Privacy Policy

Last updated: October 26, 2026

For accounts created on or after September 29, 2026, this Policy applies from account creation. For accounts created before that date, it applies from October 13, 2026; until then, the version dated September 14, 2026 continues to apply to those accounts.

1. Introduction

AirTA (“we,” “us,” or “our”) operates the platform at airta.jp (the “Platform”). This Privacy Policy explains how we collect, use, share, and protect personal information when you use our Platform.

AirTA is a recruitment platform. Hiring companies post job openings and receive proposals from recruitment agencies; job seekers find job openings, apply to some of them, and may choose to be found by hiring companies and recruitment agencies. AirTA has filed a notification as a specified job information provider (特定募集情報等提供事業者) under Article 43-2 of the Employment Security Act (職業安定法). We are not a recruitment agency and do not select or place candidates.

We are committed to protecting your privacy in accordance with the Act on the Protection of Personal Information (個人情報保護法, “APPI”) of Japan and all applicable data protection laws.

2. Scope of This Policy

This Policy applies to all users of the Platform, including Company Users, Agency Users, Job Seekers, administrators, and visitors. It does not apply to third-party websites or services linked from the Platform, which are governed by their own privacy policies. Section 16 describes the limited handling of contact information of prospective customers who are not users of the Platform.

3. Definitions

• “Personal Information” means information relating to a living individual that can identify the individual by name, date of birth, or other description, or that contains an individual identification code, as defined under Article 2, Paragraph 1 of APPI.

• “Retained Personal Data” (保有個人データ) means personal data that we have the authority to disclose, correct, delete, cease use of, or cease provision to third parties, as defined under Article 16, Paragraph 4 of APPI.

• “Company User” means a user representing a hiring organization that posts jobs on the Platform.

• “Agency User” means a user representing a recruitment agency that submits proposals through the Platform.

• “Job Seeker” means an individual who uses the Platform to look for employment for themselves.

• “Candidate Database” means the Platform feature through which a Job Seeker who chooses to make their profile visible can be found by Company Users and, where the Job Seeker permits, by Agency Users.

4. Information We Collect

4.1 Account Registration Information

• Email address (required for account creation)

• Full name

• Password (stored only in irreversibly hashed form)

• User type selection (company, recruitment agency, or job seeker)

• Referral code (if applicable)

• If you sign in with Google: your Google account identifier, and the email address and name that Google provides (we do not store your Google profile picture)

• If you sign in with Yahoo! JAPAN ID: the user identifier that LY Corporation issues for your Yahoo! JAPAN ID, and the email address and its verification status that LY Corporation provides (we do not request your name, gender, birth year or address)

4.2 Organization and Business Information

• Organization name and domain

• Industry classification

• Company size (number of employees)

• Location and postal address

• Year founded and website URL

• Company logo (uploaded image file)

• Corporate number (法人番号), where provided

• Recruiting license number (for recruitment agencies, where applicable)

4.3 Platform Activity Data

For Company Users:

• Job posting details (title, department, location, salary range, requirements, qualifications, timeline, fee expectations)

• Candidate requirement profiles (experience, language, skill, and target company requirements for posted jobs)

• Proposal evaluation decisions (accept, reject, counter-offer)

• Testimonial submissions, ratings, and privacy preferences

For Agency Users:

• Proposal content (sourcing approach, relevant experience, services offered, proposed terms and commitments)

• AirDrive template assets (saved sourcing approaches, experience records, team member profiles, service descriptions)

• Credit balance and transaction history

• Client testimonial submissions, ratings, and display preferences

4.4 Payment and Transaction Information

• Stripe customer identifier (for payment processing)

• Credit purchase records (amount, date, package type)

• Credit usage records (proposal submissions, returns, rewards)

We do not store credit card numbers, bank account details, or other payment instrument information on our systems. All payment processing is handled directly by Stripe, Inc. and is subject to Stripe's own privacy policy.

