Privacy Policy
Version: 2026-10-02 Effective date: October 2, 2026
This document is a pre-release draft. Its content will be finalized after expert review.
This policy sets out how Origin (the "Service") handles personal information.
1. About the Operator
| Item | Details |
|---|---|
| Name of business | Tsk Inc. |
| Address | 〒170-0013 東京都豊島区東池袋1-38-7 コンシェリア池袋マスターズヴィラ301, Japan |
| Contact | info@tsk-cc.com (you can also use our contact form) |
2. Information We Collect
- Email address (to send your results, let you log in, and contact you)
- Your answers to the test and your results (type and score on each dimension)
- Name, age, and gender (optional; used to tailor the content of your report)
- Payment information (card numbers are processed by our payment processor, Stripe, and we do not store them. We keep only your Stripe customer ID, your card brand and last four digits, and the status of your payments)
- IP address (we do not store the raw value; we store a hashed value), browser and device information, and referral information (UTM parameters and referrer)
- Cookies (to identify sessions, keep you logged in, assign A/B tests, and analyze usage)
- The content of your inquiries
3. How We Use Information
- To run the test and provide your results and reports
- To process payments, manage subscriptions, and contact you about billing
- To provide the Growth Plan (training and progress tracking)
- To send announcement emails (only to those who have given prior consent)
- To prevent fraudulent use and fraudulent payments
- To improve the Service and analyze how it is used
- To respond to inquiries
4. Service Providers and Disclosure to Third Parties
To provide the Service, we outsource work to the following external services and have them handle information to the extent necessary. Except as required by law, we do not provide personal data to any other third parties.
| Service provider | Information handled | Purpose |
|---|---|---|
| Cloudflare | Email address, test data, purchase status, access logs (including IP addresses), email content | Hosting and content delivery, database and authentication, sending emails, bot protection (Turnstile) |
| Stripe | Email address, information needed for payment | Payments and subscription management |
| Google (GTM / GA4) | Cookies, pages viewed, interaction events | Usage analytics |
The service providers listed above (Cloudflare, Inc., Stripe, Inc., and Google LLC) are U.S. companies, and your information may be processed on servers in the United States and other countries. Information about the personal data protection system of the United States is available on the website of Japan's Personal Information Protection Commission. Each provider takes measures to handle personal data appropriately (such as contractual obligations and security safeguards), which we confirm through our agreements with them.
5. External Transmission (Tracking Tags)
To understand how the Service is used, we may send information to the following external services (disclosed pursuant to the external transmission rules of Japan's Telecommunications Business Act).
| Recipient | Information sent | Purpose |
|---|---|---|
| Google (Google Analytics / Google Tag Manager) | Cookie identifiers, pages viewed, referrer, interaction events | Usage analytics and improvement |
| Stripe | Information needed to display the payment screen | Processing payments and preventing fraud |
| Cloudflare (Turnstile) | Information needed for bot detection | Preventing spam and fraudulent submissions |
You can stop data from being sent to Google Analytics by disabling cookies in your browser settings or by using the Google Analytics Opt-out Browser Add-on provided by Google. For visits from the European Economic Area (EEA), the United Kingdom, and Switzerland, we do not use analytics cookies.
6. Retention Period
We keep the information we collect only for as long as necessary to achieve the purposes of use, and delete or anonymize it after that period. The specific retention periods are as follows.
- Test answers and results, and email addresses of users who have not purchased: 3 years from your last use
- Account information (for users who have purchased): 3 years from your last use, except that payment and contract records are kept for the period required by law (up to 7 years)
- Inquiries: 3 years after the inquiry is resolved
- Access logs: for the period set by each service provider
7. Security Measures
- Encrypted communications (HTTPS)
- Row-level access control in the database, and management of connection keys with separated permissions
- Managing secret keys in environment variables (never including them in source code)
- Operating so that personal information is not written to logs (masking email addresses)
8. Your Rights
Requests to disclose, correct, stop using, or delete personal data we hold about you can be made through our contact form. We will respond to the extent we can verify your identity. You can unsubscribe from announcement emails using the link in the email or from "Account & Billing" in My Page.
9. Use by Minors
If you are a minor, please obtain the consent of a parent or legal guardian before using the Service. If a minor applies for a paid service, we will deem that the consent of a parent or legal guardian has been obtained.
10. Changes to This Policy
We may change this policy in response to changes in laws or in the content of the Service. If we make changes, we will post the revised content and version on this page.
11. Contact
For questions about how we handle personal information, please contact us through our contact form.