Privacy Policy

Version: 2026-10-02 Effective date: October 2, 2026

This document is a pre-release draft. Its content will be finalized after expert review.

This policy sets out how Origin (the "Service") handles personal information.

1. About the Operator

ItemDetails
Name of businessTsk Inc.
Address〒170-0013 東京都豊島区東池袋1-38-7 コンシェリア池袋マスターズヴィラ301, Japan
Contactinfo@tsk-cc.com (you can also use our contact form)

2. Information We Collect

  • Email address (to send your results, let you log in, and contact you)
  • Your answers to the test and your results (type and score on each dimension)
  • Name, age, and gender (optional; used to tailor the content of your report)
  • Payment information (card numbers are processed by our payment processor, Stripe, and we do not store them. We keep only your Stripe customer ID, your card brand and last four digits, and the status of your payments)
  • IP address (we do not store the raw value; we store a hashed value), browser and device information, and referral information (UTM parameters and referrer)
  • Cookies (to identify sessions, keep you logged in, assign A/B tests, and analyze usage)
  • The content of your inquiries

3. How We Use Information

  1. To run the test and provide your results and reports
  2. To process payments, manage subscriptions, and contact you about billing
  3. To provide the Growth Plan (training and progress tracking)
  4. To send announcement emails (only to those who have given prior consent)
  5. To prevent fraudulent use and fraudulent payments
  6. To improve the Service and analyze how it is used
  7. To respond to inquiries

4. Service Providers and Disclosure to Third Parties

To provide the Service, we outsource work to the following external services and have them handle information to the extent necessary. Except as required by law, we do not provide personal data to any other third parties.

Service providerInformation handledPurpose
CloudflareEmail address, test data, purchase status, access logs (including IP addresses), email contentHosting and content delivery, database and authentication, sending emails, bot protection (Turnstile)
StripeEmail address, information needed for paymentPayments and subscription management
Google (GTM / GA4)Cookies, pages viewed, interaction eventsUsage analytics

The service providers listed above (Cloudflare, Inc., Stripe, Inc., and Google LLC) are U.S. companies, and your information may be processed on servers in the United States and other countries. Information about the personal data protection system of the United States is available on the website of Japan's Personal Information Protection Commission. Each provider takes measures to handle personal data appropriately (such as contractual obligations and security safeguards), which we confirm through our agreements with them.

5. External Transmission (Tracking Tags)

To understand how the Service is used, we may send information to the following external services (disclosed pursuant to the external transmission rules of Japan's Telecommunications Business Act).

RecipientInformation sentPurpose
Google (Google Analytics / Google Tag Manager)Cookie identifiers, pages viewed, referrer, interaction eventsUsage analytics and improvement
StripeInformation needed to display the payment screenProcessing payments and preventing fraud
Cloudflare (Turnstile)Information needed for bot detectionPreventing spam and fraudulent submissions

You can stop data from being sent to Google Analytics by disabling cookies in your browser settings or by using the Google Analytics Opt-out Browser Add-on provided by Google. For visits from the European Economic Area (EEA), the United Kingdom, and Switzerland, we do not use analytics cookies.

6. Retention Period

We keep the information we collect only for as long as necessary to achieve the purposes of use, and delete or anonymize it after that period. The specific retention periods are as follows.

  • Test answers and results, and email addresses of users who have not purchased: 3 years from your last use
  • Account information (for users who have purchased): 3 years from your last use, except that payment and contract records are kept for the period required by law (up to 7 years)
  • Inquiries: 3 years after the inquiry is resolved
  • Access logs: for the period set by each service provider

7. Security Measures

  • Encrypted communications (HTTPS)
  • Row-level access control in the database, and management of connection keys with separated permissions
  • Managing secret keys in environment variables (never including them in source code)
  • Operating so that personal information is not written to logs (masking email addresses)

8. Your Rights

Requests to disclose, correct, stop using, or delete personal data we hold about you can be made through our contact form. We will respond to the extent we can verify your identity. You can unsubscribe from announcement emails using the link in the email or from "Account & Billing" in My Page.

9. Use by Minors

If you are a minor, please obtain the consent of a parent or legal guardian before using the Service. If a minor applies for a paid service, we will deem that the consent of a parent or legal guardian has been obtained.

10. Changes to This Policy

We may change this policy in response to changes in laws or in the content of the Service. If we make changes, we will post the revised content and version on this page.

11. Contact

For questions about how we handle personal information, please contact us through our contact form.