Privacy Policy

1. Information we obtain from you

The Company obtains the following information from customers.

• Name (including nicknames and pen names)
• Age or date of birth
• Gender
• Occupation, employment history and education
• Contact information such as email address, telephone number and address
• Information about customers’ payment methods, such as credit cards, bank accounts and electronic money
• Photographs and videos
• IDs customers use on external services, and other information that customers have permitted to be disclosed to the connected party under the privacy settings of external services
• In providing the Service, information about the computers, mobile phones and other devices customers use, the unique identifiers of those devices, IP addresses, cookie information and location information
• Service usage history, purchase history and inquiry history

2. Purposes of using your information

The Company uses the information obtained from customers for the following purposes.

• To accept registrations for the Company’s services, and to verify and authenticate customers
• To manage customers’ usage history of the Service
• To process payment of usage fees
• To provide the Service to customers, and to provide usage support, notices and the like
• To analyze customers’ usage history of the Service and the like, and use the results to maintain and improve the Service and develop new functions
• To respond to inquiries about the Service and to provide after-sales support
• To deal with acts that violate the Company’s terms or laws and regulations
• To notify customers of changes to, suspension or termination of the Service, or cancellation of contracts
• To notify customers of changes to this Policy and the like
• To advertise, promote and deliver services, campaigns and the like of the Company and its partners
• For other purposes incidental to the above purposes of use

3. Security management measures

Regarding the measures the Company has taken for the security management of information obtained from customers, please contact the inquiry contact listed at the end, and the Company will respond individually in accordance with laws and regulations.

4. Provision to third parties

Of the information obtained from customers, the Company will not provide personal data (Article 16, paragraph 3 of the Act on the Protection of Personal Information (個人情報保護法)) to third parties (including those located outside Japan) without the customer’s prior consent. This does not apply in the following cases.

• Where the handling of personal data is entrusted to an outside party
• Where the Company or the Service is acquired
• Where data is jointly used with business partners (if there is specific joint use, its details will be announced separately)
• Other cases where provision to a third party is lawfully permitted by law

5. Access analysis tools

The Company uses “Google Analytics” to analyze access. Google Analytics uses cookies to collect traffic data. The traffic data is collected anonymously and does not identify individuals. You can refuse the collection of this information by disabling cookies. Please check your browser settings for details. For more about Google Analytics, please see the following.

https://marketingplatform.google.com/about/analytics/terms/jp/

On the Service’s web pages (including the publicly viewable LP library and other pages that can be seen without logging in), the following information is sent from the customer’s device to external parties under the external transmission rules of Japan’s Telecommunications Business Act (電気通信事業法).

• Recipient: Google LLC (Google Tag Manager and Google Analytics)
• Information sent: the URL of the page viewed, the referrer URL, the date and time of viewing, the type and settings of the device and browser, the screen size, the identifier stored in cookies, and the approximate region (estimated from the IP address)
• Purpose of use: analysis of access status and improvement of the Service
• How to stop it: disable cookies in your browser settings, or use the Google Analytics Opt-out Browser Add-on.

6. Measurement by the heatmap function

Through the measurement tag installed on the website of a customer who uses the Service’s heatmap function (the “Client Company”), the Company obtains and handles the following information about visitors to that website, as entrusted by the Client Company.

• The URL (path only) and title of the page viewed
• The scroll depth within the page, the time spent at each position on the page, the position clicked, and the text shown on the link or button clicked
• The type of device used for viewing (determined from the screen width) and the screen width
• The traffic source (the type of source determined from the ad click ID, utm parameters and referrer domain, and the values of utm_source and utm_campaign)

We do not obtain what is entered into forms, or information that identifies individuals such as names and email addresses. IP addresses are not included in the measurement data (they may be temporarily recorded in the server’s communication logs to prevent misuse). We do not use cookies; to determine the traffic source, we use the browser’s session storage only within the tab being viewed.

The information obtained is used to provide heatmaps and analysis results to the Client Company and to maintain and improve the Service, and is deleted once 13 months have passed since it was obtained. If you do not wish to be measured, disable JavaScript in your browser or contact the Client Company.

7. Use of external services in AI functions

In the Service’s AI functions (Ask Doyle, creation of summary reports, advertising operation suggestions, creation of product and service information, etc.), customers’ advertising performance data, the product and service information customers have registered, and ad text, images and the like are sent for AI processing to an API provided by Anthropic, PBC (United States). For the personal information protection system of the United States, please see the website of Japan’s Personal Information Protection Commission.

Under Anthropic, PBC’s commercial terms, data sent through the API is not used to train AI models. For details, please see the following.

https://www.anthropic.com/legal/commercial-terms

If you connect an external AI tool such as Claude (Anthropic, PBC) or ChatGPT (OpenAI) to the Service via MCP (a standard for connecting AI tools to other services), we send that tool the ad performance data, product and service information, ad text, images and other data that your account can access, to the extent you request it in that tool. Data sent to the tool is handled under that provider's terms of use and privacy policy.

