ChoralLib Privacy Policy

Last Updated: March 4, 2025

ChoralLib (hereinafter referred to as "the Service") establishes the following privacy policy (hereinafter referred to as "this Policy") regarding the handling of users' personal information. Users of the Service (hereinafter referred to as "Users") agree to this Policy when using the Service.

Article 1 (Scope of Collected Information)

1. The Service defines "personal information" as information obtained, managed, and used in accordance with applicable privacy laws and regulations.
2. The Service collects and processes the following personal information:
   • Email address for user registration and communication
   • Payment information (such as credit card details) handled through Stripe Japan, Inc. (hereinafter referred to as "Stripe"). The Service does not store full credit card details, as all payments are processed via Stripe.
   • Technical information such as IP address, browser type, and language settings, which are automatically collected for usability improvement and security purposes. However, analytics data, including browsing history and search queries, which are not essential for providing the Service, will only be collected with the User’s consent.
   • Error tracking and issue analysis information collected via Sentry
3. Additional personal information may be collected as needed (e.g., for investigating unauthorized use). Such information will only be obtained upon prior consent from the User.

Article 2 (Methods of Collecting Personal Information)

1. The Service collects personal information through the following methods:
   • Email address input during user registration
   • Payment details when purchasing paid membership plans (processed via Stripe)
   • Cookies to collect browsing data for service improvement and functionality enhancement
   • Error tracking and issue analysis via Sentry
2. Users may choose not to provide personal information; however, certain features of the Service may be unavailable without it.

Article 3 (Purpose of Collecting and Using Personal Information)

The Service collects and uses personal information for the following purposes:

1. To provide and operate the Service
2. To process payments for paid services
3. To respond to User inquiries
4. To ensure compliance with the Terms of Service and prevent unauthorized use
5. To allow Users to manage their account information
6. To generate statistical data for service improvement
7. To conduct marketing research and analyze usage trends
8. To develop and plan future services
9. To confirm identity in case of security incidents (e.g., unauthorized access)
10. Error tracking and issue analysis
11. For purposes related to the above

Article 4 (Changes to the Purpose of Use)

1. The Service may change the purposes of use within a reasonable scope related to the original purposes.
2. If the purposes are changed, the new purposes will be disclosed in accordance with Article 9 (Revisions to this Policy).

Article 5 (Provision of Personal Information to Third Parties)

1. The Service will not provide personal information to third parties without prior consent from the User, except in the following cases:
   • When required by law
   • When necessary to protect life, health, or property, and obtaining User consent is difficult
   • When cooperating with public institutions (e.g., government agencies), and obtaining User consent would interfere with their duties
   • When the following conditions are disclosed in advance:
     • Inclusion of third-party provision in the purposes of use
     • Types of data provided
     • Methods of provision
     • Availability of opt-out options for Users
2. The following cases do not constitute third-party provision:
   • When the Service outsources personal data handling within the scope necessary for achieving the purposes of use
   • When personal data is transferred due to business succession
3. Specific third-party service providers that receive personal data are listed in Appendix.

Article 6 (Management of Personal Information)

1. The Service takes reasonable and necessary security measures to prevent leaks, loss, or damage of personal information.

Article 7 (Disclosure of Personal Information)

1. If requested by a User, the Service will disclose their personal information within a reasonable scope and without delay. However, identity verification will be conducted to prevent fraudulent requests. Disclosure requests must follow the procedures prescribed by the Service. The Service may refuse disclosure in the following cases:
   • If disclosure may harm the User or a third party
   • If disclosure significantly interferes with the Service’s operations
   • If disclosure violates applicable laws
2. Non-identifiable statistical or characteristic data is not subject to disclosure.

Article 8 (Correction and Account Deletion)

1. Users may request corrections or deletions of their personal information if they believe it to be incorrect. Additionally, Users may delete their accounts through the prescribed procedure.
2. When a User deletes their account, the associated personal information will be removed from the Service’s database, except for data required to be retained by law.

Article 9 (Revisions to this Policy)

1. The Service may revise this Policy as necessary.
2. Continued use of the Service after revisions will be considered acceptance of the new Policy.

Article 10 (Contact Information)

For inquiries regarding this Policy, please contact us via the following:

• Inquiry Form

Appendix (Third-Party Data Sharing)

Third-Party Recipient	Data Shared	Method of Sharing
Mixpanel	Browsing data	API provided by Mixpanel
Stripe	Payment processing information	API provided by Stripe
Sentry	Error logs	API provided by Sentry

End of Document.