ZipUpp

PRIVACY

ZipUpp Privacy Policy

Effective date: November 6, 2026

Nagasaki Private Tours Co.,Ltd. handles personal information and other data processed through ZipUpp, an AI-assisted recruitment and career service, in accordance with applicable law and this Policy.

1. Information we collect

  1. We collect account details, identity and contact information, profiles, resumes, work histories, qualifications, preferences, Company and Job information, questions and answers, and Service activity.
  2. Depending on the features used, we collect AI interview audio, conversations, reports, consent evidence, billing, audit, and support records.
  3. We may collect device, browser, access-time, and other technical information reasonably necessary for security, fraud prevention, and incident response.

2. How we use information

  1. We use information to manage accounts and provide identity checks, job and Candidate discovery, condition comparison, questions, information disclosure, AI interviews, and other Service functions.
  2. Within the scope selected by the User, we use information for AI-assisted organization, extraction, summarization, reporting, and reusable-information management.
  3. We also use information for support, billing, audit, fraud prevention, security, quality improvement, legal compliance, and protection of rights.

3. AI processing

  1. Before material AI processing, the relevant screen explains the purpose, scope, and any required consent.
  2. AI assists with organizing registered information and does not automatically register career history or facts that the individual did not provide.
  3. Where an external AI provider is used, we apply contractual safeguards, access controls, and appropriate data minimization.

4. Sharing and service providers

  1. When you register through a referral partner or agent link and attribution is verified, we email only that referrer after email verification with your registration completion, company or personal name, email address and registration time, so they can confirm the outcome of their referral activity. Responses, interview reports and other private profile content are excluded. Registrations without verified attribution are not reported.
  2. Before sharing information between a Candidate and Company, we identify the recipient, purpose, and scope and obtain any required consent. Anonymous profiles hide the Candidate's name, address, phone number, and email address. Past and current employers, education, and qualifications may be shown. Candidates can hide their current employer by selecting “Also hide my current employer while anonymous” in their profile. Anonymous display hides names and contact details; it does not eliminate the possibility of identifying someone from a combination of employers and career details. Before expanding sharing, we obtain consent to the new scope rather than treating previous consent as acceptance of that scope.
  3. We may allow providers of cloud storage, AI, email, payment, monitoring, support, and related services to process only the information needed to perform their work.
  4. We may disclose information to comply with lawful requests or where reasonably necessary to protect life, safety, or legal rights.

5. Cross-border processing

  1. Information may be processed outside the User's country, including in Japan and the United States.
  2. Where notice, contracts, or consent are required for a cross-border transfer, we take the measures required by applicable law.

6. Audio and other important information

  1. With explicit start consent, the requesting Company can play and download interview audio before information disclosure. Audio is not anonymized; the Company manages downloaded copies. Retention is shown before recording. Earlier recordings remain subject to their original consent terms.
  2. Resumes, work histories, identity details, contact details, and audio may contain personal information and are protected through permission and consent controls.

7. Retention

  1. We retain information for the period reasonably necessary for the purpose, feature-specific retention, contracts, law, billing, audit, security, and dispute handling.
  2. Feature-specific periods, including AI interview audio retention, are displayed in the relevant experience.
  3. After a deletion request, we may retain the minimum information required for law, billing, fraud prevention, audit, or protection of rights.
  4. To verify information disclosure and respond to lawful requests from authorities, we retain text records of the requester, Candidate, recipient Company, presented disclosure content, consent time, release activity, and related charges, invoices and payments without an automatic expiry, including after account deletion. These restricted administrative records include necessary identifying information and are not available through ordinary Company or Candidate screens. No additional PDF, image or audio files are retained for this purpose. Applicable legal rights remain as described below.

8. Security

  1. We apply reasonable technical and organizational safeguards, including access controls, authentication, encryption, audit records, and separation of permissions.
  2. If a security incident occurs, we investigate, remediate, report to authorities, and notify affected people as required by applicable law.

9. User rights

  1. Subject to applicable law, Users may request access, correction, restriction, deletion, and other available rights regarding their personal information.
  2. Account settings support review and correction of registered information and account-deletion requests. We may require lawful identity verification.

10. Minors

  1. The minimum age to use the Service is 18.

11. Cookies and similar technologies

  1. We may use cookies and similar technologies for sessions, language, security, product usage, and attribution.
  2. Where applicable law requires consent for a technology, we provide the required choice before using it.
  3. If you allow advertising measurement, public employer and candidate page visits and new registration completion, time, advertising click/cookie identifiers, and IP/browser information are sent to Google Ads, Meta and LinkedIn to measure advertising visits and registrations. Employer measurement uses Google Ads and LinkedIn; candidate measurement uses Meta. We do not send names, email addresses, resumes, profiles, interview content or administration-screen information.
  4. Advertising measurement is optional. Declining does not prevent registration or use. You can change your choice and stop future measurement through Advertising privacy settings on this page. Your choice is retained for 180 days; the click-ID record stored by ZipUpp for up to 30 days. Advertising providers’ cookies follow their own policies. Providers process and retain received data under their own privacy policies, including outside your country in Japan or the United States. Withdrawal does not delete previously transmitted data.
  5. We automatically measure registration activity for our internal service improvement: form views, manual input starts, submissions, error categories, account creation and first email verification. Measurement does not store field values or send them to advertising services or Google Analytics. Activity is grouped within this tab for one hour and used within our configured retention period. We respect GPC, and registration remains available. Closing the tab removes the information used to find its observations. Recovery backups follow a separate retention schedule.
  6. When registration-button activity is measured, we send the company or candidate page, button position and page language to Google Analytics. We do not add form contents or an identifier linking the click to your registration. Repeat clicks on the same button in one tab are grouped for one hour. We respect GPC. We cannot identify and delete an individual click from aggregates already sent. Google processes and retains received data under its privacy policy.

12. Changes

  1. We notify Users before a material change takes effect through the Service, registered email, or another appropriate method.
  2. Where applicable law requires renewed consent, we obtain it before the changed processing applies.

13. Operator and contact

Operator
Nagasaki Private Tours Co.,Ltd.
Address
Shibuya Dogenzaka Tokyu Building 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan
Contact
info@zip-upp.com
Privacy Policy | ZipUpp