Privacy Policy

This Privacy Policy explains how Creators Team Inc. ("we," "us," or "our"), which provides the brand asset sharing service "MediaKit™" (mdkt.in, the "Service"), collects, uses, stores, and shares your information with third parties.
If you do not agree to the content of this Policy, you may not use the Service.
This Policy is also available in Japanese. The English version is a reference translation only; in the event of any discrepancy between the Japanese and English versions, the Japanese version shall prevail.
If you have any questions or concerns, please contact us at master@creators-team.com.

§01Information We Collect

Summary: we collect the information you provide when registering an account, the information you provide to register and operate an Org Page, and information collected automatically as you use the Service.

We collect the following information in order to provide the Service.

• Account information: your name, email address, and password (stored after cryptographic hashing — we do not retain your original password), and profile image (optional). We send a confirmation code to verify your email address.
• Organization (workspace) information: organization name, URL slug, website URL, and organization thumbnail image. If the Locked setting is selected, the access password (also stored after hashing; this is distinct from your account password).
• Listed Content: logo files, brand colors, and the text and settings of usage guidelines uploaded by a Registered Organization.
• Invitation information: the email address entered by an organization's member when inviting a third party.
• Report information: the category, name, and email address entered when using the report feature.
• Email delivery records: for the announcements and guidance emails we send, we record, per account, that an email was sent, that it was opened, and that a link in it was clicked, each with its date and time. We also record the kind of browser or email app involved (a shortened user agent) and whether you have unsubscribed. Email addresses and IP addresses are not part of this record.
• Sign-in records: for each attempt to sign in, sign up, enter a confirmation code, or reset a password, we record whether it succeeded or failed (and, if it failed, a category for the reason), the date and time, and the request identifier Cloudflare assigns. We attach the record to the account when the attempt can be matched to one, and otherwise to a one-way code derived from the email address. We also store the time each account last signed in. Email addresses, IP addresses, and user agents are not part of this record.
• Automatically collected information: language preference, theme preference, sign-in status, Org Page access status, and access logs (IP address, user agent, access time, and the like) collected via cookies, along with the Google Analytics traffic data described below.

§02Purposes of Use

Summary: we use your information to provide and operate the Service, communicate with you, maintain security, and analyze usage.

• To provide the Service's features, including account creation and authentication, creating and operating Org Pages, and storing, displaying, and delivering Listed Content
• To send necessary notices by email, such as account confirmation codes, password resets, and organization invitations
• To send announcements by email, such as new features, fixes, and guidance on using the Service (you can unsubscribe at any time with the link at the bottom of each email)
• To learn whether announcements are reaching you and whether the guidance is useful, so we can improve it (using the open and link-click records)
• To respond to reports and misuse, and to maintain security
• To respond to inquiries from people who cannot sign in, and to notice suspicious sign-in attempts (using the sign-in records)
• To understand and improve usage of the Service (including traffic analysis via Google Analytics)
• To respond to inquiries
• To comply with applicable law

An email is recorded as opened when a small image in it is loaded; turning off automatic image loading in your email app avoids this. A link click is recorded because the link passes through our server on its way to the page; if you would rather not be recorded, do not press the link and type the address into your browser instead. Visits that arrive through these links appear in Google Analytics grouped by the kind of email, and no information that identifies you personally is sent to Google.
If you do not want announcement emails, unsubscribe with the link at the bottom of any of them. Notices needed to use the Service, such as confirmation codes, password resets, and invitations, are not affected by unsubscribing.

§03Publication Settings and Access Passwords

Summary: Org Pages set to Public or Unlisted, and the content on them, can be viewed by any third party who has the URL.

A Registered Organization may choose its Org Page's publication setting from "Public" (shown in search results and listings, viewable by anyone), "Unlisted" (not shown in search results or listings, but viewable without a password by anyone who has the URL), or "Locked" (not shown in search results or listings, and an access password is required). If Public or Unlisted is selected, the logos, brand colors, guidelines, and other content on that Org Page, as well as the organization's name, become viewable and downloadable by any third party who has the URL. Which publication setting to use is a decision made solely by the Registered Organization; we do not individually review that content.

§04Cookies and Similar Technologies

Summary: we use cookies to keep you signed in, remember your language preference, and analyze usage.