4.5 Communications Data

• Notification preferences (email frequency settings per notification type)

• Email delivery metadata (recipient address, subject, delivery status, timestamps)

• In-platform notification history

• Feedback submissions (topic, description, page context)

• Testimonial and pulse check request and response data

4.6 Survey and Feedback Data

• Survey responses (selected answers to structured questions)

• Demographic context captured at time of response (industry, company size, location)

• Feedback topics and descriptions submitted through the Platform

4.7 Automatically Collected Technical Information

• IP address (IPv4 or IPv6)

• Browser type and version

• Operating system and device information

• Pages visited and interaction patterns

• Timestamps of access

• Geographic location (country-level, derived from IP address)

4.8 Market-Entry Intake Information

When a company completes a market-entry qualification intake, we collect:

• Contact details and the decision-maker's job title

• Company profile (company name, website, headquarters country, approximate headcount)

• Japan hiring plans, including the role, target timeline, and compensation budget

• Japan entity status and existing recruitment agency relationships

• Work-email verification data (verification token records and verification timestamps)

4.9 Partner Introduction Request Information

When someone requests an introduction to a Japan expansion service provider through the Japan Expansion Partners directory, we collect:

• Contact name, company name, and work email address

• Company website (where provided) and the description of the request, including timeline and planned headcount

• The provider or service category the request concerns

• Work-email verification data (verification token records and verification timestamps)

• Request IP address, for abuse prevention

4.10 Job Seeker Information

If you use the Platform as a Job Seeker, we collect:

• Profile: job function, level, current job title, current company (selected from our directory), current industry, employment status, skills, English and Japanese levels, current prefecture, notice period, headline, résumé text you type or paste, and your date of birth (required, with your job function, level, current industry, English and Japanese levels and current prefecture, before your profile can be made visible); and, only if you provide it, your current salary

• Preferences: the pay, level, industry, location, company, remote-work, and English conditions you seek, which of them you mark as required, and when you might change jobs

• Settings and choices: who may see your profile, which fields you hide, companies you block, your email settings, and the consent and acknowledgment texts you agreed to, together with the time you agreed

• Résumé files: résumé, CV, 履歴書, and 職務経歴書 files you upload (PDF or Word), stored encrypted; the file name, type, size, page count, and language you chose; and records of when a file was uploaded, attached to an Application you sent, downloaded by you, or downloaded by a team with which you shared it

• Applications: for each Application, the job posting, the files you selected, your answers to the employer's requirements, a copy of your name, email address, résumé text, profile summary, and work history as sent, and your consent to sending it

• Scouts and messages: the Scouts you receive, your decisions (including decline reasons you choose from a list), your messages and the files you attach to them, your check-in answers, and any report you make

• Job search activity: saved job postings, followed companies, job alerts and their delivery records; and, when you are signed in and click through to an employer's own application page, a record of that click so that we can later ask whether you applied; and the stage you set for each application on your Applications page

• Email sign-up: if you give your email address to receive job alerts or updates, or to create an account, before the account exists: your email address, what you asked for, and the IP address used

• Views: only if you turn this on, records of the company, job posting, and agency pages you open, and of the teams that open your profile

• Hire reports: if you, an employer, or an agency report your hire, the hire date and the confirmations described in Section 7.19 of our Terms of Service

• Career consultation requests: if you register one, the industries you want to discuss and when you might change jobs (also saved to your preferences), the job postings you choose to share, a copy taken when you register of your job function, level, current prefecture, English and Japanese levels and the band of your current salary (never the exact figure), and when you registered, updated or withdrew it

4.11 Information We Do Not Ask For

We do not ask for, and the Platform has no fields for, your race or ethnicity, birthplace, nationality, religion or beliefs, labor union membership, family circumstances or income, health, criminal record, gender, or photograph, and employers may not ask for such information through the Platform. Please do not include such information, or a photograph, in résumé text or files you share. If a file you upload contains such information, we store it only as part of that file and do not extract it.

