Privacy Policy
Last updated: 22 August 2026
The short version
We collect the minimum needed to help you. We keep your chat only as long as your trip needs it, and we delete it whenever you ask. We never sell your data, and we never share it for advertising. When we book something for you, the restaurant receives only your name and party size.
This policy explains how Yorozu — operated by SpiderWave Inc. (株式会社SpiderWave), Toranomon, Minato-ku, Tokyo — handles personal information. It is written to comply with Japan's Act on the Protection of Personal Information (APPI), and we apply the same standard to visitors from the EU, the UK and elsewhere.
1. What we collect
| What | Why we need it |
|---|---|
| Your name | To make a reservation in your name |
| Your WhatsApp or LINE identifier and the messages you send | To talk to you and to keep track of what you asked for |
| Trip details — dates, party size, hotel area | To make bookings and give directions that make sense |
| Dietary requirements and allergies, if you tell us | To pass them to the restaurant. This may be health-related information — see section 4 |
| Symptoms and medical needs, if you ask for clinic help | To find an appropriate clinic. This is sensitive information — see section 4 |
| Payment confirmation from Stripe | To know a fee was paid. We never receive or store your card number |
Our website
We use Google Analytics to understand which pages help people and where they get stuck. It is set to ask your permission first — nothing is stored on your device until you choose "Allow", and declining costs you nothing at all. IP addresses are anonymised. We do not run advertising trackers, we do not set marketing cookies, and we have advertising and personalisation signals switched off. See Google's privacy policy.
Our short links (askyorozu.com/chat) record which card or poster a visit came from, so we know which places are actually useful to travellers. That records the label on the card, not anything about you.
2. Who else sees it
We share the minimum required, and only to do the thing you asked for.
- Restaurants and venues: your name, the date and time, the number of people, and any dietary requirement you asked us to convey. Nothing else — not your hotel, not your phone number, not your nationality.
- Railway lost property offices, taxi companies and police: a description of your item, the route and time, and a contact route for returning it.
- Clinics: your name, the symptoms you described, and your appointment details.
- Stripe: processes your payment. See Stripe's privacy policy.
- WhatsApp (Meta) and LINE: carry our conversation. Their own privacy policies apply to the messaging layer.
We never sell personal data, and we never share it with advertisers or data brokers. We disclose information to authorities only where Japanese law obliges us to.
3. How long we keep it
- Chat history: for the duration of your trip plus 90 days, so that we can help if a booking or a lost item is still unresolved. Then deleted.
- Booking records: 12 months, so we can resolve any dispute with a restaurant.
- Payment records: as long as Japanese tax and accounting law requires.
- Medical information: deleted as soon as the matter is resolved, and in any case within 30 days.
You can ask us to delete your data sooner at any time, and we will — except for records we are legally required to retain.
4. Sensitive information
Under Japan's APPI, health information — including allergies, symptoms and medical history — is 要配慮個人情報 (special care-required personal information). We treat it accordingly:
- We collect it only when you volunteer it, and only when it is needed for the task.
- We ask your explicit permission before passing it to a restaurant or clinic.
- We delete it as soon as the matter is closed.
- We do not use it for any other purpose, ever.
5. Where your data goes
Our operations are in Japan. Some of our service providers, including Stripe and the messaging platforms, process data outside Japan. Where that happens, we rely on those providers' own compliance frameworks and standard contractual protections.
6. Your rights
You can ask us at any time to:
- Tell you what data we hold about you
- Correct anything that is wrong
- Delete your data
- Stop using it for a particular purpose
Message us in the chat, or email privacy@askyorozu.com. We respond within 14 days. There is no charge.
7. Security
Access to customer conversations is limited to team members who need it to do the work. Card details never reach our systems — Stripe handles them directly. We do not store passwords for you, and we will never ask you for one.
8. Recording and publishing
We sometimes want to share an example of our work — for instance, a screenshot of a booking we secured. We always ask first, and we always remove your name and any identifying detail. If we telephone on your behalf and want to record or publish that call, we ask both you and the business concerned. Saying no changes nothing about the service you receive.
9. Children
Yorozu is intended for adults arranging travel. We do not knowingly collect information directly from children. Where you tell us a booking includes children, we pass on only what the venue needs to accommodate them.
10. Changes
If we change this policy in a way that affects how we use your information, we will say so in the chat rather than quietly updating this page.
11. Contact
SpiderWave Inc. (株式会社SpiderWave), 4-3-1 Toranomon, Minato-ku, Tokyo — privacy@askyorozu.com. Full business details are in our Specified Commercial Transactions Act disclosure.