Privacy Policy

Last updated: August 31, 2026

Crop&Kern Co., Ltd. (the “Company,” “we,” or “us”) establishes this Privacy Policy regarding the handling of personal information of customers who use the services we provide (the “Service”). Unless otherwise stated, terms used in this Privacy Policy have the meanings given under Japan’s Act on the Protection of Personal Information (the “APPI”).

1. Compliance with Privacy Laws

We comply with the APPI and other applicable laws and regulations and handle your personal information appropriately.

2. Purposes of Use

We collect and use your personal information only within the scope of the following purposes:

• To authenticate you and manage your account when you use the Service
• To provide, maintain, operate, and manage the Service
• To bill and collect payment for the Service
• To investigate and analyze Service usage and create statistical information
• To improve the Service and plan, research, and develop new services
• To provide information about the Service and respond to inquiries
• To prevent, investigate, and respond to Terms violations, fraud, and other misuse
• For other matters incidental or related to the purposes above

Main Categories of Information

• Account information, such as email address, name, and authentication or OAuth connection information
• Project data, such as design tokens, components, rules, and DESIGN.md content
• Usage information, error logs, and performance information
• Payment and subscription information (Stripe processes payments; we do not store card numbers or other sensitive payment credentials)
• Contact information and inquiry content, such as name, email address, and message

3. Provision to Third Parties

Except where permitted or required by privacy laws and regulations, we do not provide personal data we handle to third parties without obtaining your prior consent.

4. Service Providers and Supervision

We may outsource all or part of the handling of personal data to the extent necessary to achieve the purposes of use. We assess the suitability of service providers, include confidentiality and other required terms in our agreements, and exercise necessary and appropriate supervision.

When you choose to connect or use an external service, data may be sent to that service to the extent necessary for the integration. Each external service’s own terms and privacy policy apply.

5. Transfers to Third Parties Outside Japan

We may provide your personal data to third parties located in the following country. When we do so, those third parties take measures to sufficiently protect personal information, including by complying with applicable privacy laws in that country.

Country
United States

Information about the country’s privacy framework
Please refer to the information provided by Japan’s Personal Information Protection Commission.
https://www.ppc.go.jp/files/pdf/USA_report.pdf

6. Security Measures

We appoint a person responsible for the handling of personal data, regularly inspect how personal data is handled, implement access controls to prevent unauthorized viewing, and take necessary and appropriate measures to prevent leakage, loss, or damage.

• TLS encryption for data in transit
• Access controls for databases
• Encryption of OAuth tokens at rest
• Maintenance and review of access logs as appropriate

7. Cookies and Similar Technologies

We use cookies and similar technologies (collectively, “Cookies”) in the Service to improve convenience, provide the Service appropriately, and enhance security.

Overview

Cookies may allow us to obtain non-identifying attributes such as browsing history, Service usage history, and location information. We also use Cookies and similar storage for authentication, session management, and language or theme preferences. You can disable Cookies and delete saved Cookies in your browser settings, but some Service features may be limited.

Google Analytics

We use Google Analytics 4 provided by Google LLC to analyze use of and improve the Service. When you use the Service, identifiers such as Cookies, page URLs, browsing history, browser information, and IP address may be sent from your device to Google LLC. We load the Google Analytics 4 measurement tag only after obtaining your consent to analytics. If you decline, we do not load the measurement tag. For details about Google LLC’s purposes of use and opt-out options, please see Google’s Privacy Policy and the Google Analytics Opt-out Browser Add-on.

Google Privacy Policy / Google Analytics Opt-out Browser Add-on

8. Requests Regarding Retained Personal Data

If you request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, erasure, or suspension of third-party provision regarding retained personal data, we will verify your identity using our prescribed method and respond appropriately without delay in accordance with the APPI.

Depending on the request, we may be unable to delete records that we are required to retain by law or that are necessary for legitimate business purposes.

9. Changes to This Privacy Policy

We may change this Privacy Policy from time to time. When we do so, we will post the revised policy on our website. The revised Privacy Policy takes effect when posted on the website.

10. Complaints and Consultation

We accept complaints and consultations regarding the handling of personal information and respond appropriately and promptly.

11. Contact Point

For requests regarding retained personal data, complaints or consultations about personal information, or any other matter described in this Privacy Policy, please contact us below.

Crop&Kern Co., Ltd. — Personal Information Contact Point
Email: support@cropandkern.com
Contact form: https://stil.dev/contact

12. Business Information

Company: Crop&Kern Co., Ltd. (Crop&Kern株式会社)
Address: i-office Kichijoji, 2-8-4 Kichijoji-Honcho, Musashino-shi, Tokyo, Japan
Representative: Tetsuro Sugita