Privacy Policy

Last updated: August 24, 2026

AIdia Co., Ltd. ("AIdia", "we", "us" or "our") provides consulting services, cloud services, and digital advertising delivery and operational support using demand-side platforms (DSPs) and related advertising technology. We recognise the importance of the information we handle in the course of our business, respect the rights and interests of individuals, and comply with the Act on the Protection of Personal Information of Japan (the "APPI") and other applicable laws, regulations and guidelines.

1. Basic Policy

• We clearly define the information we collect and the purposes for which we use it, and handle it appropriately within the scope necessary to achieve those purposes.
• We endeavour to keep personal data accurate and up to date, and we delete or anonymise information that is no longer required.
• We implement necessary and appropriate security control measures to prevent leakage, loss, damage and unauthorised access.
• We supervise our employees and service providers appropriately and continuously review how information is handled.
• We respond in good faith, and in accordance with law, to enquiries, complaints and requests to exercise rights.

2. Scope and Our Role

This Policy applies to the handling of information in connection with our website, enquiry handling, business transactions, consulting, cloud-related services, and the delivery, operation, measurement and analysis of advertising using DSPs and other advertising technology, together with any other services we provide (collectively, the "Services").

Where we determine the purposes and means of handling information, we act as the controlling entity. Where we handle information under entrustment from an advertiser or other business partner and follow that partner’s instructions, we act as an entrusted party and comply with the applicable contract, the partner’s instructions and applicable law. Our role in any given engagement depends on the contractual relationship and the actual data processing involved.

Websites, apps, advertising media, DSPs, measurement services and other third-party services on or through which advertising is displayed are also subject to the privacy policies established by their respective operators.

3. Who This Policy Covers

• Visitors to our website and persons who contact us.
• Representatives of advertisers, advertising agencies, publishers, cloud and systems partners, subcontractors and other corporate or organisational partners.
• Persons involved in the display, viewing, clicking or conversion of advertising delivered by us or by our business partners.
• Persons who provide information to us in connection with a job application, a business proposal or a similar purpose.

4. Information We Collect or Handle

4.1 Website visitors and persons contacting us

• Name, company name, department and title, email address, telephone number and other contact details.
• The content of enquiries, consultations, proposals and requests for materials, and the related correspondence history.
• IP address, browser and operating system, device type, referrer, pages viewed, access date and time, cookies and similar identifiers, and other access logs.

4.2 Representatives of business partners and subcontractors

• Name, employer, department and title, business contact details and business card information.
• Records relating to contracts, orders, invoicing, payment, accounting, sales discussions, support and business correspondence.
• Service accounts, authentication and permissions, operation logs, and device and network information.
• Advertising creative, delivery conditions, budgets, campaign settings, analytical reports and other information necessary to perform the engagement.

4.3 Information relating to DSPs and digital advertising operations

Depending on the engagement, we, our business partners, advertising media, DSPs, SSPs, ad exchanges, measurement and analytics providers or fraud detection providers may collect the following information using cookies, advertising identifiers, tags, SDKs, pixels, server logs and similar technologies, and we may view or use that information.

• Cookie IDs, mobile advertising IDs, click IDs, session IDs and other identifiers.
• IP address, device, browser and operating system, language settings, network environment, access date and time, and approximate location inferred from the IP address or similar information.
• Pages viewed, apps used, referrer, search, browsing and usage history, and information on the display, clicking and viewing of advertising.
• Information on applications, purchases, membership registrations and other conversions; product and service categories; price ranges; and order reference information.
• Campaign IDs, advertising creative, placements, delivery dates and times, bidding, billing and measurement information, and invalid traffic and fraud detection information.
• Inferred information generated from the above, such as interests, advertising relevance and audience segments.

Even where such information does not by itself identify a specific individual, it may constitute "personal-related information" under the APPI. It may also constitute personal information where it is cross-referenced with other information.

