PRIVACY POLICY for ibis Paint in the EEA / the UK

Last updated: November 6th, 2023

We, IBIS INC., respect your privacy. As we operate our website and provide you with our services, we process personal data about you in accordance with applicable data protection laws, including the Act on the Protection of Personal Information of Japan, the General Data Protection Regulation of the European Union (the “GDPR”) and UK GDPR.

This is our privacy policy for residents in the European Economic Area (the “EEA”) and the UK on how we process and protect your personal data who use our “ibis Paint”. We may revise this privacy policy from time to time. You can obtain the latest version of this policy on our site.

Please refer to the “PRIVACY POLICY for ibis Paint in the United States of America” for residents in the United States of America.
Please refer to the “Policy on the Protection of Personal Information” for residents in other areas.

1. RESPONSIBLE CONTROLLER

We, IBIS INC., a company registered in Nagoya, Japan, issue this privacy policy. When we determine the purposes and means of processing your personal data, we are the data controller and responsible for protecting your rights regarding personal data.

2. HOW WE PROCESS YOUR PERSONAL DATA

As we provide you with our services, we collect, use, store, generate or disclose to third-parties (hereinafter collectively referred to as “process”) your personal data for the following purposes:

To manage your application purchase information on the application store, such as Google Play, App Store, and Microsoft Store.
1. Categories of your personal data we process: Purchase ID, Purchased product, Device information on purchase, Date and time of purchase, continuation, and cancellation
2. Lawful basis: the processing is necessary for the performance of a contract.
3. Period for which we store your personal data: until the end of the service to maintain purchase information.
4. Recipients we disclose your personal data to: our contractors that assist us in providing ibis Paint.
To manage your application accounts (ibisAccount, Twitter account, Facebook account, Apple ID, YouTube account, CLIP STUDIO account).
1. Categories of your personal data we process: ibisAccount name, ibisAccount access token, Twitter account name, Twitter access token, Facebook account name, Facebook access token, YouTube account name, YouTube access token, YouTube refresh token, CLIP STUDIO account name, CLIP STUDIO access token, Apple account name, Apple access token, Apple refresh token, Apple identity token, IP address
2. Lawful basis: the processing is necessary for the performance of a contract.
3. Period for which we store your personal data: as long as user maintain their account of this service.
4. Recipients we disclose your personal data to: our contractors that assist us in providing ibis Paint.
To manage our personalized advertising.
1. Categories of your personal data we process: your operational history on our service collected by the application, including Device token, FCM token, App UUID, Platform type, App type, IP address, user-agent, device language settings, terminal carrier information, screen size, orientation, and resolution, sound volume, battery, memory use, country, time zone, and local settings, network connection type and speed, advertisement ID
2. Lawful basis: your consent. You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of our processing of your personal data based on consent before its withdrawal.
3. Period for which we store your personal data: as long as user maintain their account of this service or until you withdraw your consent of our services.
4. Recipients we disclose your personal data to: our contractors that assist us in advertising.
To analyze your use of our service in order to generate insight that is useful for improving our services, products and marketing:
1. Categories of your personal data we process: App UUID, platform type, App type, model name, OS version, region of use.
2. Lawful basis: your consent. You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of our processing of your personal data based on consent before its withdrawal.
3. Period for which we store your personal data: until loss of relation to personal information via deletion of app or until you withdraw your consent.
4. Recipients we disclose your personal data to: our contractors that assist us in analyzing servicce usage data.
To investigate App bugs:
1. Categories of your personal data we process: App UUID, platform type, App type, model name, OS version, region of use, stack trace.
2. Lawful basis: the processing is necessary for the performance of a contract and for the purpose of our legitimate interest, i.e. to improve and expand this service for our customers.
3. Period for which we store your personal data: until loss of relation to personal information via deletion of app.
4. Recipients we disclose your personal data to: our contractors that assist us in analyzing service usage data.
To protect your privacy and security, integrity and availability of our website:
1. Categories of your personal data we process: IP address, user-agent, access time, access URL
2. Lawful basis: the processing is necessary for the performance of a contract and for the purpose of our legitimate interest, i.e. protecting your privacy and our website from fraudulent or unlawful access by monitoring web access traffic.
3. Period for which we store your personal data: seven (7) days.
4. Recipients we disclose your personal data to: our contractors that assist us in providing ibis Paint.
To manage user communication on official postings sites (Online Gallery)
1. Categories of your personal data we process: ibisAccount name, Twitter account name, Facebook account name, Apple account name, Your responses to posts such as comments or Likes
2. Lawful basis: the processing is necessary for the performance of a contract
3. Period for which we store your personal data: The shortest duration of the commented work, or the deletion of the comment, or the deletion of your account.
4. Recipients we disclose your personal data to: our contractors that assist us in managing user communication.
To manage inappropriate artwork reports.
1. Categories of your personal data we process: ibisAccount name, Twitter account name, Facebook account name, Apple account name, Device’s model name, Artwork data, Inappropriate artwork report history, IP address
2. Lawful basis: the processing is necessary for the performance of a contract
3. Period for which we store your personal data: Until the end of this service.
4. Recipients we disclose your personal data to: our contractors that assist us in managing user communication.
To manage user upload.
1. Categories of your personal data we process: ibisAccount name, Twitter account name, Facebook account name, Apple account name, Device’s model name, Artwork data
2. Lawful basis: the processing is necessary for the performance of a contract
3. Period for which we store your personal data: Until the deletion of artwork with the user’s YouTube or Online Gallery account.
4. Recipients we disclose your personal data to: our contractors that assist us in managing user communication.
To manage contest
1. Categories of your personal data we process: Twitter account name, e-mail address, Artwork data
2. Lawful basis: the processing is necessary for the performance of a contract
3. Period for which we store your personal data: Two (2) weeks after prize payment
4. Recipients we disclose your personal data to: our contractors that assist us in managing contest.
To respond to your Enquiries (bug reports, requests, complaints, etc.).
1. Categories of your personal data we process: name, e-mail address, user-agent, inquiry content
2. Lawful basis: the processing is necessary for the performance of a contract
3. Period for which we store your personal data: until deletion upon request.
4. Recipients we disclose your personal data to: our contractors that assist us in storing the user content.