5. Purposes of Use (利用目的)

In accordance with Articles 17 and 21 of APPI, we use your personal information for the following specified purposes:

• Account management: Creating, maintaining, and authenticating your account, and verifying your identity and email address

• Platform services: Facilitating job postings, proposal submissions, credit transactions, testimonials, pulse checks, surveys, referrals, contract generation, and all other Platform features

• Communications: Sending service notifications, proposal updates, testimonial and pulse check requests, daily and weekly digests, and other Platform-related communications

• Payment processing: Processing credit purchases, managing credit balances, and maintaining transaction records

• Security and fraud prevention: Protecting the Platform and users from unauthorized access, abuse, and fraud, including rate limiting, geographic access controls, and audit logging

• Platform improvement: Analyzing usage patterns in aggregate to improve services, features, and user experience

• Legal compliance: Complying with applicable laws, regulations, and legal processes

• Dispute resolution: Investigating and resolving disputes between Platform users

• Referral program: Managing referral relationships, tracking referral status, and distributing rewards

• Organization verification: Verifying corporate numbers and recruiting license numbers to establish trust on the Platform

• Market-entry intake: Assessing whether a market-entry intake submission qualifies, creating the draft job posting that the company itself publishes, administrative review of borderline submissions, and, where Section 16 applies, contacting the prospective customer about AirTA's services

• Partner introductions: Reviewing a partner introduction request, making the requested introduction by email, and, where Section 16 applies, contacting the prospective customer about AirTA's services

• Job search for Job Seekers: Showing you job openings, running the searches and job alerts you set, and saving the job postings and companies you choose

• Applications: Sending your Application, exactly as it stands, to the employer you choose, when you consent to that specific Application, and showing that employer your answers beside the requirements it set

• Candidate Database: Showing your profile, without your name or email address and without the fields you hide, to the companies (and, if you permit, agencies) that may see it; showing the date you joined and the date you last changed your preferences; showing each past job you list and do not hide by its industry, company type, job title and dates, and letting those companies and agencies search the past employers and job titles you list (never your current employer); delivering Scouts that state every preference you mark as required, and Scouts about no specific job only if you choose to accept them; and, after you answer “Interested,” showing that sender your name and, while that Scout is open, your résumé text, current company, the names of your past employers and your job summaries, and the files you share

• Profile suggestions: Only when you ask, reading the text of a résumé file you uploaded to suggest profile fields for you to accept or reject

• Views: Only if you turn this on, showing companies and agencies that your anonymous profile opened their page, and showing you which teams opened your profile

• Hire confirmation: Confirming reported hires with both parties and calculating the fees employers owe under their fee agreements

• Follow-up: After you click through to an employer's own application page while signed in, asking you later whether you applied, and counting how often the Platform leads to applications; and showing you your own applications, with the stages you set, on your Applications page

• Career consultation requests: Keeping your request so that you can choose recruitment agencies to send it to once agencies that handle your job function take requests (nothing in a request is sent to an agency until you choose one), and counting requests into anonymous totals by job function and other answers, which we may share with agencies to describe demand (Section 7.2)

• Statistics: Counting profile fields into anonymous statistics (Section 7.2)

We do not use Job Seekers' personal information for employment placement (職業紹介) and do not sell it. We will not use personal information beyond the scope of these stated purposes without obtaining your prior consent or as otherwise permitted by APPI (Article 18).

6. Basis for Handling Personal Information

We handle your personal information within the scope of the purposes of use stated in Section 5, in accordance with APPI (Articles 17 and 18). Where APPI requires your consent for specific handling — such as use beyond the stated purposes, provision to third parties, or transfers to providers outside Japan (Section 8) — we obtain that consent at the relevant point. We also handle personal information where required to comply with Japanese law, including tax, accounting, and regulatory obligations.

7. Sharing of Personal Information

7.1 Third-Party Service Providers (委託先)

In accordance with Article 25 of APPI, we entrust the handling of personal information to the following service providers and exercise necessary and appropriate supervision over them:

• Stripe, Inc. (United States) — Payment processing for credit purchases. Data shared: email address, name, team identifier. Subject to Stripe's privacy policy at stripe.com/privacy.

• Resend, Inc. (United States) — Transactional and notification email delivery. Data shared: recipient email address, email content, delivery metadata, including Applications (with the résumé files attached) and notices about Scouts and messages. Subject to Resend's privacy policy.

• Vercel, Inc. (United States) — Platform hosting (application servers in the Tokyo region) and file storage (organization logos; encrypted résumé files, copies of files attached to Applications, and encrypted files attached to messages). Data shared: access logs, uploaded files, and, on the sign-up pages, the bot-detection signals described in Section 9.4. Subject to Vercel's privacy policy.

• Supabase, Inc. (United States) — Managed hosting of our production database, which stores the personal information described in this policy (account, profile, organization, job, proposal, and Job Seeker data). Database servers are physically located in the AWS Tokyo region (Japan); Supabase, Inc. is a United States entity that administers the infrastructure. Subject to Supabase's privacy policy.

• Upstash, Inc. (United States) — Rate-limiting infrastructure used to protect the Platform against abuse. Data shared: IP addresses, email addresses, and internal account identifiers used as rate-limit counter keys, together with request counts. No message content or profile data is stored. Subject to Upstash's privacy policy.

• OpenAI, L.L.C. (United States) — Automated extraction of job-posting details when a Company User imports a job from a URL. Data shared: the text content of the publicly accessible job page the user submits. Account information such as your name and email address is not included. Also, when a Job Seeker asks AirTA to suggest profile fields from an uploaded résumé file, the text of that file. Before sending, AirTA removes email addresses, phone numbers, postal codes, web addresses, and lines containing a date of birth or age; the text may still include the Job Seeker's name, address, and other details as written in the file. Files marked as 履歴書 are never sent. Subject to OpenAI's privacy policy.

• Google LLC (United States) — Website analytics via Google Analytics 4. Data shared: pages visited, referrer, device and browser information, and approximate (country and region level) location, associated with a randomly generated analytics identifier. Google Signals and advertising personalization are disabled. Also, Sign in with Google: when you choose it, Google confirms your identity and provides your Google account identifier, email address, and name. Subject to Google's privacy policy.

7.2 Platform-Mediated Sharing Between Users

As an inherent function of the Platform, certain information is shared between users:

• Company Users may view proposal content submitted by Agency Users for their job postings

• Agency Users may view job posting details published by Company Users (subject to the Company User's privacy settings, such as whether to display the organization name)

• Testimonial content is displayed according to bilateral privacy controls — the submitting party sets what may be disclosed, and the receiving party controls what is actually displayed. Testimonials the receiving party chooses to display appear publicly on its profile, including to visitors who are not logged in

• Aggregated rating scores derived from testimonials (such as proposal adherence, placement success, and partnership quality) are computed at the organization and team level and displayed publicly, including to unauthenticated visitors, together with the number of responses per question; each question's score is shown only after it has received a minimum of three responses, and individual responses are never disclosed

• Survey results are displayed in aggregate form only when minimum response thresholds are met, and individual responses are never disclosed

• Job Seeker profile fields are counted into anonymous statistics shown to Company Users, Agency Users, and, in coarser form, the public. Public and market-level statistics never cover fewer than five people and are never broken down by a candidate's current employer. A company or agency with access to the Candidate Database may see exact counts of the profiles it can already open

7.3 Provision of Job Seeker Information to Employers and Agencies (第三者提供)

In accordance with Article 27 of APPI, we provide a Job Seeker's personal information to a company or agency only in the following cases, each with the Job Seeker's prior consent given at that point:

• Candidate Database: when you make your profile visible, after you read and agree to the consent text, your profile, without your name, email address, and hidden fields, is shown to the companies (and, if you choose, agencies) that may see it. Companies you block cannot see it. AirTA checks that a profile is genuine before it appears in employer and agency searches, and may withhold a profile that appears false or abusive

