Privacy Policy

fume Inc. (hereinafter "we" or "the Company") establishes this Privacy Policy (hereinafter "this Policy") regarding the handling of personal information of users of paramaCraft (hereinafter "the Service") provided by the Company.

This Policy is prepared in accordance with Japan's Act on the Protection of Personal Information, the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, the California Consumer Privacy Act (CCPA/CPRA), and other applicable laws and regulations.

Article 1 (Scope of Application)

This Policy applies to all personal information collected by the Company in connection with the Service.

The Company handles personal information of users outside Japan (including those in the European Economic Area, the United Kingdom, the United States, and other countries and regions) in accordance with this Policy.

Article 2 (Information We Collect)

The Company may collect the following information in the course of providing the Service.

1. Information You Provide

• Name or username
• Email address
• Password
• Billing information
• Support inquiry content

2. Information Collected Automatically

• IP address
• Device information
• Browser information
• Access logs
• Browsing history
• Cookies and similar identifiers

3. Information Generated Through Service Use

• Download history
• Subscription status
• Account activity

The Service does not use generative AI training, and user data is never used for machine learning purposes.

Article 3 (Purposes of Use and Legal Basis)

The Company uses personal information for the following purposes.

1. Performance of Contract

• Account registration and management
• Providing 3D models and download functionality
• Subscription management
• Customer support

2. Legitimate Interests

• Fraud prevention
• Security assurance
• Service improvement and analytics

3. Consent-Based Processing

• Marketing communications (where applicable)
• Use of cookies for advertising purposes

Users may withdraw their consent to consent-based processing at any time.

Article 4 (Use of Cookies)

The Company uses cookies to improve the usability of the Service and to analyze usage patterns.

For users in the European Economic Area and the United Kingdom, we obtain prior consent for the use of non-essential cookies in accordance with applicable law.

Users may control cookies through their browser settings.

Article 5 (Minors)

The Service is not intended for use by persons under the age of 13.

We do not knowingly collect personal information from individuals under 13. If we become aware that such information has been collected, we will delete it promptly.

Article 6 (Retention Period)

The Company retains personal information for the period necessary to fulfill the purposes of use, or as required by applicable law.

• Account information: deleted immediately upon account closure
• Billing-related information: retained for the period required by law
• Access logs: 30 days

After the retention period expires, data will be deleted or anonymized by appropriate means.

Article 7 (Disclosure to Third Parties)

The Company will not disclose personal information to third parties without the user's consent, except as required by law.

The Company may share information with the following service providers to the extent necessary for providing the Service:

• Payment processor (Stripe)
• Cloud service providers
• Analytics service providers

We enter into appropriate agreements with these providers and require them to implement adequate security measures.

The Company does not "sell" users' personal information.

Article 8 (International Data Transfers)

The Company may process personal information outside Japan, including on servers located in other countries.

Data transfers from the European Economic Area and the United Kingdom are conducted on the basis of adequacy decisions or appropriate safeguards such as Standard Contractual Clauses (SCCs).

Article 9 (Your Rights)

Users have the following rights under applicable law.

• Right to access personal information
• Right to rectification
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right not to be subject to discriminatory treatment (under U.S. state laws)

To exercise any of these rights, please contact us using the details in Article 12.

Article 10 (Security Measures)

The Company implements appropriate security measures to prevent the loss, destruction, alteration, or unauthorized access to personal information, including access controls, encryption, log monitoring, and regular system updates.

Article 11 (Changes to This Policy)

The Company may update this Policy in response to changes in laws or regulations, or changes to our business. Any updates will be posted on the Service.

Article 12 (Contact)

For inquiries regarding the handling of personal information, please contact us at: