Privacy Policy

Last updated: May 11, 2026

Astamup ("we," "us," or "our") establishes this Privacy Policy ("Policy") regarding the handling of users' personal information in connection with the FX trade recording and analysis service ("Service") provided by us.

Article 1 (General Provisions)

1. This Policy sets forth the basic policy of our handling of personal information in the provision of the Service.
2. We shall comply with the Act on the Protection of Personal Information of Japan and other applicable laws, regulations, and guidelines, and shall appropriately handle the personal information of Users.
3. For inquiries regarding this Policy, please contact us at support@astamup.com.

Article 2 (Information We Collect)

We collect the following information in connection with the use of the Service.

1. Account Information

   • Email address, display name, and profile picture (where authentication is conducted via Google OAuth)

2. Usage Information

   • Trade record data, workspace settings, analysis board settings, and other information input or generated by Users using the Service

3. Payment Information

   • Information necessary for payment processing is processed through our payment service provider (Stripe). Credit card numbers and other sensitive payment details are not stored on our servers.

4. Automatically Collected Information

   • IP address, user agent, UTM parameters, page views, interaction history, device information, and other technical information automatically collected when Users use the Service

Article 3 (Purpose of Use)

We use the personal information we collect for the following purposes.

• To provide, operate, maintain, and improve the Service
• To respond to inquiries and provide user support
• To process payments and manage subscriptions
• To analyze usage of the Service (including processing into anonymized statistical form)
• To prevent unauthorized use of the Service and to ensure security
• To detect errors and respond to incidents
• To send notifications relating to the Service
• To provide information regarding new features and related services (Users may opt out)
• To comply with applicable laws and regulations

Article 4 (Cookies and Tracking Technologies)

1. The Service uses the following types of cookies and similar technologies.
   • Authentication cookies (for maintaining login status)
   • Analytics cookies and localStorage (for usage analysis)
   • Locale setting cookies (for language preferences)
2. Users may disable cookies through their browser settings. Please note that some features of the Service may become unavailable if cookies are disabled.

Article 5 (External Data Transmission and Third-Party Services)

1. We use third-party services for the following purposes in connection with the operation of the Service, and certain information may be transmitted to such external services.
   • Analytics services (including transmission of interaction logs, device information, IP address, and similar data)
   • Error monitoring services (including transmission of error information, device information, and similar data)
   • Payment processing services (including transmission of payment information, email address, and similar data)
   • Database and authentication services (including transmission of account information, usage data, and similar data)
   • File storage services (including transmission of uploaded files, access logs, and similar data)
   • Hosting services (including transmission of access logs and similar data)
2. Each service provider handles transmitted information in accordance with its own privacy policy.
3. We may also use other similar services for equivalent purposes.

Article 6 (Disclosure to Third Parties)

1. As a general rule, we shall not provide personal information to any third party without the prior consent of the User. Notwithstanding the foregoing, we may provide personal information to a third party in any of the following cases.
   • Where required by laws or regulations
   • Where necessary for the protection of human life, body, or property, and obtaining the consent of the User is difficult
   • Where personal information is entrusted to a service provider under appropriate supervision to the extent necessary to achieve the purposes of use
   • Where personal information is transferred in connection with a business succession by way of merger, business transfer, or other similar event
   • Where the User has given prior consent
2. We may provide anonymized or processed information not falling under personal information without the foregoing restrictions.

Article 7 (Data Storage Location and Cross-Border Transfer)

1. The Service is operated through third-party service providers located primarily in the United States, and personal information may be stored on servers located in such countries.
2. Personal information shall be processed by service providers that have implemented appropriate security measures in accordance with Article 28 of the Act on the Protection of Personal Information of Japan.
3. Each service provider shall protect personal information in accordance with its respective privacy policy.

Article 8 (Data Retention Period)

1. We shall retain account information and trade data during the period in which the User's account exists.
2. We shall retain payment history for the period required by applicable laws and regulations.
3. We shall retain access logs for a reasonable period necessary for the operation of the Service.
4. Personal information following the deletion of an account shall be deleted, including backup data, after a reasonable period of time has passed.

Article 9 (Security Measures)

1. We implement the following technical measures for the protection of personal information.
   • Encryption of communications using TLS
   • Hashing of passwords
   • Implementation of access controls
2. We implement organizational measures including the establishment of personal information handling regulations.
3. We rely on the security standards of the cloud service providers we use.

Article 10 (User Rights)

1. Users may request disclosure, correction, addition or deletion, suspension of use, erasure, and suspension of provision to third parties of their personal information held by us.
2. Requests under the preceding paragraph shall be made by email to support@astamup.com.
3. We shall respond within a reasonable period after verifying the identity of the requesting User.
4. No fee shall be charged for responding to such requests.

Article 11 (Changes to This Policy)

1. We may change this Policy as we deem necessary.
2. Where we make any material change to this Policy, we shall notify Users by posting on our website, by email, or by other appropriate means.
3. Where a User continues to use the Service after any change to this Policy, the User shall be deemed to have agreed to the changed Policy.
4. Notwithstanding the foregoing, where we make any material change to the purpose of use of personal information that goes beyond a scope reasonably related to the original purpose of use, we shall obtain the User's consent in advance.

Article 12 (Contact)

For any inquiries regarding this Policy or the handling of personal information, please contact us at support@astamup.com.

---

End