4.4 Information handled in entrusted work

In consulting, cloud services, systems development and operation, generative AI implementation support, advertising operations and other entrusted work, we may be provided with information, including personal data, by our business partners. We handle such information in accordance with the applicable contract and the partner’s lawful instructions, within the scope necessary to perform the engagement.

4.5 Job applicants

Where we accept job applications, we may collect the applicant’s name, contact details, employment history, professional skills, desired conditions, selection records and other information the applicant provides.

5. How We Collect Information

• Directly from the individual, via our enquiry form, email, written correspondence, contracts, exchange of business cards or similar means.
• From advertisers, agencies, publishers, subcontractors and other business partners in the course of business.
• Automatically, through our website, advertising media, DSPs, tags, SDKs, cookies and logs.
• From publicly available information, events, industry databases and other lawfully available sources.

6. Purposes of Use

Where we change a purpose of use, we will do so only within a scope reasonably related to the purpose before the change, and will notify or publicly announce the change where required. Where we use personal information beyond the scope set out above, we will obtain the individual’s prior consent, except where permitted by law.

7. Principles for Handling DSP and Advertising Data

We support delivery planning, targeting, creative improvement, performance analysis and operational optimisation using DSPs and other advertising technology, in line with the advertiser’s objectives and KPIs. Advertising delivery may involve automated processing, audience segmentation or the inference of interests.

• We do not use advertising data beyond the scope necessary for advertising delivery and measurement.
• We do not use special care-required personal information, precise location information, financial account or authentication credentials, or other high-risk information for advertising targeting without the individual’s explicit consent or a legal basis.
• We do not use inferred advertising information to determine eligibility for employment, credit, insurance, healthcare, housing, education or other matters that have a significant effect on individuals.
• We require our business partners to collect information lawfully, to provide any required notice and obtain any required consent, to refrain from transmitting sensitive information to us, and to take other necessary measures.

8. Entrustment, Third-Party Provision and Personal-Related Information

8.1 Entrustment of operations

Within the scope necessary to achieve the purposes of use, we may entrust cloud, hosting, systems development and maintenance, advertising delivery, measurement and analytics, fraud detection, email and enquiry management, payment, accounting, legal and other operations to external providers. We select such providers appropriately, impose contractual protection obligations and exercise necessary and appropriate supervision.

8.2 Provision to third parties

We do not provide personal data to third parties except with the individual’s consent, where required by law, where necessary to protect the life, body or property of a person, in connection with a business succession, or as otherwise permitted by law.

In advertising operations using DSPs, information may be handled among advertisers, agencies, publishers, DSPs, SSPs, ad exchanges, and measurement, analytics and fraud detection providers. We assess the legal characterisation of each flow — entrustment, third-party provision or otherwise — on the basis of the contractual relationship and the actual processing, and carry out any required notice, consent, contracting and record-keeping.

8.3 Personal-related information

Where we provide personal-related information such as cookie IDs, advertising IDs, browsing and usage history, approximate location or advertising response data to a third party, and it is anticipated that the recipient will acquire that information as personal data, we confirm that the individual’s consent has been obtained and that any other legal requirements are met, and we create and retain the required records.

8.4 Joint use

Where we jointly use personal data, we will notify or publicly announce, before such use begins, the items of information subject to joint use, the scope of joint users, the purposes of use and the party responsible for management.

9. Cookies and Similar Technologies, and Your Choices

Our website, the properties on which our advertising is delivered, and the advertising and measurement services we use may employ cookies, advertising identifiers, tags, SDKs, pixels and similar technologies to provide functionality and security, and for analytics, advertising delivery, performance measurement and fraud prevention.

• You can refuse or delete cookies through your browser settings.
• You may be able to limit or reset your advertising identifier through your smartphone or device settings.
• You may be able to use the settings screens or opt-out functions provided by the advertising media and DSPs we use.

