プライバシーポリシー

SHOWCHASE PRIVACY POLICY
Last Updated: May 9, 2026

Important Notice: Any Japanese version of this Privacy Policy is provided for convenience and informational purposes only as a translation of the English original. If any inconsistency, ambiguity, interpretive issue, or dispute arises between the English version and any translated version, the English version will control and will be treated as the governing original.

1. INTRODUCTION

This Privacy Policy explains how Showchase (“Showchase,” “we,” “us,” or “our”) collects, uses, stores, discloses, transfers, protects, retains, and otherwise processes personal information when you use our mobile applications, backend services, share-preview pages, livestream tools, marketplace features, community and wiki features, customer support channels, and related services (collectively, the “Service”).

For purposes of this Privacy Policy, Showchase is operated by Rodrigo Cerecero Curiel, a sole proprietor doing business as Showchase, located at 東京都千代田区神田和泉町1番地6-16ヤマトビル405, Japan.

Because Showchase operates from Japan and may make the Service available internationally, this Privacy Policy is written to address Japanese operations and cross-border privacy considerations, including laws that may apply in the European Economic Area, the United Kingdom, Switzerland, North America, South America, and other jurisdictions.

By accessing or using the Service, you acknowledge that your information will be processed as described in this Privacy Policy. If you do not agree, do not use the Service.

2. WHO THIS POLICY APPLIES TO

This Privacy Policy applies to personal information we process about:

– people who create or attempt to create an account;
– registered users;
– buyers, sellers, bidders, streamers, viewers, and community participants;
– verification applicants;
– support or dispute request submitters;
– recipients of emails, push notifications, and other service communications;
– individuals whose information appears in user-submitted content; and
– visitors to share-preview pages and related public web endpoints.

3. WHAT THE SERVICE DOES

Showchase is a commerce and community platform that may include:

– account registration, authentication, and profile management;
– public and non-public profiles;
– product listings, comments, likes, follows, and related interactions;
– direct purchase flows, purchase-intent workflows, and price negotiation proposals;
– shipping-address and delivery management;
– stored payment setup through a third-party processor;
– internal balance or ledger records used for settlement-related flows;
– payout methods and payout requests;
– livestream creation, scheduling, broadcasting, chat, and replay features;
– auctions and bidding;
– help-center tickets, ticket messages, attachments, and dispute handling;
– verification-center submissions and review;
– notifications and push-notification preferences;
– search, recommendation, discovery, and ranking features;
– public sharing and share-preview pages for profiles, products, and livestreams; and
– community and editorial features, including wiki card content.

4. DATA CONTROLLER

For most processing described in this Privacy Policy, Rodrigo Cerecero Curiel, doing business as Showchase, is the controller, business, or equivalent primary operator that determines the purposes and means of processing.

5. CATEGORIES OF PERSONAL INFORMATION WE COLLECT

We collect the following categories of personal information, depending on how you use the Service.

5.1 Account Registration and Authentication Information

When you create, activate, restore, or use an account, we may collect and process:

– email address;
– password in hashed form only, not in plain text;
– activation code and recovery-code verification data;
– account activation status;
– account blocking status;
– failed activation and login attempt data;
– timestamps related to account access and recovery;
– language preference;
– currency preference; and
– internal user identifiers and session-related metadata.

5.2 Profile and Public Account Information

When you create or edit a profile, we may collect and process:

– legal name or real name, where provided;
– username or display name;
– profile description or bio;
– avatar or profile image;
– verification status;
– profile-linked counts and relationship summaries; and
– profile information reflected in public pages, feeds, comments, or share previews.

5.3 Device, Session, and Technical Information

We may collect and process technical information needed to operate and secure the Service, including:

– persistent or semi-persistent device identifiers provided by device APIs;
– push-notification tokens;
– device association records when a device is linked to an authenticated user;
– authentication-token metadata and session metadata;
– request timestamps and API request metadata;
– client IP address and user-agent information for relevant web, security, or share-preview contexts;
– rate-limit and anti-abuse metadata;
– platform, operating-system, and app-environment details; and
– local preference and session storage data kept on your device through secure or app-managed storage.