We use the following cookies in the Service.

• Language preference cookie: used to remember your display language (Japanese/English) (retention: up to 365 days).
• Sign-in session cookie: used to keep you signed in to your account (retention: up to 30 days).
• Org Page access cookie: used to remember, for a limited time, that you have authenticated with the password of a Locked Org Page (retention: up to 7 days).
• Theme preference cookie: used to remember your display theme (light/dark) (retention: until the browser is closed).
• Google Analytics: we use Google Analytics, provided by Google LLC, to analyze usage of the Service. This causes Google to issue its own cookies (such as _ga), and information including the URL of pages viewed, referrer, browser/device/screen information, and identifiers recorded in cookies is sent to Google. Information collected in this way is managed by Google in accordance with Google's own privacy policy. You can disable this tracking by disabling cookies in your browser settings, or by using the opt-out tools Google provides.

§05Third-Party Provision and Outsourcing

Summary: to the extent necessary to provide the Service, we entrust operations to the external service providers listed below. We do not sell your information to third parties.

We entrust the handling of information to the following external service providers in operating the Service.

• Cloudflare, Inc.: used as the hosting, database, and storage infrastructure for uploaded files for the Service.
• Resend: used to send confirmation codes, password reset, invitation, and announcement emails.
• Google LLC: used for traffic analysis of the Service (Google Analytics) and for the delivery of web fonts (Google Fonts). Loading these fonts causes a visitor's IP address and similar information to be sent to Google.

If we transfer all or part of our business to a third party, your information may be transferred to the transferee as part of that transfer. Other than as described above, we do not provide personal information to third parties without your consent, except where disclosure is required by law.

§06Entrustment to Third Parties Located Overseas

Summary: all of the providers named in the preceding section are located in the United States, and your information is handled on servers and systems located there.

Cloudflare, Inc., Resend, and Google LLC, referenced in the preceding section, are all entities located in the United States. We exercise the necessary and appropriate oversight over these providers, through agreements and other means, to ensure that measures equivalent to those we are required to take under the Act on the Protection of Personal Information are implemented. Information about the personal information protection system in the United States is available on the website of Japan's Personal Information Protection Commission and similar sources. Please contact us using the details below if you have any questions.

§07Security Measures

Summary: we take measures including encrypting communications, hashing passwords, and controlling access.

To prevent the leakage, loss, or damage of the personal information we handle, we take the following measures: encrypting communications via TLS; storing passwords (both account passwords and Org Page access passwords) using cryptographic hashing; access control based on authorization; and appropriately selecting and supervising our service providers. We will respond promptly if you contact us using the details below for more information about our security measures. That said, no transmission of information over the internet is completely secure, and we do not warrant otherwise.

§08Retention Period

Summary: we retain information for as long as your account or Org Page exists. Deleted information may remain for a limited time in our systems, such as in backups.

We retain your information for as long as necessary to provide the Service. If your account, Org Page, or other Listed Content is deleted, we promptly stop displaying and serving it through the Service, though it may remain for a limited time afterward where required by law or due to system constraints such as backups or replicated data.
We delete sign-in records once they are about 180 days old. Email delivery records are deleted together with the account.

§09Your Rights

Summary: you can view, change, or delete your own registered information and Listed Content at any time from the dashboard once signed in.

Once signed in, you may at any time change your name and profile image, and view, change, or delete information about organizations you belong to and the logos and brand colors you have registered, from the dashboard. You may delete your account from the dashboard, provided you do not belong to any organization at the time. You can change your password through the password reset process. If you wish to change your email address, please contact us using the details below. See the Terms of Service for the conditions under which an account or Org Page may be deleted.
If you wish to exercise a right you hold under applicable law (such as a request for disclosure, correction, deletion, or suspension of use), or if you have any other question or comment, please contact us by email at master@creators-team.com.

§10Changes to This Policy

We may update this Policy from time to time in response to changes in applicable law or in the Service. If we make a material change, we will announce it on the Service. If you continue to use the Service after such a change, you are deemed to have agreed to the revised Policy.

§11Contact

For questions, comments, or requests for disclosure regarding this Policy, please contact us by email at master@creators-team.com.