Loading document
LAST UPDATED 2026.09.06
YOSHINANI Brick is operated by YOSHINANI Inc., headquartered at 29F, Osaka Ekimae No. 3 Building, 1-1-3 Umeda, Kita-ku, Osaka, Japan, and represented by Yusei Hyodo. We handle personal information in accordance with this Policy.
We collect information needed to provide the Service, including your name, display name and email address; your Google account identifier and profile information when you use Google sign-in; passkey public keys and authenticator metadata; posted, creation and source data such as text, images, 3D data and chats; access time, IP address, device, cookies, sign-in results and authentication-setting activity logs; credit grants and usage; Stripe customer IDs, subscription status and purchase history; and the billing country confirmed at payment and the currency actually charged. You may be asked to enter a billing address on Stripe's checkout page so that tax can be determined correctly. Stripe collects and retains that billing address; we store only the billing country and the payment currency. We do not collect or retain the biometric data or device PIN used with a passkey. Stripe collects card numbers, expiry dates and security codes directly; we do not retain them.
We use collected information to manage and authenticate accounts, display and share posted content, improve quality and develop features, prevent abuse and protect security, respond to inquiries, provide AI features, determine the correct tax treatment and produce transaction records required by law and accounting rules, determine the territories where the Service and paid plans are available (including the country inferred from your IP address), and, only where you have opted in, send you email updates such as creation tips, new and popular creations and ideas (you can unsubscribe at any time). Recent conversation content may be processed temporarily to understand context.
We do not disclose personal data to third parties without consent unless permitted by law. We use providers needed to operate the Service, including Google for authentication and analytics; Stripe for payments; Vercel and Supabase for infrastructure; email delivery services for transactional, notification and opted-in update emails; Discord for operational communications; and providers used for AI, image and 3D processing. To begin handling inquiries promptly, we notify Discord of the selected category, message, submission ID and display language, but we do not send the email address to Discord. Information needed to perform a requested feature or measurement may be sent to providers. When a Google sign-in suggestion is loaded for a signed-out visitor, information such as the IP address and browser or device details may be sent to Google. We review relevant safeguards and data-use terms and exercise appropriate oversight.
AI generation, image conversion and 3D conversion features are provided using models and APIs operated by external generative-AI providers we select. Text, images, 3D data and similar input you provide are sent to those providers to the extent needed to perform the requested feature. Their handling of that data follows their own privacy policies and data-use terms, and we aim to select providers and configurations that do not use input data to train AI models. Generated results are stored in storage we control, and we may change providers at our discretion. If you upload images containing another person's face or other personal information, you must obtain that person's consent first.
Some providers and processing locations are outside Japan. Where a third party outside Japan handles personal data, Japanese privacy law requires us to secure, by contract or another appropriate method, that the party continuously implements measures equivalent to those required of a personal information handling business operator, and we periodically review that implementation and the privacy framework of the destination country. Information that applicable law requires about destination countries, their frameworks and provider safeguards is available on request through the contact form within a reasonable scope.
We use cookies and similar technologies to maintain authentication and remember preferences such as theme and language. Only when you allow analytics, we use Google Analytics to measure pages viewed, access time, approximate location, and browser and device information for service improvement. Google Analytics uses first-party cookies such as _ga to distinguish visitors; we do not use Analytics for advertising. Declining does not affect the Service's core features, and you can change your choice using Analytics settings below.
User data is retained while an account is active. Security audit logs for sign-in results and authentication-setting changes are normally deleted after 180 days. Records of your consent to and unsubscription from update emails are kept for one year after you unsubscribe. Delivery, bounce and complaint records are stored using a hash of your email address rather than the address itself. When you delete your account, we delete personal data such as your profile, posts, projects and authentication information. Payment and transaction records required by law or accounting needs may be retained for the necessary period after being disconnected from your account. To prevent repeat welcome gifts, we retain a keyed hash of the email address and gift-use records after account deletion for as long as we continue to provide these offers. These records are disconnected from the account and are not used for advertising.
After verifying your identity, we respond to requests to access, correct, suspend use of or delete personal information in accordance with applicable law. Submit requests through the contact form. You can stop update emails at any time from Settings or the link in each email.
Contact us through the contact form with questions about this Policy. We may update the Policy to reflect changes in law or the Service.