• Disclosure of identity: when you answer “Interested” to a Scout, that sender alone receives your name and, while a Scout you answered “Interested” continues, your résumé text, current company, and past employers' names and job summaries, and may download the files you have chosen to share. Messages and files you then send go to that sender

• Applications: when you tick the consent box for a specific Application, that employer receives your name, email address, résumé text, profile summary, work history, selected files, and answers, by email and in its applicant list

• Views: if you turn on view recording, a company or agency whose page you open sees that your anonymous profile opened it

• Hire reports: the other party is told the hire date, and your name only if you have already disclosed it to them

A company or agency that receives your information holds its copy as an independent business operator handling personal information and is responsible for handling it lawfully. We record each consent together with its text and the time it was given. You may withdraw your profile's visibility or stop sharing a file at any time; this stops further provision but cannot recall information already provided.

7.4 Other Disclosures

We may disclose personal information in the following circumstances:

• When required by law, court order, or government investigation

• When necessary to protect the rights, safety, or property of AirTA, our users, or the public

• In connection with a merger, acquisition, or sale of all or substantially all of our assets, with prior notice to affected users

7.5 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for their own commercial or marketing purposes.

8. Cross-Border Data Transfers (外国にある第三者への提供)

In accordance with Article 28 of APPI, your personal information may be transferred to and processed in the United States by the service providers identified in Section 7.1. Our production database is hosted on servers physically located in Japan (AWS Tokyo region); the transfer to Supabase, Inc. described in Section 7.1 refers to infrastructure administration by its United States entity.

The Personal Information Protection Commission of Japan (PPC) has not designated the United States as a country with a personal information protection system recognized as equivalent to that of Japan. Accordingly, we have implemented the following safeguards:

• Contractual agreements requiring these providers to handle personal data in accordance with standards substantially equivalent to APPI

• Selection of providers maintaining robust security certifications (SOC 2, ISO 27001, PCI DSS, or equivalent)

• Periodic review of provider security practices, compliance status, and data handling procedures

You may request information about the personal information protection systems in the countries to which your data is transferred by contacting us at support@airta.jp.

9. Cookies and Similar Technologies

9.1 Essential Cookies

We set our own cookies only for the following purposes:

• Keeping you signed in and protecting your session, including two-step verification and re-confirming your password before sensitive actions

• Remembering a browser on which you have signed in before, so that failed sign-in attempts elsewhere cannot lock you out on it (up to 400 days)

• Linking an email verification, an email sign-up, or a sign-in with Google or Yahoo! JAPAN ID attempt to the browser that started it (from a few minutes up to 48 hours)

• Remembering interface choices, such as whether the sidebar is open

These cookies are necessary for the Platform to function, are set only by AirTA, are not used for advertising, and are not shared with any third party.

9.2 Analytics Cookies

We use Google Analytics 4, a web analytics service provided by Google LLC, to understand how visitors use the Platform. Google Analytics sets first-party cookies (named “_ga” and “_ga_<identifier>”) that store a randomly generated identifier used to distinguish returning visitors and measure sessions. These cookies persist for up to two years. We have enabled IP anonymization and disabled Google Signals and advertising personalization, so the data is not used for cross-site tracking, demographic profiling, or ad remarketing. The information is used in aggregated, statistical form to measure page views, traffic sources, and site performance.

9.3 What We Do Not Use

We do not use advertising cookies, social media tracking pixels, cross-site tracking, or ad-remarketing technologies. Google Signals and advertising personalization features within Google Analytics are disabled.

9.4 External Transmission of User Information (外部送信)

In accordance with the external transmission rules under Article 27-12 of the Telecommunications Business Act (電気通信事業法), we publish the following information about data transmitted from your browser to external services when you use the Platform:

• Google Analytics 4 — Recipient: Google LLC (United States). Information transmitted: URL of the page visited, referrer, browser and device type, operating system, screen and language settings, approximate (country and region level) location derived from your IP address, and a randomly generated analytics identifier stored in a first-party cookie. Purpose: measuring page views, traffic sources, and site performance in aggregated, statistical form. IP anonymization is enabled, and Google Signals and advertising personalization are disabled.

