PRIVACY POLICY for ibisPaint

Last updated: February 25, 2025

We, IBIS INC., respect your privacy. As we operate our website and provide you with our services, we process personal data about you in accordance with applicable data protection laws, including the Act on the Protection of Personal Information of Japan.

This is our privacy policy for ibisPaint. We may revise this privacy policy from time to time. You can obtain the latest version of this policy on our site.

Please refer to the "PRIVACY POLICY for ibisPaint in the EEA / the UK" for residents in the EEA / the UK.
Please refer to the "PRIVACY POLICY for ibisPaint in the United States of America" for residents in the United States of America.

1. RESPONSIBLE CONTROLLER

We, IBIS INC., a company registered in Tokyo, Japan, issue this privacy policy. When we determine the purposes and means of processing your personal data, we are the data controller and responsible for protecting your rights regarding personal data.

2. HOW WE PROCESS YOUR PERSONAL DATA

As we provide you with our services, we collect, use, store, generate or disclose to third-parties (hereinafter collectively referred to as "process") your personal data for the following purposes:

1. To manage your application purchase information on the application store, such as Google Play, App Store, and Microsoft Store:
   1. Categories of your personal data we process: Purchase ID, Purchased product, Device information on purchase, Date and time of purchase; Continuation, and Cancellation.
      We collect these categories of your personal data from your activity on the application store.
      If you do not provide them, it prevents us from giving you our service.
   2. Lawful basis: The processing is necessary for the performance of a contract.
   3. Period for which we store your personal data: Until the end of the service to maintain purchase information.
   4. Recipients we disclose your personal data to: Our contractors that assist us in providing ibisPaint.
2. To manage your application accounts (ibisAccount, Twitter account, Facebook account, Apple ID, YouTube account, CLIP STUDIO account):
   1. Categories of your personal data we process: ibisAccount name, ibisAccount access token, Twitter account name, Twitter access token, Facebook account name, Facebook access token, YouTube account name, YouTube access token, YouTube refresh token, CLIP STUDIO account name, CLIP STUDIO access token, Apple account name, Apple access token, Apple refresh token, Apple identity token, and IP address.
      We collect these categories of your personal data from your posting on our service.
      If you do not provide them, it prevents us from giving you our service.
   2. Lawful basis: The processing is necessary for the performance of a contract.
   3. Period for which we store your personal data: As long as user maintain their account of this service.
   4. Recipients we disclose your personal data to: Our contractors that assist us in providing ibisPaint.
3. To manage our personalized advertising:
   1. Categories of your personal data we process: Your operational history on our service collected by the application, including Device token, FCM token, App UUID, Platform type, App type, IP address, User-agent, Device language settings, Terminal carrier information, Screen size, Orientation, Resolution, Sound volume, Battery, Memory use, Country, Time zone, Local settings, Network connection type and speed; and Advertisement ID.
      We collect these categories of your personal data from the Device on which you use this application.
   2. Lawful basis: Your consent. You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of our processing of your personal data based on consent before its withdrawal.
   3. Period for which we store your personal data: As long as the user maintains their account of this service or until you withdraw your consent of our services.
   4. Recipients we disclose your personal data to: Our contractors that assist us in advertising.
4. To analyze your use of our service in order to generate insight that is useful for improving our services, products and marketing, or to advertise to potential customers who have not yet used our services:
   1. Categories of your personal data we process: App UUID, Platform type, App type, Model name, OS version, Region of use, Screen size, User Ad ID, ID created by the UET SDK, and ID that allows Microsoft to identify which ad this application was downloaded from.
      We collect these categories of your personal data from your activity on the application store.
   2. Lawful basis: Your consent. You can withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of our processing of your personal data based on consent before its withdrawal.
   3. Period for which we store your personal data: Until loss of relation to personal information via deletion of the app or until you withdraw your consent.
   4. Recipients we disclose your personal data to: Our contractors that assist us in analyzing service usage data.
5. To investigate App bugs:
   1. Categories of your personal data we process: App UUID, Platform type, App type, Model name, OS version, Region of use, and Stack trace.
      We collect these categories of your personal data from your activity on the application store.
      If you do not provide them, it prevents us from giving you as appropriate and precise information as we can.
   2. Lawful basis: The processing is necessary for the performance of a contract and for the purpose of our legitimate interest, i.e. to improve and expand this service for our customers.
   3. Period for which we store your personal data: Until loss of relation to personal information via deletion of the app.
   4. Recipients we disclose your personal data to: Our contractors that assist us in analyzing service usage data.
