Privacy Policy

Gotaru Co., Ltd. (the “Company”) establishes this Privacy Policy (the “Policy”) for the handling of privacy-related information in the services provided through the smartphone service “tabiori — shareable travel itineraries” (the “Service”).

Article 1 (Privacy-Related Information)

  • “Personal information” means personal information as defined in the Act on the Protection of Personal Information: information about a living individual that can identify that individual through a name, date of birth, address, telephone number, contact details, or other descriptions contained in it.
  • “History and attribute information” means privacy-related information other than the personal information defined above. It includes services used and products purchased; pages and advertisements viewed; search keywords; dates, times, methods, and environments of use; postal code, gender, occupation, and age; IP addresses; cookie information; location information; and device identifiers.

Article 2 (Collection of Privacy-Related Information)

  • When a User registers, the Company may ask for personal information such as their name, date of birth, address, telephone number, email address, bank account number, credit card number, and driver's license number. The Company may also collect transaction records containing the User's personal information and payment information from its partners, including information providers, advertisers, and advertising distribution partners (collectively, “Partners”).
  • When Users use the services or view the pages of the Company or its Partners, the Company collects history and attribute information, including services and software used, products purchased, pages and advertisements viewed, search keywords, dates and times of use, methods of use, usage environment (including mobile-device connection status and settings), IP addresses, cookie information, location information, and device identifiers.

Article 3 (Purposes of Collecting and Using Personal Information)

The Company collects and uses personal information for the following purposes:

  • (1) To display registered information, such as names, addresses, contact details, and payment methods, and information about services used, products purchased, and their charges, so that Users can view or correct their registered information and view their usage status.
  • (2) To use email addresses to send notices or communications, and use names, addresses, and other contact information to deliver products or contact Users as necessary.
  • (3) To verify Users' identities using information such as names, dates of birth, addresses, telephone numbers, bank account numbers, credit card numbers, driver's license numbers, and delivery results for mail with proof of delivery.
  • (4) To bill Users using information about product names and quantities, service types, usage periods and frequency, amounts charged, names, addresses, bank account numbers, credit card numbers, and other payment information.
  • (5) To simplify data entry by displaying information registered with the Company on input screens, or transferring it to other services, including those provided by Partners, at the User's instruction.
  • (6) To deny use to Users who violate the Service's Terms of Service, including by delaying payment or causing damage to third parties, or who seek to use the Service for fraudulent or improper purposes, using usage patterns and identifying information such as names and addresses.
  • (7) To respond to inquiries using information necessary to provide the Service, including inquiry contents and billing information, as well as service usage and contact information.
  • (8) Purposes incidental to the above.

Article 4 (Google Places API)

  • (1) Google Places API for Android and Google Places API for iOS are used to handle location information.
  • (2) Users agree to the privacy policy at http://www.google.com/privacy.html .

Article 4-2 (MCP Integration with ChatGPT, Claude, and Other Clients)

When the Company provides functionality to create, view, and edit tabiori travel itineraries from ChatGPT, Claude, Cursor, or other Model Context Protocol (MCP) clients (“Editor MCP Integration”), information is handled as described below. For details, see the Editor MCP documentation.

  • (1) Authentication and permissions: When connecting, Users authenticate with their tabiori account through OAuth and separately grant editor:read (read) and editor:write (create, update, and delete) permissions. The Company handles information needed for authentication and authorization, including OAuth client ID, client name, redirect host, granted scopes, connection ID, active itinerary ID, authorization codes, access tokens, refresh tokens, connection date and time, last-use date and time, and revocation date and time. Except during issuance and exchange, raw authorization codes and refresh tokens are not stored in the Company's database; their hashes are stored instead. Access tokens are issued and verified as short-lived signed tokens.
  • (2) Information in MCP tool inputs and outputs: At the User's instruction, Editor MCP Integration handles itinerary names, descriptions, travel dates, destinations, schedules, item names, start and end times, memos, place names, addresses, coordinates, telephone numbers, URLs, costs, checklist categories, items and completion states, notes, scrapbook content, itinerary chat text, images or image URLs, upload file information, sharing links, invitation information, hotel search criteria (such as stay dates, number of guests, budget, and search location), hotel names, locations, prices, ratings, images and booking-site links, and IDs needed to update or display this information. It does not retrieve entire conversations from MCP clients or complete lists of files on a device. However, if Users send conversation content, images, files, or personal information as tool inputs, that content is processed for the requested operation.
  • (3) Purposes: Information obtained through Editor MCP Integration is used for OAuth authentication; permission checks; creating, viewing, updating, and deleting itineraries; processing schedules, checklists, notes, scrapbook content, chats, images, and sharing links; previews; searching for and adding hotel candidates; rate limiting; preventing misuse; security; investigating failures; support; quality improvement; and responding to violations of laws or the Terms of Service.
  • (4) Recipients and sharing: To the extent needed to provide Editor MCP Integration, the Company stores and processes information on Firebase / Google Cloud, including Firestore, Cloud Storage, Cloud Functions, and Cloud Logging. Tool results responding to the User's requests, information needed for previews, and error information are returned to ChatGPT, Claude, or other MCP clients used by the User. Hotel searches may send criteria such as search location, stay dates, number of guests, and budget to external accommodation data providers, including Rakuten Travel, Expedia, and Booking.com, to obtain hotel information and booking-site links. The Company does not sell Users' personal information.
  • (5) Retention: User content, including itineraries, schedules, checklists, notes, scrapbook content, chats, images, and sharing links, is retained until the User deletes it or until account deletion or another circumstance makes it unnecessary for providing the Service. OAuth authorization codes expire 10 minutes after issuance. Access tokens normally expire after 1 day and refresh tokens after 90 days. Temporary image-upload URLs and upload tokens normally expire after 15 minutes. Temporary hotel-search caches normally expire after 1 hour. MCP tool audit logs are normally retained for up to 365 days for misuse prevention, security, and troubleshooting, and are then deleted or anonymized. Temporary rate-limit counters expire after approximately 2 minutes at most for ordinary per-minute limits, or approximately 2 hours at most for hourly limits on high-load tools and similar operations.
  • (6) Auditing and minimization: For auditing tool execution, the Company may record user IDs, OAuth client IDs, connection IDs, tool names, success or failure, error codes, affected itinerary IDs, and summaries of tool inputs. Audit logs do not record more personal content, such as memo text, chat text, or image content, than necessary. MCP tools return only information directly necessary for the requested operation and do not request sensitive inputs such as passwords, API keys, MFA/OTP codes, payment-card information, government-issued IDs, or medical information.
  • (7) User controls: Users may disconnect MCP Integration through the settings of clients such as ChatGPT or Claude, or through tabiori's connection-management features or support contact. Users may view, correct, and delete itineraries, schedules, checklists, notes, scrapbook content, chats, images, and sharing links in the tabiori app or website. Requests for disclosure, correction, deletion, or suspension of use of personal information should be directed to the contact in Article 11.

Article 4-3 (Facebook Login)

  • (1) Information collected: When Users log in using Facebook, the Company receives their Facebook user ID, name, profile photo, and email address from Meta Platforms, Inc. (“Meta”), within the scope authorized by the User. The Company does not obtain other information, such as Facebook posts or friend lists. The Facebook SDK incorporated in the Service's app may also send Meta information about app usage, such as app launches, and the device.
  • (2) Purposes: The information received is used for login and account identification, notices and communications, responding to inquiries, and preventing misuse. The Company does not sell this information.
  • (3) Retention: The information is stored on the Firebase / Google Cloud services used by the Company until the User deletes their account.
  • (4) Data deletion: Users may delete their account at any time in the app under Settings > Account management > Delete account. Deleting the account removes all associated data, including itineraries and information received from Facebook. If deletion through the app is not possible, contact the email address in Article 11 with the subject “Data deletion request”. After verifying identity, the Company will delete the data without delay and notify the requester when complete.
  • (5) Disconnecting: Users may disconnect the Service through “Apps and websites” in their Facebook settings.

