Privacy policy

Who we are

Issei Roots is operated by nagiflow LLC (“we”, “us”). For any privacy question, write to info@isseiroots.com or use our contact page. Our address and the name of our representative are provided without delay on request.

What we collect

• Waitlist: your email address, what you need the records for, whether you know your ancestor’s hometown, your country, your language, your discount code and the time you joined.
• Contact form: your name, email address, topic and message.
• Analytics: pages you visit, device and browser type, and approximate location derived from your IP address, collected with Google Analytics for Firebase using cookies or similar identifiers.
• Server logs: IP address, browser user agent and requested pages, kept by Google Cloud for security and troubleshooting.

We do not ask for family records, certificates or identity documents before launch.

How we use it

• To email your discount code now, and to tell you when we open.
• To answer your messages.
• To understand, in aggregate, which families are waiting for us and where they live.
• To keep the site secure and working.

We do not sell your information, use it for advertising, or share it with anyone except the service providers below.

Legal basis

We rely on your consent for the waitlist emails and analytics, and on our legitimate interest in running and securing the site for server logs and answering messages you send us. If you are in Brazil, this means consent (LGPD art. 7, I) and legitimate interest (art. 7, IX).

Service providers and transfers outside Japan

• Google Cloud and Firebase (Google LLC): hosting, database and analytics. The waitlist and contact messages are stored in Tokyo, Japan; analytics data is processed in the United States.
• Resend (Plus Five Five, Inc.): email delivery, United States.
• Cloudflare, Inc.: domain name service only; it does not receive your form data.

The United States has no comprehensive federal privacy law equivalent to Japan’s Act on the Protection of Personal Information (APPI); some state laws, such as California’s, apply in part. Each provider processes data under its own data protection terms and security measures. By joining the waitlist or sending a message you consent to these transfers (APPI art. 28; for Brazil, LGPD art. 33, VIII).

How long we keep it

• Waitlist: until you unsubscribe, or 12 months after we open, whichever comes first.
• Contact messages: 2 years after our last reply.
• Analytics: up to 14 months.
• Server logs: about 30 days.

Your rights

You can ask us to show, correct, delete or stop using your information, to give you a copy of it, or to withdraw your consent. Every email we send has a link that deletes your waitlist signup. For anything else, write to info@isseiroots.com; we reply within 30 days.

You can also complain to a regulator: in Japan, the Personal Information Protection Commission; in Brazil, the ANPD (Autoridade Nacional de Proteção de Dados).

Security

Data is encrypted in transit and at rest. Only the server can read or write the database; browsers cannot access it directly. Access to our cloud accounts is limited to the people who run Issei Roots.

Children

Issei Roots is not directed at children under 16, and we do not knowingly collect their information.

Changes

If we change this policy, we update the date above. Before we take orders we will publish a new policy covering family records and certificates.