6. To protect your privacy and security, integrity and availability of our website:
   1. Categories of your personal data we process: IP address, User-agent, Access time, and Access URL.
      We collect these categories of your personal data from your activity on the application store.
      If you do not provide them, it prevents us from giving you as appropriate and precise information as we can.
   2. Lawful basis: The processing is necessary for the performance of a contract and for the purpose of our legitimate interest, i.e. protecting your privacy and our website from fraudulent or unlawful access by monitoring web access traffic.
   3. Period for which we store your personal data: Seven (7) days.
   4. Recipients we disclose your personal data to: Our contractors that assist us in providing ibisPaint.
7. To manage user communication on official postings sites (Online Gallery):
   1. Categories of your personal data we process: ibisAccount name, Twitter account name, Facebook account name, Apple account name, and Your responses to posts such as comments or Likes.
      We collect these categories of your personal data from your posting on our service.
      If you do not provide them, it prevents us from giving you our service.
   2. Lawful basis: The processing is necessary for the performance of a contract.
   3. Period for which we store your personal data: The shortest duration of the commented work, the deletion of the comment, or the deletion of your account.
   4. Recipients we disclose your personal data to: Our contractors that assist us in managing user communication.
8. To manage inappropriate artwork reports:
   1. Categories of your personal data we process: ibisAccount name, Twitter account name, Facebook account name, Apple account name, Device's model name, Artwork data, Inappropriate artwork report history, and IP address.
      We collect these categories of your personal data from your posting on our service.
      If you do not provide them, it prevents us from giving you our service.
   2. Lawful basis: The processing is necessary for the performance of a contract.
   3. Period for which we store your personal data: Until the end of this service.
   4. Recipients we disclose your personal data to: Our contractors that assist us in managing user communication.
9. To manage user upload:
   1. Categories of your personal data we process: ibisAccount name, Twitter account name, Facebook account name, Apple account name, Device's model name, and Artwork data.
      We collect these categories of your personal data from your posting on our service.
      If you do not provide them, it prevents us from giving you our service.
   2. Lawful basis: The processing is necessary for the performance of a contract.
   3. Period for which we store your personal data: Until the deletion of artwork with the user's YouTube or Online Gallery account.
   4. Recipients we disclose your personal data to: Our contractors that assist us in managing user communication.
10. To manage contest:
    1. Categories of your personal data we process: Twitter account name, E-mail address, and Artwork data.
       We collect these categories of your personal data from your posting on our service.
       If you do not provide them, it prevents us from giving you our service.
    2. Lawful basis: The processing is necessary for the performance of a contract.
    3. Period for which we store your personal data: Two (2) weeks after prize payment.
    4. Recipients we disclose your personal data to: Our contractors that assist us in managing contests.
11. To respond to your Enquiries (bug reports, requests, complaints, etc.):
    1. Categories of your personal data we process: Name, E-mail address, User-agent, and Inquiry content.
       We collect these categories of your personal data from your posting on our service.
       If you do not provide them, it prevents us from giving you as appropriate and precise information as we can.
    2. Lawful basis: The processing is necessary for the performance of a contract.
    3. Period for which we store your personal data: Until deletion upon request.
    4. Recipients we disclose your personal data to: Our contractors that assist us in storing the user content.

3. SENSITIVE PERSONAL DATA

We usually do not collect and/or use sensitive categories of your personal data, such as racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.

4. COOKIES

A cookie is a small text file that our website sends to your terminal Device for the purpose of keeping certain records.
By using cookies:

1. Your terminal devices (e.g. browsers) remember your preferences (e.g. language used) and activities (e.g. login status, etc.) on our website so that we can deliver a personalized and better user experience on our website (essential cookies);
2. We keep track of your interactions with our website, giving us useful and important insight for improving our website (performance cookies).

A cookie identifies your terminal Device, typically your web browser, but it cannot identify your individual identity.

5. TRANSFER TO OTHER COUNTRIES

We may engage third-party contractors, which assist us in processing your personal data for the purposes described above. These contractors are established and located in Japan and the United States.
When the Recipients are located in Japan, your personal data is protected in accordance with the Act on the Protection of Personal Information of Japan. The European Commission and the UK have decided that Japan ensure an adequate level of data protection (the "Adequacy Decisions") and that personal data can be lawfully transferred to Japan without requiring any specific authorization.
In the event that we transfer your data to an entity located outside Japan, we protect your rights with personal data by virtue of a data transfer contract with the relevant recipient.

