Privacy Policy

📘 1. Scope of Application

This policy applies when you use the maybeits.me website, complete personality tests, submit forms, purchase reports or add-ons, upload photos, receive emails or LINE messages, participate in referral programs, contact customer service, and browse pages where we use Cookies or similar technologies.

🗂️ 2. Data We Collect

Unless you voluntarily provide it, we do not request your national ID number, full credit card details, or other data not directly related to our services based on this policy.

⚖️ 3. Purposes & Legal Basis

We process your data under various scenarios, commonly based on:

• Performance of a Contract: To create orders, generate and deliver purchased digital content, and respond to customer service inquiries directly related to contract performance.
• Your Consent: For photo processing, marketing emails or LINE messages, non-essential Cookies, and tracking technologies requiring your explicit consent.
• Legitimate Interests: For fraud prevention, security maintenance, internal statistics, service improvements, and limited operational analytics; if applicable jurisdictions require higher standards, we will first obtain consent or provide an opt-out mechanism.
• Legal Obligations: For accounting, tax, dispute resolution, regulatory requests, or other legal obligations.

📸 4. Photos & User Uploads

• Photos you upload are used only to generate the reports or related custom content you purchased.
• Please only upload photos of yourself or content you are legally authorized to use; do not upload infringing, illegal, explicit, violent, or unauthorized photos containing identifiable information of third parties.
• We will not publicly display, sell, or use original photos for commercial purposes unrelated to this service.
• If you request early deletion of original photos, you may apply via the contact methods listed in this policy.

📬 5. Marketing & Notifications

• Service Notifications: e.g., order confirmations, report delivery, account security alerts, or major changes to terms or policies.
• Marketing Messages: e.g., promotions, events, content updates, remarketing, or referral invitations.

Marketing messages are managed separately from essential service notifications. You can click the unsubscribe link in emails at any time, or use the methods provided by the LINE platform to stop receiving marketing messages. Even if you opt out of marketing, essential notifications related to contracts or security may still be sent.

🍪 6. Cookies & Tracking Technologies

We use Cookies, pixels, SDKs, or similar technologies to maintain login states, remember preferences, analyze traffic, measure marketing effectiveness, and improve services. For detailed classifications, please see our separate Cookie and Tracking Technologies Policy.

• Strictly Necessary: Support security, logins, shopping, or other basic functions.
• Analytics: Measure website usage and performance.
• Marketing: Measure advertising and remarketing effectiveness.

🔗 7. Third-Party Services & Disclosure

We may collaborate with the following types of service providers to offer website, payment, cloud, communication, analytics, or AI functions:

• Website hosting, CDN, security, and database providers
• Payment and invoice processing providers
• Email, SMS, LINE, or customer service system providers
• Website analytics, advertising, and attribution tracking tool providers
• Generative AI, image processing, or automated workflow providers

We only disclose data when necessary for services, required by law, business transactions, protection of rights, or with your explicit consent, and we limit the scope of disclosure as much as possible.

🗄️ 8. Data Retention

• Original Photos: Retained by default for 90 days, unless you request earlier deletion or extended retention is required by law or dispute resolution.
• Test Results & Reports: In principle, retained until you delete your account, withdraw consent, or our internal retention period is exceeded.
• Transaction & Billing Records: Retained as required for tax, accounting, and dispute resolution purposes.
• Cookie & Tech Logs: Retained per each tool's settings and the Platform's internal policies, anonymized or aggregated when necessary.

✋ 9. Your Rights

Subject to applicable laws, you may have the right to access, review, copy, correct, supplement, stop processing, delete, withdraw consent, restrict processing, object to specific processing, or request data portability. The actual scope of exercisable rights is subject to applicable laws and identity verification results.

You may submit requests via the contact methods on this page. We may need to verify your identity to protect data security.

🛡️ 10. Data Security

• Utilizing HTTPS/TLS and other encrypted transmission technologies.
• Implementing access controls, the principle of least privilege, backups, and monitoring based on the nature of the data.
• Conducting necessary contract and permission management for third-party service providers.

However, no internet transmission or electronic storage is 100% secure. In the event of a suspected security incident, we will handle and notify according to applicable laws and the nature of the incident.

🌍 11. Cross-Border Transfers

Because the servers, teams, or tools of the Platform or our third-party service providers may be located outside your country or region, your data may be transferred to and processed overseas. We will adopt reasonable protective measures per applicable laws, such as contractual arrangements, access controls, encryption, and restricting data use according to product settings.

If a specific jurisdiction requires separate consent, additional protective measures, or extra disclosures, we will provide further notice in the relevant processes.

🧒 12. Minors

This Service is intended for users aged thirteen (13) and above. Children under the age of thirteen are not permitted to use this Service, and we will not knowingly collect personal data from children under thirteen.

If you are aged thirteen or older but have not yet reached the legal age of majority in your jurisdiction, you must have a parent or legal guardian read, understand, and consent to this Policy before using the Service or making any payments. We may request proof of guardian consent.

If we discover that we have collected data from a child under thirteen, or that required guardian consent has not been obtained, we will promptly take steps to delete the data, restrict account access, or implement other remedial measures in compliance with applicable local regulations.

🧠 13. Automated Profiling & AI Generation

The Platform performs personalized analysis based on your test answers, preferences, text inputs, plan content, and necessary technical information to generate reports, prompts, voice, or other digital content. This analysis is primarily used to fulfill the services you purchased or requested.

We shall not describe this Service as a medical or psychiatric diagnosis, credit scoring, employment screening, or other automated decision-making tool that produces legal effects or similarly significant impacts on you.

📧 14. Contact Us

If you have questions about this policy, or wish to submit data rights requests, photo deletions, marketing opt-outs, Cookie management, complaints, or other privacy-related inquiries, please contact us:

• Customer Service Email: service@maybeits.me
• Processing Time: We will respond within a reasonable timeframe; complex cases or additional identity verification may extend processing time.

🔄 15. Policy Updates

We may update this policy periodically. If updates significantly impact your rights or obligations, we will notify you in advance via website announcements, email, account notifications, or other appropriate means. Continued use of the service constitutes acceptance of the updated policy.