• Vercel BotID — Recipient: Vercel, Inc. (United States). On the sign-up pages only. Information transmitted: signals about your browser and device, collected by a script served from AirTA's own domain. Purpose: telling people apart from automated sign-ups, to protect the Platform and its users from fraudulent accounts.

Credit purchases are completed on checkout pages hosted by Stripe, Inc.; information you provide there is transmitted directly to Stripe and governed by Stripe's privacy policy. Other than the above, we do not embed any tags, SDKs, or scripts in the pages served to your browser that transmit your information to external parties. Processing of your information by our server-side service providers is described in Section 7.1.

10. Data Retention

We retain personal information for up to the periods below, and we delete it earlier upon a verified deletion request (see Section 12):

After the applicable retention period expires, personal information is deleted or irreversibly anonymized. Aggregated, anonymized statistical data that cannot identify any individual may be retained indefinitely.

11. Security Measures (安全管理措置)

In accordance with Article 23 of APPI, we implement the following technical and organizational security measures to protect your personal information:

Technical Measures:

• HTTPS/TLS encryption for all data in transit

• Passwords stored using bcrypt one-way hashing with cryptographic salting

• Row-Level Security (RLS) database isolation ensuring users can only access data belonging to their own team

• JWT-based session management with automatic expiration

• Database connections secured with SSL certificate validation in production

• Rate limiting on authentication endpoints, email sending, and other sensitive operations

• Input validation and output sanitization to prevent injection attacks

• Résumé files and message attachments encrypted with a separate key for each file before storage

• A company or agency sees a Job Seeker's name only after the Job Seeker answers “Interested,” and never sees the Job Seeker's email address except in an Application the Job Seeker sends

• Two-step verification, checked for each session, for administrator access

Organizational Measures:

• Principle of least privilege for all data access

• Audit logging of key user actions

• Secure development practices including code review and security testing

• Incident response procedures for security events and data breaches

12. Your Rights Under APPI

Under APPI, you have the following rights with respect to your Retained Personal Data:

• Right to disclosure (開示請求権, Article 33): You may request disclosure of the personal information we hold about you, the purposes for which it is used, and the third parties to whom it has been provided.

• Right to correction (訂正等請求権, Article 34): You may request correction, addition, or deletion of your personal information if it is factually inaccurate.

• Right to cessation of use (利用停止等請求権, Article 35): You may request that we cease using or erase your personal information if it was obtained improperly, used beyond the stated purposes, or in cases of data breach.

• Right to cessation of third-party provision (第三者提供の停止請求権, Article 35): You may request that we cease providing your personal information to third parties.

• Right to explanation (理由の説明, Article 36): If we decline your request in whole or in part, we will explain the reasons for our decision.

To exercise these rights, contact us at support@airta.jp. We will verify your identity and respond within two weeks. Certain requests may be subject to reasonable fees as permitted by APPI.

You may also exercise the following directly through your account settings: update your profile and organization information, choose who may see your Job Seeker profile and which fields are hidden, block companies, manage notification preferences and email frequency, download your data, download or delete your résumé files, control testimonial privacy settings, and request deletion of your account. Account deletion is subject to a 30-day grace period during which you may cancel the request; after the grace period your personal information is irreversibly anonymized, and records required for legal and accounting purposes are retained per the schedule in Section 10.

13. Data Breach Notification (漏えい等の報告)

In accordance with Article 26 of APPI, if a data breach occurs that involves personal information and meets the reporting thresholds established by PPC rules (including breaches involving sensitive personal information, breaches resulting from unauthorized access, or breaches affecting more than 1,000 individuals), we will: (a) report to the Personal Information Protection Commission promptly (preliminary report within 3–5 business days, detailed report within 30 days, or 60 days in cases of unauthorized third-party access); and (b) notify affected individuals promptly, providing details of the breach, the categories of personal information involved, and recommended protective measures.