6. TRANSFER OF PERSONAL DATA

We transfer your personal data to other corporations (some are in overseas) as follows.

1. Advertising Demand
   1. To display advertisements in our service, we transfer data which do not identify personal such as advertising identifier, IP address or device information to other corporations called advertising demands, which will be listed later. When you use ad-free version of our service, these data are not collected nor transferred.
   2. Transferred data are used by advertising demands to optimize advertisements displayed in our service for you.
   3. These data will be retained until you end the use of our service, and each advertising demand destroys the data.
   4. These data are transferred via internet when the program of our service tries to display advertisements.
   5. You can refuse to transfer these data via the “Privacy” section in the “Settings window” of our app. In this case, our service may display advertisements not optimized for you.
   6. Advertising demands we transfer your personal data are as follows. Each URL includes the email address or contact form for the privacy officer of it.
      1. ① AdMob（Google AdMob）
         1. Google AdMob is located in USA.
         2. https://policies.google.com/privacy
         3. https://business.safety.google/compliance/
      2. ② AppLovin （AppLovin Corporation）
         1. AppLovin is located in USA.
         2. https://www.applovin.com/privacy/
      3. ③ fluct （fluct, Inc.）
         1. fluct, Inc. is located in Japan.
         2. https://corp.fluct.jp/privacy/ads
      4. ④ InMobi （InMobi Pte. Ltd.）
         1. InMobi Pte. Ltd. is located in Singapore.
         2. https://www.inmobi.com/privacy-policy
      5. ⑤ Pangle （ByteDance Pte. Ltd.）
         1. ByteDance Pte. Ltd. is located in Singapore.
         2. https://www.pangleglobal.com/jp/privacy/enduser-en
      6. ⑥ AdColony（AdColony Inc.）
         1. AdColony Inc. is located in USA.
         2. https://www.adcolony.com/privacy-policy/
      7. ⑦ nend（FAN Communications, Inc.）
         1. FAN Communications, Inc. is located in Japan.
         2. https://nend.net/privacy/sdkpolicy
      8. ⑧ maio（i-mobile Co., Ltd.）
         1. i-mobile Co., Ltd. is located in Japan.
         2. https://www.i-mobile.co.jp/privacy.html
      9. ⑨ Unity Ads（Unity Technologies）
         1. Unity Technologies is located in USA.
         2. https://unity.com/legal/developer-privacy-policy
      10. ⑩ FIVE（LY Corporation）
          1. LY Corporation is located in Japan.
          2. https://line.me/en/terms/policy/
      11. ⑪ AMoAd（CyberAgent, Inc.）
          1. CyberAgent, Inc. is located in Japan.
          2. https://privacy-policy.cyberagent.ai/
      12. ⑫ PubMatic, Inc.
          1. PubMatic, Inc. is located in Japan.
          2. https://pubmatic.co.jp/legal/privacy-policy/
      13. ⑬ Moloco Inc.
          1. Moloco Inc. is located in USA.
          2. https://www.moloco.com/privacy-policy
2. Advertisement Distributor
   1. To advertise our services, we transfer data which do not identify personal such as IP address or device information to other corporations called advertisement distributors, which will be listed later.
   2. Transferred data are used by advertisement distributors to measure performance of advertisements or optimize where / how to display the advertisements.
   3. These data will be retained until you end the use of our service, and each advertisement distributor destroys the data.
   4. These data are transferred via internet when you launch our app at the first time.
   5. You can refuse to transfer these data in the dialog which will be displayed when you launch our app at the first time. There is no impact for you by this.
   6. Advertisement distributors we transfer your personal data are as follows. Each URL includes the email address or contact form for the privacy officer of it.
      1. ① Google Ads (Google LLC.)
         1. Google LLC. is located in USA.
         2. https://policies.google.com/privacy
         3. https://business.safety.google/compliance/
3. Analytics Data
   1. To improve our service, we transfer data which do not identify personal such as device identifier, device information, app information, crash logs to analytics services provided by other corporations which will be listed later.
   2. For the location of the corporation providing each analytics service, please see the website of it.
   3. Transferred data will be used to create statistical data of user behavior, or to investigate issues of our service.
   4. These data will be retained until you end the use of our service, and each analytics service destroys the data.
   5. These data are transferred via internet while you are using our service.
   6. You can refuse to transfer these data in the dialog which will be displayed when you launch our app at the first time. There is no impact for you by this.
   7. Analytics services we transfer your personal data are as follows. Each URL includes the email address or contact form for the privacy officer of it.
      1. ① Google Analytics (Google LLC.)
         1. Google LLC. is located in USA.
         2. https://policies.google.com/privacy
         3. https://business.safety.google/compliance/
      2. ② Firebase (Google LLC.)
         1. Google LLC. is located in USA.
         2. https://firebase.google.com/support/privacy
         3. https://policies.google.com/privacy
         4. https://business.safety.google/compliance/
      3. ③ HUAWEI Analytics (Huawei Technologies Co., Lid.)
         1. We transfer your data to this analytics service only when you are using our app distributed in HUAWEI AppGallery.
         2. Huawei Technologies Co., Lid. is located in China.
         3. https://consumer.huawei.com/en/privacy/privacy-policy/
4. YouTube API
   1. To provide a feature that enables you to upload a video generated by our app to your YouTube channel and play it in our service, our service use YouTube API. YouTube API uses cookies or similar technologies to store, access, and collect data directly or indirectly on the devices and browsers through which users use our service.
   2. YouTube is operated by Google LLC., a corporation located in USA.
   3. Transferred data will be used to provide the function required by the user.
   4. The data will be retained until you end the use of our service, and Google LLC. destroys the data.
   5. These data are transferred via internet when you use a function of our service related to YouTube.
   6. You can refuse to transfer these data in the Google’s web page for security settings. In this case, you will not use features related to YouTube in our service.
   7. Please see below for the YouTube Terms of Use, Google Privacy Policy, and the Google Security Settings page.
      1. ① YouTube Terms of Use (Google LLC.)
         1. https://www.youtube.com/t/terms
      2. ② Google Privacy Policy (Google LLC.)
         1. https://policies.google.com/privacy
      3. ③ Google Security Settings page (Google LLC.)
         1. https://security.google.com/settings/security/permissions
5. Microsoft
   1. Our application which runs on Windows includes Microsoft Edge WebView 2 runtime. This runtime includes Microsoft Defender SmartScreen and it will collect and transfer your data to Microsoft as is described in Microsoft’s privacy whitepaper, which will be listed later.
   2. Microsoft is a corporation located in USA.
   3. The usage of transferred data is described in the Microsoft’s privacy statement. We ourselves do not process any of the data collected by Microsoft’s software contained in our product.
   4. These data will be retained until you end the use of our service, and Microsoft destroys the data.
   5. These data are transferred via internet while you use our product on Windows OS.
   6. If you do not wish to transfer your data to Microsoft, do not use our product on Windows OS.
   7. Microsoft’s documents on privacy are as follows:
      1. ① Microsoft’s privacy statement
         1. https://aka.ms/privacy
      2. ② Microsoft’s privacy whitepaper
         1. https://docs.microsoft.com/en-us/microsoft-edge/privacy-whitepaper#smartscreen

7. DELETION OF PERSONAL DATA

1. We will destroy personal data without delay when the retention period is expired or when the purpose of it has been achieved.
2. If we must continue to retain certain personal data in accordance with a law even after it is no longer needed or the retain period has expired, we will not use it for any purpose other than to comply with that law.
3. The procedures and methods for destroying personal data are as follows:
   1. The personal data will be removed from our databases or storages automatically or manually when the reason for destruction has occurred.

8. YOUR LEGAL RIGHTS

Provided that certain conditions are met, you have legal rights to request from us the following:

• Revocation of a previously given consent to our processing of your personal data
• Access to your personal data and to certain supplementary information covered by this policy;
• Rectification of your personal data if inaccurate or incomplete;
• Erasure of your personal data in certain circumstances;
• Suspension of using your personal data in certain circumstances;
• Stopping processing your personal data in certain circumstances; and
• Obtaining your personal data in a structured, commonly used, and machine-readable format.

If you wish to exercise your rights, please contact us.

9. COMPLAINT

You can lodge complaints about our way of processing your personal data with the data protection supervisory authorities of your country of residence in accordance with the data protection law where you reside.

10. INQUIRY

ibis inc. PMS Office
3-17-34 Meieki, Nakamura Ward, Nagoya City, Aichi
450-0002, Japan
E-mail: