Privacy Policy

Version: 2026-10-05

This is an English translation for reference. If there is any difference between the Japanese and English versions, the Japanese version prevails.

nanoca inc. ("we" or "us") handles the information entrusted to us through "Takeme2mix Studio" (the "Service") as follows, in accordance with Japan's Act on the Protection of Personal Information (the "APPI") and other laws.

1. Business operator

nanoca inc. (Operations manager: Takaaki Yazawa)
Address: Disclosed without delay upon request (please contact us by email)
Representative: Disclosed without delay upon request (please contact us by email)
Contact: takeme2mix@gmail.com

2. Information we hold

Vocal and instrumental audio you upload, the image used for the video, the song title and the credit (name)
Your email address (entered by you on the payment page; we receive it from Stripe)
Payment records (order ID, plan, amount, date and time, Stripe payment ID). We do not obtain credit card numbers
Technical information (IP address, browser type, access time and similar information recorded automatically by the server)
The content of your inquiries

Because your audio is linked to your email address and order, we treat it as personal information (personal data).

3. Purposes of use

To process your audio (mixing, mastering, etc.) and deliver the finished files (the "Deliverables")
To notify you by email of order receipt, completion, problems and similar matters
For payments, refunds, and accounting and tax records
To prevent misuse and operate the Service safely
To respond to inquiries

We do not send promotional emails without your consent. We never use your audio, images or Deliverables for AI or machine-learning training or for our own promotion.

4. Retention periods

Audio, images, Deliverables, song title, credit and email address: deleted automatically 7 days after payment (24 hours for unpaid orders). If you delete an order from its order page, it is deleted immediately.
Temporary files created during processing: deleted each time processing finishes.
Payment records (order ID, plan, amount, date and time, payment ID): kept for the period required by law for accounting and tax purposes. They do not include audio, song titles or email addresses.
Technical server logs: deleted automatically after at most 30 days.

5. Provision to third parties

Except as permitted by law, we do not provide personal data to third parties without your consent.

6. External services and provision to businesses in foreign countries

The Service uses the following external services. By agreeing to this Policy when you place an order, you consent to the following handling (including provision to businesses in foreign countries).

Google Cloud (file storage, processing, order records)	Contracting party: Google Cloud Japan G.K. Data is stored and processed on servers in Japan (Tokyo region). Under its contract, Google does not handle your data except on our instructions, so we use it in a way that does not constitute "provision" of personal data. The operator's parent company is Google LLC in the United States.
Stripe (payments)	Information you enter on the payment page is collected directly by Stripe (contracting party: Stripe Japan K.K.) and handled under Stripe's privacy policy. Stripe may process data in Ireland, the United States, India and other countries.
Resend (sending notification emails)	To send notification emails, we provide your email address and the email content (song title and a link to your order page) to Resend, Inc. (United States).

Information on personal information protection systems in the United States, India and other countries is available on the website of Japan's Personal Information Protection Commission (survey of foreign personal information protection systems). Ireland is an EU member state recognized by the Commission as having a system with a level of protection equivalent to Japan's. Each business takes security measures such as encryption and access restrictions.

In addition, because we use Google Fonts to display text, your browser sends information such as your IP address to Google when you open a page.

7. Security measures

Basic policy and rules: We have set this Policy and internal handling rules, and determined who handles personal data and how.
Organizational and human measures: The operations manager is responsible, and everyone who handles data is bound to confidentiality. People only listen to your audio when you contact us and give us permission.
Physical measures: Data is stored in Google Cloud data centers and is not kept on our own devices.
Technical measures: Encrypted communication (HTTPS), encryption at rest, least-privilege access, storage of the Private Link's secret in a non-reversible form (hash) for lookup and in encrypted form for notification emails (erased when the order is deleted), and automatic deletion of expired data (we do not use features that keep deleted data for a period). Your audio cannot be opened even from the operator's admin page.
Understanding the external environment: We take security measures after checking the systems of the countries listed in section 6.

8. Requests for disclosure, correction, suspension of use, etc.

If you request notification of the purpose of use, disclosure, correction, addition or deletion, suspension of use or erasure, suspension of provision to third parties, or disclosure of records of provision to third parties regarding retained personal data, we will respond in accordance with the law after confirming your identity. Please contact takeme2mix@gmail.com. There is no fee. Note that because audio and other data are deleted after 7 days, there may be no data to disclose after that.

9. What we store in your browser

To make it easy to reopen your order page, we store the secret part of the Private Link and your chosen display language (Japanese/English) in your browser (local storage). If you use a shared computer, please clear your browser data when you're done. We do not use advertising cookies or analytics.

10. In the event of a leak

In the unlikely event of a leak of personal data, we will report it to the Personal Information Protection Commission and notify you as required by law.

11. Changes to this Policy

We may change this Policy due to changes in law or for other reasons. If we do, we will announce it on the Service's pages.

12. Inquiries and complaints

nanoca inc.　takeme2mix@gmail.com

Established: 2026-10-05