14. Platform Role — Important Notice

We emphasize the following regarding our role and the scope of our data handling:

• We are not a recruitment agency, employment placement business, or worker dispatch business under the Employment Security Act (職業安定法) or the Worker Dispatch Act (労働者派遣法) of Japan.

• We operate a job information provision business (募集情報等提供事業) and have filed a notification as a specified job information provider (特定募集情報等提供事業者). Job information on the Platform comes from hiring companies using the Platform and from the public career pages operated by companies themselves, displayed with source attribution. We take measures to keep displayed job information accurate and current, and we honor removal requests.

• We handle Job Seekers' personal information in accordance with this Policy and our internal rules for the proper management of personal information (個人情報適正管理規程), which designate the person responsible and restrict access to personnel who need it.

• We do not select, screen, rank, or recommend candidates, edit what candidates send, arrange interviews, or participate in hiring decisions or the determination of employment terms.

• Candidate requirement profiles on job postings describe the attributes companies seek and do not contain any real candidate's personal data.

• Companies and recruitment agencies are independent business operators handling personal information with respect to candidate personal information they receive through the Platform or obtain elsewhere, and are responsible for their own handling of it.

15. Children's Privacy

The Platform is not directed to individuals under 18 years of age, and Job Seekers must be at least 18. We do not knowingly collect personal information from minors. If we discover that a minor's personal information has been collected, we will delete it promptly and take measures to prevent recurrence.

16. Information About Prospective Customers

For business development, AirTA G.K. (AirTA合同会社) maintains limited contact information about representatives of organizations that may be interested in the Platform but are not yet users: name, job title, business email address, business phone number, LinkedIn profile URL, and company affiliation. We collect this information from publicly available sources, including company websites, professional profiles, and the gBizINFO corporate database operated by the Japanese government. It may also include contact information a prospective customer submitted through the market-entry intake described in Section 4.8 where the intake did not proceed to registration; the intake record itself is retained and deleted per the schedule in Section 10. We use it solely to send business-to-business communications about AirTA's services; these communications identify AirTA合同会社 as the sender and include opt-out instructions, as required by the Act on Regulation of Transmission of Specified Electronic Mail (特定電子メール法). We retain this information only as long as needed for this purpose and delete it upon request or when the recipient opts out of further contact. To request deletion or ask about this data, contact us as described in Section 18. The publication of this section constitutes the public announcement of the purpose of use required under Article 21 of APPI.

Separately, we maintain corporate (non-personal) information about prospective customer organizations for the Company Directory and Agency Directory features: company or agency name, website domain, location, approximate size, publicly posted job-opening information, and license, placement, and fee information that recruitment agencies publish on government registries, collected from the organizations' own public websites and career pages, from gBizINFO, and from the Ministry of Health, Labour and Welfare's 人材サービス総合サイト. This corporate information is not personal information under APPI; where a public source happens to include an individual's information, we do not extract or display it. Where an agency has published a contact address, we may use it to deliver a proposal request or an invitation to the Platform, and for no other purpose. Companies and agencies may request correction or removal of their directory information at any time via Section 18.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. When we make material changes, we will: (a) update the “Last updated” date at the top of this Policy; (b) notify registered users via email at least 14 days before the changes take effect; and (c) post a prominent notice on the Platform. A changed version applies to accounts created after its publication from the time of registration. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy. If you do not agree to the changes, you may delete your account before the effective date.

18. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at: AirTA G.K. (AirTA合同会社), 201-23 Futatsugi-Futabacho, Matsudo-shi, Chiba 270-0028, Japan — Email: support@airta.jp — Website: airta.jp. We aim to respond to all inquiries within 10 business days. Complaints regarding our handling of personal information are received at the same address and will be handled appropriately and promptly.

19. Supervisory Authority

If you have concerns about our handling of your personal information that we are unable to resolve, you have the right to file a complaint with the Personal Information Protection Commission of Japan (個人情報保護委員会) at ppc.go.jp.