Privacy Policy

This policy explains what personal data GL, Inc. collects when you use WP2Next, why, and what your choices are. We handle personal data in accordance with the Japanese Act on the Protection of Personal Information (APPI) and, where it applies, the GDPR.

1. Data we collect

• Account data — your email address and sign-in identity, managed by our authentication provider Clerk. We store your user id and email.
• Payment data — handled by Stripe. We receive a payment confirmation, the amount, and the last part of the card for receipts. We never see or store full card numbers.
• Site data — the URL you submit, the content, images and files of that website as fetched during a scan or conversion, and the generated project. This may incidentally contain personal data published on that site (for example staff names). You confirm you are authorized to have it processed.
• Technical data — IP address, browser type, request logs and error reports needed to run and secure the Service, including rate limiting of free scans.
• Correspondence — your name, email address, and messages sent through the contact form or by email.
• Optional analytics — if you allow analytics cookies, Google Analytics measures visits to our public pages, including browser/device information and approximate location. We do not send account identifiers, submitted website URLs, query strings, or scan, dashboard, and admin page views to Google Analytics.

2. Why we process it

To provide the Service (perform the contract with you), to send transactional emails such as run-completion notices and receipts, to respond to your enquiries, to prevent abuse and keep the Service secure (our legitimate interest), and to comply with legal obligations such as tax record-keeping. With your consent, we also use public-page analytics to understand visits and improve the site.

3. Who else sees it

We use the following processors, each bound by its own data-processing terms: Clerk (authentication), Stripe (payments), Mailgun (transactional email), and our hosting provider (Amazon Web Services) where the application, database and generated archives run. We do not sell personal data and do not use it for advertising. If you opt in to analytics, Google also processes analytics data. See how Google uses data from partner sites.

4. Retention

• Generated archives and verification reports: deleted 30 days after the run completes.
• Scan results and run logs: kept with your project while your account exists.
• Account and purchase records: for the life of the account plus the period required by tax law (in Japan, generally 7 years for transaction records).
• Request logs: up to 90 days.
• Analytics cookie preferences: 180 days. Analytics cookies are configured to expire after 180 days.

5. International transfers

We are established in Japan. Our processors may store data in the United States or the European Union. Where required we rely on recognized transfer mechanisms such as the processors’ standard contractual clauses.

6. Your rights

You can ask us to disclose, correct, or delete the personal data we hold about you, to stop using it, or to export it. Deleting your account removes your projects, scan results and generated archives; purchase records required by law are retained. Contact contact@wp2next.com; we answer within 30 days. If you are in the EU/EEA or UK you may also complain to your supervisory authority.

7. Cookies

Necessary cookies support your sign-in session and Stripe’s fraud prevention on payment pages. Optional Google Analytics cookies are loaded only after you select Allow analytics. Declining does not affect scans, purchases, or your account. Advertising features are disabled. You can change your choice using Cookie settings in the footer. Withdrawing consent stops analytics and removes this site’s Google Analytics cookies. We remember your choice in local storage for 180 days, then ask again.

8. Security

Data is encrypted in transit (TLS). Generated archives are served only to the authenticated owner of the project. Access to production systems is restricted to staff who need it. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and the authorities as required.

9. Changes

The revision date is shown at the top. Material changes are announced in the dashboard before they take effect.

10. Data controller

GL, Inc., 4-10-2 Nakano, Nakano-ku, Tokyo 164-0001, Japan. Email: contact@wp2next.com.