* This service uses the YouTube API service provided by Google to upload videos of User's creations to YouTube and to play those uploaded YouTube videos.
The YouTube API uses cookies or similar technologies to store, access, and collect information directly or indirectly on the device or browser from which the user uses this service.
You may revoke your access from our service by using the Google Security Settings page.
Please see below for the YouTube Terms of Use, Google Privacy Policy, and the Google Security Settings page.

YouTube Terms of Use (Goolge LLC.)
https://www.youtube.com/t/terms
Google Privacy Policy (Goolge LLC.)
https://policies.google.com/privacy
Google Security Settings page (Goolge LLC.)
https://security.google.com/settings/security/permissions

* The Windows version of this product contains the Microsoft Edge WebView2 runtime (including Microsoft Defender SmartScreen). Microsoft Edge WebView2 and Microsoft Defender SmartScreen may collect information about your use of the software and send it to Microsoft.
For more information about the personal information collected by Microsoft, please visit https://aka.ms/privacy
https://docs.microsoft.com/en-us/microsoft-edge/privacy-whitepaper#smartscreen
For the avoidance of doubt, we do not process any of the information collected by Microsoft.

3. SENSITIVE PERSONAL DATA

We usually do not collect and/or use sensitive categories of your personal data as defined in Articles 9 or 10 of GDPR / UK GDPR on our service.

4. COOKIES

Your terminal devices (e.g. browsers) remember your preferences (e.g. language used) and activities (e.g. login status, etc.) on our website so that we can deliver a personalized and better user experience on our website (essential cookies);
We keep track of your interactions with our website, giving us useful and important insight for improving our website (performance cookies).

5. TRANSFER TO NON-EU COUNTRIES

We may engage third-party contractors, which assist us in processing your personal data for the purposes described above. These contractors are established and located in Japan and United States.

When the Recipients are located in Japan, your personal data is protected in accordance with the Act on the Protection of Personal Information of Japan. The European Commission and the UK have decided that Japan ensure an adequate level of data protection (the “Adequacy Decisions”) and that personal data can be lawfully transferred to Japan without requiring any specific authorization.

In the event that we transfer your data to an entity located outside the EEA, the UK or Japan, we protect your rights with personal data by virtue of a data transfer contract with the relevant recipient in accordance with the GDPR / UK GDPR, which imposes on such recipients contractual obligations to ensure an adequate level of data protection equivalent to those laid down by the GDPR/ UK GDPR.

6. YOUR LEGAL RIGHTS

Revocation of a previously given consent to our processing of your personal data
Access to your personal data and to certain supplementary information covered by this policy;
Rectification of your personal data if inaccurate or incomplete;
Erasure of your personal data in certain circumstances;
Suspension of using your personal data in certain circumstances;
Stopping processing your personal data in certain circumstances; and
Obtaining your personal data in a structured, commonly used, and machine-readable format.

7. COMPLAINT

If you are from EEA and UK, You can lodge complaints about our way of processing your personal data with the data protection supervisory authorities of your country of residence.

8. EU REPRESENTATIVE/UK REPRESENTATIVE

sending an e-mail to DataRep at datarequest@datarep.com quoting <ibis inc.> in the subject line,
contacting DataRep on the online webform at www.datarep.com/data-request, or
mailing your inquiry to one of the following addresses;

9. INQUIRY

ibis inc. PMS Office
Nakamo Building, 4th Floor
3-17-34 Meieki, Nakamura Ward, Nagoya City, Aichi
450-0002, Japan
E-mail: