Privacy Policy

1. Business Operator and Scope

Nstock K.K. ("the Company," "we," "us," or "our") (Shibuya 2-24-12, Shibuya-ku, Scramble Square 18F, Tokyo 150-0002) is the personal information handling business operator under Japan's Act on the Protection of Personal Information ("APPI") with respect to personal information collected through ntsock.com (the "Service").

Nstock provides AI-assisted equity and stock-option management for Japanese startups. Our core product processes cap table data, option grant details, vesting schedules, and related corporate records submitted by startup founders and their teams. This policy describes how we handle the personal information that flows through that service.

For questions, contact us at: [email protected]

2. Categories of Personal Information We Handle

Because Nstock operates as an equity administration platform, the personal information we handle falls into two main streams:

Account and contact information you submit directly: your name, company name, work email address, job title, and payment details when you subscribe to a paid plan.

Equity and corporate record data you enter into the Service: shareholder names, option holder names, exercise prices, grant dates, vesting milestones, and similar data required to administer your company's cap table and zeisei-tekikaku stock option program. This data concerns individuals whose information you, as the account holder, have responsibility to handle appropriately under the laws applicable to your company.

Technical and usage information collected automatically: IP address, browser type, pages visited, session duration, and error logs used to operate and improve the Service.

Support and communication content: messages you send us through the contact form or email, including any attachments.

3. Purposes of Use

We use personal information for the following purposes, which we will not exceed without your prior consent except as permitted by APPI:

• Providing the cap table management, option grant generation, zeisei-tekikaku compliance checking, and vesting tracking features of the Service;
• Processing subscription payments and issuing invoices;
• Communicating with you about your account, product updates, and compliance-relevant regulatory changes in Japan's stock option rules;
• Responding to support requests and inquiries;
• Improving and developing the Service, including training and evaluation of our compliance-checking logic (using anonymised or aggregated data only; we do not train models on identifiable equity records without explicit written consent);
• Complying with legal obligations under Japanese law, including APPI, the Companies Act, and tax regulations relevant to stock option plans.

4. Provision to Third Parties and Cross-Border Transfers

We provide personal information only to processors acting on our behalf and under appropriate contractual supervision, including cloud infrastructure providers that support the Service. We do not sell your personal information or your company's equity data to third parties.

Where personal information is processed or stored by service providers outside Japan, we confirm that such providers maintain data protection standards consistent with APPI and, where required by APPI Article 28, we provide you with information about the recipient country's data protection regime. Our infrastructure is operated with a preference for Japan-based data residency; where cross-border transfer is necessary we rely on contractual safeguards and, where applicable, the recipient country's comparable legal framework.

We do not disclose personal information to other companies for their independent marketing purposes.

5. Your APPI Rights

As a data subject under APPI, you have the following rights with respect to retained personal data the Company holds about you:

• Right to disclosure of retained personal data;
• Right to correction, addition, or deletion where the data is factually inaccurate;
• Right to cease use or provision to third parties where use exceeds the notified purposes or was obtained by improper means;
• Right to disclosure of records of provision to third parties.

To exercise any of these rights, email us at [email protected]. We will respond promptly and without undue delay. We may need to verify your identity before processing a request.

You may also file a complaint with the Personal Information Protection Commission of Japan at ppc.go.jp.

6. Security

We implement technical and organisational measures appropriate to the nature of the data we handle. For an equity platform processing sensitive corporate records, this includes encryption at rest and in transit (AES-256, TLS 1.3), role-based access control, audit logging for all cap table and grant actions, and annual security reviews. Details are on our Security page.

7. Retention

We retain personal information for as long as your account is active and for a reasonable period after closure to meet legal and contractual obligations. Equity and corporate record data you submit may be subject to retention obligations under Japanese corporate and tax law independently of your decision to stop using the Service; we will advise you of applicable requirements when you request deletion.

8. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

9. Changes to This Policy

We may update this policy when our data handling practices change, such as when we add a new data category or service provider. Material changes will be posted with a new "Last updated" date and, where appropriate, notified to account holders directly.

10. Contact