Privacy notice

1. Who is responsible

AIリスキル株式会社 in Japan operates CloutUp and is responsible for its handling of personal information. Contact support@cloutup.lol about privacy, access, correction or deletion. Our business details are on the Seller information page.

2. Information we handle

We handle the purchase and sign-in email address, authentication and listing-management records, product information you submit, payment and refund references, amounts and statuses, and messages you send to support. Stripe collects payment details on its checkout page; CloutUp does not receive your full card number.

Product names, websites, descriptions, categories, optional team country or region, eligible boost totals and paid positions are visible in the directory. Your purchase email is not displayed as part of your public listing. Do not put personal or confidential information in public product fields.

Our infrastructure processes request, device and connection information, including IP addresses, for delivery, security, rate limiting and troubleshooting. Purchase/session cookies and sign-in storage allow checkout recovery and access to your listings. A locally saved theme preference controls light and dark mode.

3. Why we use it

We use information to provide listings and boosts, authenticate access, process purchases and refunds, respond to requests, prevent fraud and abuse, maintain records required by law and resolve disputes. Where a legal basis is required, these purposes rely on performing the requested service, legal obligations or legitimate interests in a reliable and secure service, as applicable.

Optional analytics require your consent. Choosing not to use analytics does not prevent a purchase. We do not treat a purchase or a terms checkbox as permission to send marketing email.

4. Optional analytics

When optional analytics are enabled and you consent, we use Google Analytics and PostHog to measure browsing and purchase-flow events. We send a pseudonymous identifier and limited event details, which can include product or transaction references and purchase amounts. We do not send your purchase email, sign-in code, card details or free-text input through these analytics events. Advertising personalization and advertising user-data consent are denied.

Google and PostHog process this information as our analytics providers. Processing may take place outside your country, including in the United States. You can change your choice through the analytics control in the rankings footer. Withdrawal stops new optional tracking; it does not undo transactions or records we must keep. Choosing not to use analytics does not prevent a purchase.

Public board-visitor and outbound-click totals, when available, are aggregated activity counts and do not disclose individual visitors. When enabled, consenting visitors may see different versions of interface text. We measure which version they saw and whether they started checkout to improve the service. We do not use session recording or automatic collection of every click.

5. Providers and external sites

We use Vercel for hosting, Supabase for the database and authentication, Stripe for payments, Resend for sign-in email delivery, and Google Workspace for support email. These providers process information needed for their roles. Processing can take place outside your country, including in Japan and the United States. We use applicable provider agreements and legally required safeguards for international transfers.

Product icons are requested directly by your browser from the listed product’s website. That site can receive connection information such as your IP address even before you click its listing. We configure these icon requests not to send a Referer header. Following a product link takes you to a separately operated site with its own privacy practices.

We may disclose information when legally required or necessary to address fraud, security incidents or legal claims. Public listing data and required service-provider processing are distinct from selling personal information; we do not sell your personal information.

6. Retention and your choices

We retain information for as long as needed for the purpose for which it was collected. Relevant criteria include whether the listing and management access remain in use, applicable accounting and tax retention duties, open refunds or disputes, security needs and backup cycles. A deletion request does not require immediate destruction of legally required payment records.

You can edit supported public listing fields in My listings. To request access, correction, deletion or restriction of other personal information, contact support@cloutup.lol. We may verify that you control the affected email address before responding. We explain information that must be retained and why. Depending on your location, you may also have rights to object, obtain a portable copy or complain to a data-protection authority.

7. Updates

We update this notice when the service or our processing changes and identify its revision. Material changes requiring notice or consent will be handled before the affected processing begins. Contact support@cloutup.lol if anything is unclear.