If you disable cookies and similar technologies, parts of the Services may not function correctly. Where applicable, we will disclose the recipients of externally transmitted information, the information transmitted and the purposes of use on our website under "Cookies and External Transmission of Information", or by another method that is readily accessible to users.

10. Handling of Information Outside Japan

Through our use of cloud, advertising media, DSP, measurement, analytics and other services, we may provide information to entities located outside Japan, or store and process information on servers located outside Japan.

Where we provide personal data to a third party in a foreign country, we do so by a method permitted under the APPI, including by providing the required information to and obtaining the consent of the individual, or by providing the data to a recipient that has established a system for continuously taking measures equivalent to those required under the APPI. We also monitor how such information is handled by our service providers and implement the necessary security control measures.

11. Retention Periods

We retain information only for the period necessary to achieve the purposes of use, the period required under a contract, the period required by law, or the period necessary to respond to complaints or disputes. In setting retention periods, we consider the type of information, the purposes of use, the risks associated with the handling, and contractual, accounting and tax requirements.

When information is no longer required, we securely delete or dispose of it, or convert it into a form that does not identify an individual, in accordance with law and our internal procedures. Where information cannot be deleted immediately — for example, from backups — we restrict its use until deletion.

12. Security Control Measures

Taking into account the nature of the information we handle and the associated risks, we implement the security control measures set out below. We will respond to enquiries regarding the details of these measures to the extent permitted by law.

• Establishment of a basic policy and handling rules, designation of responsible personnel, verification of handling status, and an incident response framework.
• Employee training, confidentiality obligations, and necessary and appropriate supervision.
• Management of areas, equipment, documents and media, and prevention of theft, loss and unauthorised removal.
• Access permissions, authentication, logging, anti-malware measures, protection of communication channels and other technical measures.
• Selection of service providers, contracting, verification of handling status, and, where information is handled outside Japan, an understanding of the relevant systems and environment.

13. Your Rights and How to Exercise Them

Under the APPI and other applicable laws, you may be entitled to request notification of the purposes of use; disclosure of retained personal data or of records of third-party provision; correction, addition or deletion; suspension of use or erasure; or suspension of third-party provision.

To make a request, please contact the point of contact set out in Section 17, stating the request you wish to make, the information concerned and the details we need in order to identify that information. We may ask you to present identification documents in order to prevent impersonation. Where a request is made by an agent, we will verify the agent’s authority.

Much of our advertising-related information is managed by cookie IDs, advertising IDs and similar identifiers, and is not linked to a name or email address. In that case, we may be unable to identify you and therefore unable to respond, or we may ask you to provide the relevant identifier or details of your environment. Where a business partner is the controlling entity for the information concerned, we will refer you to that partner and provide reasonable assistance.

14. Special Care-Required Personal Information and Children’s Information

Except where permitted by law, we do not collect special care-required personal information without the individual’s consent. Nor do we use special care-required personal information, precise location information or other high-risk information for advertising targeting without the individual’s explicit consent or a legal basis.

Our business is primarily business-to-business. Where we handle information relating to children, we take into account age, the nature of the service, the rules of the advertising media concerned and applicable law, and implement protective measures such as obtaining the consent of a parent or guardian and restricting targeting where necessary. If you believe that a child’s information has been provided to us inappropriately, please contact us using the details in Section 17.

15. Third-Party Services and External Links

Our website and the Services may contain links to, or integrations with, websites, advertising media, cloud services, social networking services and other services operated by third parties. Information that a third party collects and uses on its own account is subject to that third party’s privacy policy.

16. Changes to This Policy

We may revise this Policy in response to changes in our services, in how we handle information, in laws, regulations and guidelines, or in our business requirements. Where we revise this Policy, we will update the "Last updated" date at the top and publish the current version at https://aidia.co.jp/privacy/. We will give notice of material changes on our website or by another appropriate method.

17. Contact for Enquiries, Complaints and Requests for Disclosure

For enquiries regarding this Policy or our handling of information, and for complaints and requests for disclosure, please contact us using the details below.