Privacy Policy

1. Provider and scope

TrialOps is provided by Office Hasegawa. This Policy covers access to the TrialOps information site, store staff accounts and store information, and information submitted by applicants through private pages. The separate Office Hasegawa website privacy notice applies to the corporate website itself. For privacy questions, contact [email protected].

2. Information we handle

• Account and store information: names, email addresses, authentication and session data, membership and roles, store name and type, address, operating company, and telephone number.
• Applicant information: names, phonetic names, dates of birth, contact details, application sources, work and nightlife experience, preferences, interview and trial-shift schedules and outcomes, store notes, compensation offers and responses, and onboarding progress.
• Onboarding document information: documents requested for onboarding, identity or age-check information, file names, formats and sizes, and submission, access, and review history. Applicants can submit PDF, JPEG, PNG, or HEIC files up to 10 MB. Files are stored in private R2 storage and are not automatically scanned for malware.
• Subscription and billing information: plan and contract status, Stripe customer, subscription, and invoice identifiers, and payment outcomes. TrialOps does not store card numbers or payment credentials; Stripe processes them.
• Usage and security information: operation and audit records, access times, network and device details such as IP addresses, support requests, notification recipients, and error or abuse-prevention records.

Free-text fields or custom forms may contain other personal information. Do not enter sensitive information that is not needed.

3. Purposes and roles

Office Hasegawa uses information to create and manage accounts and stores, provide TrialOps and applicant pages, manage subscriptions and billing, provide support and service notices, maintain security, prevent abuse, investigate errors, improve the service, and comply with law.

When a store enters applicant or staff information, the store usually determines its purposes and sharing scope and is responsible for providing required notices and obtaining any required consent or other legal basis. Office Hasegawa processes the information as needed to provide the service and follow the store’s instructions. We may independently determine purposes for account, billing, and security information. For applicant information within a store, contact the store that entered it first. Processing on a store’s instructions is governed by the Data Processing Addendum (DPA).

4. Service providers and international processing

TrialOps uses Cloudflare for its Workers application, D1 database, private R2 document storage, and authentication, invitation, and notification email. The deployment configuration does not specify a D1 region. Cloudflare operates a global network, and information may be accessed or processed outside Japan. Processing or storage exclusively in a particular country or region is not guaranteed.

TrialOps uses Stripe for subscriptions and payments. Stripe processes contract and billing data as a service provider and may also process information as an independent controller for fraud prevention and similar purposes. Stripe’s Japan data processing terms provide for transfers to Stripe, LLC in the United States. For details about international processing, safeguards, and each provider’s roles, see Cloudflare’s Privacy Policy and Stripe’s Data Processing Agreement. Each provider retains information under its own terms and privacy notice.

5. Retention and deletion

We retain store account, subscription, and business data for as long as needed to provide the service. Some viewing or export access may remain after a trial or subscription ends, but data is not retained indefinitely. Contract, billing, and audit records are retained as needed for accounting, tax, disputes, security, and legal compliance.

For an applicant whose applications are all rejected, withdrawn, or canceled, we delete or anonymize names, phonetic names, date of birth, contact details, profile and free-text information, and similar personal data 90 days after the final decision. We retain the application and decision history after removing direct applicant identifiers. We delete document originals from private R2 storage 30 days after onboarding is completed, withdrawn, or canceled, unless a retention hold applies. Audit logs are deleted one year after creation. These tasks run daily and may be delayed. D1 recovery history allows restoration to a point in the prior 30 days, so information deleted from the active database may remain in recovery history for up to 30 days. The individual concerned or a store contract owner may request deletion at [email protected]. We verify identity and authority, the scope of the request, and any information that must be retained by law.

6. Cookies and security

We use cookies or browser storage needed for sign-in, request-forgery protection, and core functions. We do not use them for advertising tracking. Safeguards include store-level access controls, authentication and permissions, encrypted connections, private storage, and operation records. Submitted files are not automatically scanned for malware. No system can be guaranteed completely secure.

7. Individual rights and disclosures

We handle verified requests to access, correct, or delete information as required by applicable law. For applicant information entered by a store, contact that store first. We engage service providers to handle information as needed to provide TrialOps and supervise them. Stripe may process some payment and fraud-prevention information as an independent controller, as described in its privacy documents. Except in these cases or as required by law, we do not disclose personal data to third parties without consent. We will notify users of material changes as required by applicable law.

8. Contact

For privacy, access, correction, or deletion requests about TrialOps, contact [email protected].