Privacy Policy

1. Introduction

Off-Nadir Delta ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WebGIS satellite imagery analysis platform.

Business Operator Information and Personal Information Protection Manager: For details about our business operator and representative (who also serves as the Personal Information Protection Manager), please see our Specified Commercial Transactions Act page.

Contact for Privacy Inquiries: support@offnadir-lab.com

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us:

• Email address (for account creation and authentication)
• Payment information (processed securely through Stripe)
• Profile information (display name, optional)

  ℹ️ About Display Names:

  • Setting a display name is entirely optional
  • If you share layer sets with other users (available on Pro and higher plans), your display name may be visible to them
  • Privacy Tip: We recommend using a pseudonym rather than your real name to protect your privacy
  • You can change or remove your display name at any time in your profile settings

2.2 Usage Information

We automatically collect certain information about your use of our service:

• Token usage and consumption patterns
• Map interactions and layer management activities
• Search queries and satellite imagery requests
• Browser type, device information, and IP address
• Access times and referring website addresses

2.3 Cookies and Tracking

We use authentication cookies to maintain your session and provide core functionality. We also use Vercel Speed Insights for performance monitoring.

Cookie Consent: By creating an account and agreeing to our Terms of Service, you consent to our use of cookies and tracking technologies as described in this policy. Essential cookies required for authentication and core functionality are automatically enabled when you use our service.

2.4 reCAPTCHA

We use Google reCAPTCHA v3 to protect our website from spam and abuse. reCAPTCHA collects hardware and software information, such as device and application data, and sends this data to Google for analysis.

The use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

reCAPTCHA is primarily used on our sign-up pages to prevent automated bot registrations and ensure the security of our platform.

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide, maintain, and improve our services
• Process your transactions and manage your subscription
• Send you technical notices, updates, and support messages
• Monitor usage patterns to optimize service performance
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in these circumstances:

4.1 Third-Party Service Providers in Foreign Countries

We use third-party service providers located in foreign countries to operate our service:

4.2 Other Disclosures

• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit and at rest
• Database-level security policies (Row Level Security)
• Regular security audits and updates
• Secure authentication mechanisms

6. Data Retention

We retain your personal information as follows:

• Active account data: Retained while your account is active
• After account deletion: Completely removed within 30 days
• Legally required records: Retained for up to 7 years as required by applicable laws

You may request account deletion at any time by contacting support.

7. Your Rights Regarding Personal Data

7.1 Rights You Can Exercise

You have the right to:

• Request notification of the purpose of use
• Access and receive a copy of your personal data
• Correct inaccurate or incomplete data
• Request deletion of your account and data
• Request suspension of use or provision to third parties
• Data portability

7.2 How to Make a Request

8. Third-Party Services

Our service integrates with third-party providers for:

• Authentication and database services
• Payment processing
• Cloud infrastructure and serverless computing
• Satellite imagery data access (Copernicus/ESA)

These third parties have their own privacy policies governing the use of your information. For details about data transfers to foreign service providers, see Section 4.1 above.

9. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our service. Continued use after changes constitutes acceptance.

11. Complaints and Inquiries

11.1 Contact Information

If you have questions or concerns about this Privacy Policy or our handling of personal information, please contact us at:

11.2 External Consultation

We are not a member of any certified personal information protection organization. You may also consult with the Personal Information Protection Commission:

https://www.ppc.go.jp/

12. Anonymous and Pseudonymous Data

We do not currently create or use anonymized or pseudonymized data.