A connection only covers the scopes you choose on the Service's authorization screen (reading ad data, proposing ad changes, importing reports, etc.). We never change your ad settings until you review and run the change on the Service. You can disconnect at any time from "AI tools (MCP)" on your account page.

8. Handling of data received from Google services

With the customer’s consent, the Service receives the following data through Google APIs.

• The email address and name of the Google account (for signing in with Google and for showing which Google account was connected)
• Google Ads data (scope: adwords): the settings and performance (impressions, clicks, cost, conversions, etc.) of the accounts, campaigns, ad groups, ads, keywords and search terms in the Google Ads accounts the customer has connected
• Google Sheets data (scope: spreadsheets.readonly): the values in the specified range of the spreadsheets the customer has designated (for entering conversion counts and the like; read-only)

We use the data received only to provide the Service’s functions to the customer personally. Specifically, this means displaying advertising performance reports and dashboards, comparison with goals and alerts, creating analyses and suggestions by the AI functions (as stated in the preceding section, they are sent to Anthropic, PBC’s API for AI processing; Anthropic does not use this data to train AI models), and reflecting in the Google Ads account changes (budgets, bids, pausing and resuming delivery, negative keywords, ad creation, etc.) that the customer has reviewed and approved on the Service’s screen. We never change the settings of a Google Ads account without the customer’s approval.

The Company never uses data received from Google for displaying, targeting or delivering advertisements (including the Company’s own advertisements), never sells it to third parties, never provides it to data brokers or information resellers, never uses it to determine creditworthiness or for lending, and never uses it to train general-purpose AI or machine learning models. The Company’s employees view the data only with the customer’s consent, for security purposes (such as investigating misuse), to comply with laws and regulations, or where it is used for operating the Service in aggregated and anonymized form.

Access tokens and refresh tokens are stored encrypted. If the customer disconnects a Google Ads account in the Service, we delete the tokens and the data imported from that account. If the customer disconnects a spreadsheet, we delete the tokens (the imported conversion counts remain as project data and are deleted when the project is deleted). We also delete the customer’s data upon a request made through the contact form. The customer can revoke the Service’s access permission at any time from the Google account settings (https://myaccount.google.com/permissions).

If you connect an external AI tool to the Service (see section 7), we also send Google Ads data to that tool at your direction, limited to what you request in that tool.

The Service’s use of information received from Google APIs, and its transfer to other apps, will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Handling of login credentials for advertising media management screens

If you use the Service’s automatic data import retrieval, the Company will hold the login IDs and passwords (the “Login Credentials”) for the management screens of the advertising media (ad networks, DSPs, ASPs, etc.) that you have registered.

• Login Credentials are used only to log in to the management screen of the advertising medium you have designated, view and download reports, and import them into the Service. They are not used to change settings on the medium.
• Login Credentials are stored encrypted with a dedicated encryption key, and are not displayed on the Service’s screens or in its records, nor sent to AI processing. Automatic login is performed only within the domain of the login screen you registered.
• When Login Credentials are registered or changed, we notify your registered email address, and you can check the login and retrieval records on the Service’s screen.
• In the initial setup, to identify the procedure for retrieving reports, the content of the advertising medium’s management screen (text and images on the screen) may be sent to the AI processing described in the preceding section. Even in this case, Login Credentials are not sent.
• Login Credentials that have not been used for 90 days, or that have been unable to log in for 30 days, are automatically deleted. They are also deleted immediately if you delete the registration of the medium.
• Please check for yourself whether the terms of use of the advertising medium permit entrusting login credentials to an external service. Wherever possible, please register a user with view-only permission.

10. Requests to remove listings from the LP library

• For requests to remove a listing from the LP library (heydoyle.com/library), we hold your name, email address, company name (optional), and the URL and reason for your request.
• To prevent abuse, we also hold a value obtained by converting the IP address of the sender of the request into an irreversible form (to check for many requests from the same connection in a short time; the IP address itself is not stored).
• This information is used only to handle the removal, to notify you of the result (including a confirmation email to verify your identity if the address is not a company email address), and to prevent abuse.
• The information we hold is automatically deleted one year after the request.

11. Changes to the Privacy Policy

The Company will change the content of this Policy as necessary. In that case, the Company will announce or notify the effective date and content of the changed Privacy Policy by an appropriate method.

12. Contact

For requests for disclosure, questions, complaints and other inquiries, please contact the following.

• Contact form (select “Request to disclose, correct or delete personal information” as the type)

* For requests for disclosure, we will verify the requester’s identity and charge a fee of JPY 1,000 per request.

13. Business information

• Business name: Studio Mountain Field LLC (合同会社Studio Mountain Field)
• Address: R Cube Aoyama 3F, 1-3-1 Kita-Aoyama, Minato-ku, Tokyo, Japan (東京都港区北青山一丁目3番1号 アールキューブ青山3階)