Article 5 (Providing Personal Information to Third Parties)

  • The Company will not provide personal information to third parties without the User's prior consent, except in the cases below or as otherwise permitted by the Act on the Protection of Personal Information or other laws:
    • (1) Where required by law.
    • (2) Where necessary to protect a person's life, body, or property and obtaining the person's consent is difficult.
    • (3) Where particularly necessary to improve public health or promote the sound development of children and obtaining the person's consent is difficult.
    • (4) Where necessary to cooperate with a national government body, local authority, or their contractor in performing statutory duties, and obtaining consent could hinder those duties.
    • (5) Where the following matters have been notified or published in advance:
      1. The purposes of use include provision to third parties.
      2. The categories of data to be provided to third parties.
      3. The means or methods of provision to third parties.
      4. Provision of personal information to third parties will stop at the person's request.
  • Notwithstanding the preceding paragraph, the following are not treated as third-party provision:
    • (1) The Company entrusts all or part of the handling of personal information to a contractor to the extent necessary to achieve the purposes of use.
    • (2) Personal information is provided as part of a business succession due to a merger or other reason.
    • (3) Personal information is jointly used with specified parties, and the person has been notified in advance, or can readily learn, of that fact, the categories of information jointly used, the scope of joint users, their purposes of use, and the name of the person or entity responsible for managing the information.

Article 6 (Disclosure of Personal Information)

  • When a person requests disclosure of their personal information, the Company will disclose it without delay. However, the Company may withhold all or part if disclosure would fall under any of the cases below, and will notify the person without delay of a decision not to disclose. A fee of JPY 1,000 is charged per disclosure request. Joint use and provision to contractors do not constitute disclosure or provision to third parties.
    • (1) Disclosure could harm the life, body, property, or other rights or interests of the person or a third party.
    • (2) Disclosure could significantly interfere with the proper conduct of the Company's business.
    • (3) Disclosure would otherwise violate laws or regulations.
  • Notwithstanding the preceding paragraph, information other than personal information, such as history and attribute information, is generally not disclosed.

Article 7 (Correction and Deletion of Personal Information)

  • If personal information held by the Company is incorrect, the User may request its correction or deletion using the procedure specified by the Company.
  • If the Company receives such a request and determines that it should comply, it will correct or delete the information without delay and notify the User.

Article 8 (Suspension of Use and Erasure of Personal Information)

If a person requests suspension of use or erasure of personal information on the grounds that it is handled beyond the stated purposes or was obtained improperly, the Company will promptly investigate as necessary and, based on the results, suspend use or erase the information and notify the person. However, if doing so would involve substantial cost or otherwise be difficult, and an alternative measure can protect the person's rights and interests, the Company will take that alternative measure.

Article 9 (Personal Information in tabiori Insurance)

Gotaru, as the policyholder, provides personal information concerning this contract to Tokio Marine & Nichido Fire Insurance Co., Ltd. (“Tokio Marine & Nichido”).

Tokio Marine & Nichido and other Tokio Marine Group companies also use the information within the scope of their business to provide insurance and incidental or related services. Changes to these purposes are made only within a scope reasonably considered substantially related to the original purposes. When changes are made, the person will normally be notified in writing or similar form, or the changes will be published on this website (https://tabiori.com/). The purposes of use of Tokio Marine & Nichido and the Tokio Marine Group companies that entrust insurance solicitation to the Company are described on the websites of Tokio Marine & Nichido and the Tokio Marine Group companies.

Article 10 (Changes to this Privacy Policy)

  • The contents of this Policy may be changed without notifying Users.
  • Unless the Company specifies otherwise, changes take effect when the revised Privacy Policy is posted on this website.

Article 11 (Contact)

For inquiries concerning this Policy, please contact:

Address: Perla Central Building 7F, 1-5-23 Chuo-machi, Oita-shi, Oita 870-0035, Japan
Company: Gotaru Co., Ltd.
Department: tabiori Business Division
TEL : 097-574-7415
Email: info@tabiori.com

Last updated: October 8, 2026

End of Policy