sends nothing about you from your browser to any other company. The demos remember what you build in your browser's own storage, and it stays there unless you choose to send it with a preview request.

Agencies' sites on AirTA Sites use only first-party storage by default:

Sign-in
A cookie that keeps you signed in to My page, for up to 30 days.
Page tests
A random number in a cookie, so you see the same version of a page the agency is testing, for up to 13 months.
Polls
A cookie that stops a poll being answered twice from one browser.
Visit counts
Page views are counted with a code that changes every day and cannot identify you. No IP address is stored.
Post links
If you arrive from a link in a social post, its code is kept in your browser for up to 30 days and read only when you apply.
Your journey
The pages you read and the links you came through (posts, emails, podcasts) are kept in your browser for up to 12 months and sent only when you apply or register, to be kept with your application. A browser that asks not to be tracked keeps them for the visit only.
Journey cookie, if the agency uses one
An agency may choose to record the same with a first-party cookie instead. Its site then asks first, and the cookie is set only if you accept. It holds a random number for up to 12 months; what it records is deleted 12 months after your last visit unless you apply.

7.2 Videos and social posts embedded in an agency's pages (YouTube, Vimeo, X, LinkedIn, note) load from those companies only when you choose to play or show them. If an agency adds a service such as Google Analytics, its own privacy notice lists it, with what is sent and to whom.

How Long We Keep ItLink to this section

Preview requests
12 months after our last contact with you, unless you become a customer.
Preview content
Until the preview expires, 30 days after we send it.
Customer accounts
For the contract, then deleted within 60 days of it ending, after the export window. Copies in our backups are deleted within 190 days.
Billing records
7 years, as tax law requires.
Agencies' sites
As each agency sets, from not at all to 3 years, then deleted automatically. Copies in our backups are deleted within 190 days.

How We Protect ItLink to this section

The main measures we take:

Policy and rules
This policy, and written rules for how personal data is collected, used, stored, passed on and deleted.
Organisation
A person responsible for personal data, an activity log of who changed what, and a procedure for incidents, including notifying customers within 48 hours.
People
Everyone with access is bound to confidentiality and trained on these rules.
Physical
Data is held in our providers' secured data centres. The only other copies are our daily backups: on an encrypted work computer, and in cloud storage as files only we can open. Work devices are encrypted and lock automatically.
Technical
Encryption in transit, database-enforced separation between agencies, access limited by role, and nothing sensitive in notification emails.
Countries involved
Data is stored in Japan. The encrypted backup copy in cloud storage may be held outside Japan, and no one but us can open it. Where a provider is based in the United States, we have checked the US system for protecting personal information.

Your RightsLink to this section

10.1 You can ask us to tell you the purposes for which we use your information, to show it to you, to correct, add to or delete it, to stop using it or giving it to others, and to show you our records of giving it to others. Email hello@airtasites.jp.

10.2 We will check that the request comes from you, or from someone you have authorised, before acting on it. We reply within 2 weeks and charge no fee.

Changes and ContactLink to this section

11.1 We will update this policy when what we do changes, and show the date at the top. We tell customers about important changes by email before they take effect.

11.2 Questions and complaints about how we handle personal information: hello@airtasites.jp. We are not a member of an accredited personal information protection organisation.