Privacy Policy
1. What we collect
When you make a request we collect:
- your name and email address;
- the party size and the dates and times you would like;
- your dietary and allergy information, and any note for the restaurant, if you give them;
- your language.
Your card details are held by Stripe, not by us. We keep only the last four digits and the card type. We use your card only for the ¥1,500 fee.
If you contact us through LINE
When you contact Sapporing through our LINE Official Account, we receive your LINE user ID, the text you send us, and associated message and event identifiers, message types and timestamps. We keep relevant conversation records, including our replies, and link your LINE user ID to your reservation request. Reservation details may include the booking name, contact details you provide, restaurant, date and time, party size, and the outcome of our reservation attempt. We may also receive allergy or accessibility information you choose to provide for your booking. Please do not send medical records or unrelated health information. We do not request your LINE profile information through the profile API.
2. Why
We use this information to phone the restaurant and book your table, to tell you by email how your request is going, and to charge our fee.
If you contact us through LINE, we use this information to match your messages to your reservation request, contact the restaurant by telephone on your behalf, send confirmations and updates through LINE, handle changes or cancellations, and respond to enquiries or disputes concerning our service. We share only the reservation information needed by the restaurant. Before sharing allergy or other health information, we ask for your consent. Message and event identifiers help us associate messages with the correct request and prevent duplicate processing.
3. Who receives it
- The restaurant you choose — what it needs to take your booking: your name, the party size, the time and, if you gave them, your dietary information and note.
- Railway — to host our application and store your information. Storage location: United States (California). Support and subprocessors may access data from other countries.
- Google Cloud Storage — to store our client-side encrypted database backups. Storage location: Tokyo, Japan. We do not share the decryption keys with Google. The listed location refers to storage at rest; support and other processing may occur outside Japan.
- Google Places — to look up public restaurant information. We do not send your name, contact details, or health information to the Places API.
- Stripe — to hold and charge your card. Card details are submitted directly to Stripe. We send Stripe only the information needed to manage your payment, not your dietary or health details. Stripe processes data as both a processor and, for certain purposes, an independent controller. Its payment records may be retained separately under its privacy policy, including for legal compliance and fraud prevention. Country: United States and other countries where Stripe or its service providers operate
- Our email delivery provider — to send you emails. Country: [to be confirmed]
- Google (Gemini) — to translate messages and send automatic replies outside staff hours. We use the paid Gemini Developer API. Google does not use prompts and responses for product improvement. Abuse-monitoring data is retained for 55 days. Suspected abuse may be reviewed by authorized staff and used to train policy-enforcement models. Separate feature-storage and legal-retention rules apply. Processing may occur outside Japan.
- Anthropic — to check translations. We use Anthropic’s commercial API. Inputs and outputs are not used for model training by default. Standard API retention is 30 days, subject to abuse-monitoring, legal, feature-specific and model-specific exceptions. Country: United States
- LINE — only if you choose to contact us through it. If you link LINE, we keep your LINE user ID and the messages you send and receive there, and LINE's service (run by LY Corporation, Japan) carries them. Country: Japan, and any other country where LY Corporation processes them
The United States has no comprehensive federal consumer privacy law. Protections include sector-specific federal laws and state laws such as the California Consumer Privacy Act. It participates in APEC CBPR and the Global CBPR Forum, whose certification systems began operating in June 2025. Country participation does not certify individual providers.
We rely on binding contracts to ensure continued safeguards equivalent to those required by Japan’s APPI. These cover purpose limits, security, staff and subprocessor oversight, onward transfers, incident response and support for your rights. We review their implementation and relevant foreign laws at least annually and after material changes, keep review records, address problems and stop transfers if continued safeguards cannot be ensured.
Using the contact details below, you may request information about these measures. We will provide the information required by APPI Article 28(3) without delay, including how safeguards are established, their outline, review frequency and methods, destination countries, relevant foreign laws, any problems and our responses.
4. Allergy information
If you tell us about allergies or dietary needs, we pass on what is needed to the restaurant so they can prepare. We can't guarantee that the restaurant will be able to accommodate them.
5. Data retention
Routine records. We delete routine reservation information and communications after 90 days, counted from the day after the scheduled restaurant visit. For cancelled or unsuccessful requests, the period starts on the day after cancellation or the unsuccessful outcome is finally confirmed.
Limited transaction evidence. Separately, we retain the booking conditions actually accepted, their text and version, acceptance time, consent to card storage and charging, approved booking details, evidence of booking-confirmation delivery and service completion, and payment references. We exclude unrelated free text and health information and keep identifying information only where necessary to establish authorization or comply with applicable payment requirements. We do not copy raw card numbers or card security codes into this record.
Where the applicable SMCC mail-order and e-commerce terms require it, the relevant application and processing records are retained for seven years. Where the applicable JCB terms require it, the relevant application, service-performance and investigation records are retained for five years. Other limited transaction evidence is retained for 18 calendar months unless a longer binding requirement applies. If more than one requirement applies to a record, the longest required period controls.
Unless the applicable terms require a different starting point or a later deletion date, these evidence periods start on the day after the latest of payment capture, the scheduled visit, final confirmation of cancellation or an unsuccessful outcome, a refund, and creation of the relevant evidence record. Routine access or review does not restart the retention period.
Specific unresolved matters. For a specific unresolved complaint, payment inquiry, dispute or legal claim, we may place only the information reasonably necessary to address it on a restricted deletion hold. We review its need and scope at least monthly. Once the need ends, we release the hold and promptly delete records whose normal retention period has expired. Records still within their normal period retain their original deletion deadline. A hold does not extend retention of the entire reservation record. Access and hold decisions are logged, and applicable deletion restrictions are reapplied before restored backup data is used.
After we delete your data from our live database, it may remain in encrypted daily backup objects under our control for up to 7 additional days. Each backup object is scheduled for deletion six days after it is stored. If we restore a backup, we reapply previous deletions before using the restored data. Restoration does not restart the original retention period. This limit concerns our backup objects; it is not a promise that Google has physically erased every internal residual copy within that period. Any provider-side residual retention is subject to the applicable contractual deletion rules.
Separately, we retain the accounting and transaction records required by Japanese law for the applicable statutory period, generally five or seven years depending on the record and our tax status, calculated from the statutory starting date rather than the 90-day starting date. Any additional retention for a specific unresolved dispute is limited to the information and time reasonably necessary to resolve it. These records are not retained for ordinary reservation operations. Stripe’s retention of payment records does not replace our own statutory record-keeping obligations.
We delete ordinary LINE conversation records and links between your LINE user ID and your reservation request within 90 days, counted from the day after your scheduled restaurant visit. For cancelled or unsuccessful requests, the period starts on the day after cancellation or the unsuccessful outcome is finalized. The separate retention rules in this policy apply to legally required records, records needed for a specific dispute, and restricted backups. This period covers records under Sapporing’s control, not records independently retained by LINE.
6. Cookies
We use a session cookie to keep your booking going from one page to the next. We don't use tracking or advertising cookies. Our card form is provided by Stripe, which sets its own cookies to help prevent fraud.
7. Your rights
Under Japan’s Act on the Protection of Personal Information (APPI), you may request notification of the purposes of use and disclosure of retained personal data identifying you, as well as disclosure of relevant third-party provision records, subject to the statutory scope, requirements and exceptions. You may request correction, addition or deletion of retained personal data whose factual content is inaccurate.
You may request cessation of use, erasure or cessation of third-party provision where the relevant conditions under the APPI are met. These include certain unlawful handling, acquisition or third-party provision, cases where we no longer need to use the data, certain personal data security incidents specified by law, or a risk of harm to your rights or legitimate interests. The action required and any permitted alternative protective measures depend on the applicable statutory provisions.
These rights do not create an unconditional right to access or delete all information. To make a request or raise a privacy complaint, contact Sapporing <support@sapporing.com>. We may ask for information reasonably necessary to verify your identity and identify the relevant data. We will assess your request and respond without delay as required by law. If we decline a request in whole or in part, we will notify you and explain the reasons. Additional rights may apply under other applicable data protection laws.
8. Contact
Sapporing is operated by 片柳 祐希 (Katayanagi Yuki), a sole proprietor. For requests or complaints, contact Sapporing <support@sapporing.com>.
On request, we will provide without delay the information required by Article 32 of Japan’s APPI concerning retained personal data, including our address, all purposes of use, request procedures and any applicable fees, our security measures except details whose disclosure could compromise security, and our complaint contact. If we are a covered business of an accredited personal information protection organization, we will also provide its name and complaint contact.
See also our Terms of Service and Legal notice.