5.4 Camera, Photo Library, Microphone, and Uploaded Media

If you use features that access device media capabilities, we may collect and process:

– photos, videos, screenshots, thumbnails, and other images you choose to capture or upload;
– microphone or audio input used for livestream or media features where available;
– camera-captured content used for avatar, verification, scanner, livestream, chat, wiki, or listing workflows; and
– metadata reasonably necessary to store, display, moderate, or deliver uploaded media.

5.5 Address and Delivery Information

If you create, edit, or use shipping or contact addresses, we may collect and process:

– address label;
– recipient name;
– country;
– region, prefecture, or state;
– city;
– postal code;
– address lines;
– primary and secondary phone numbers; and
– default-address preference and soft-deletion status.

5.6 Payment, Ledger, Payout, and Billing Information

Depending on your use of marketplace features, we may collect and process:

– third-party payment customer identifiers;
– setup-intent, ephemeral-session, and processor reference data needed to save or use payment methods;
– product purchase-intent and payment status records;
– internal ledger or balance records, including credits, debits, memos, and linked transaction references;
– coupon or credit usage data;
– payout-method information, including type, account identifier, activation data, and status history;
– payout requests and payout status updates;
– transaction-related notifications;
– purchase-related address usage; and
– records used to prevent duplicate settlement, abuse, fraud, or inconsistent accounting.

We do not store raw payment card numbers in our core application database. Payment card workflows are handled through a third-party payment processor and processor-linked artifacts.

5.7 Marketplace, Auction, and Negotiation Information

When users list, buy, sell, bid, negotiate, or otherwise transact, we may collect and process:

– product identifiers;
– product titles, descriptions, images, preview images, tags, status, condition, price, shipping price, total cost, and listing state;
– livestream-linked selling metadata;
– auction settings, including bid step size, payment-window timing, bidder caps, and auction status;
– bid records, including bidder identity, amount, fulfillment state, and timestamps;
– price-negotiation proposal data, including proposed price, currency, status, and expiration or purchase deadlines;
– container, grouping, or order-linking records associating buyers, sellers, products, and addresses; and
– transaction-linked support, dispute, or refund references.

5.8 Livestream, Chat, Replay, and Community Information

If you use livestream or community features, we may collect and process:

– livestream titles, descriptions, categories, tags, thumbnails, schedules, activity state, status, and visibility settings;
– livestream audio, video, and related media where such features are used;
– livestream chat messages, comments, reactions, likes, and view-related events;
– livestream replay files or replay metadata where replay functionality is available;
– follows between users;
– product comments and likes;
– wiki card pages, localizations, proposals, comments, lists, and votes; and
– public metadata necessary to render feeds, previews, and shareable content.

5.9 Verification and Trust-and-Safety Information

If you apply for identity or trust verification, we may collect and process:

– verification request metadata;
– random verification codes;
– selfie or face image containing the required code;
– government ID front image;
– government ID back image;
– government ID edge or thickness image, where required;
– verification status;
– rejection reasons or reviewer notes, where applicable; and
– reviewer linkage and review timestamps.

5.10 Support, Dispute, and Help-Center Information

When you use support or dispute features, we may collect and process:

– ticket records;
– ticket-linked asset references, such as a related container or payout;
– ticket messages;
– uploaded attachments and evidence;
– sender identity;
– case notes, assignment data, and resolution updates;
– support-generated emails or notifications; and
– evidence used to investigate fraud, listing disputes, refund claims, or misuse.

5.11 Search, Discovery, Engagement, and Notification Information

We may collect and process:

– search queries and related interaction data;
– likes, follows, engagement events, and read-state information;
– recommendation, ranking, or discovery preferences;
– push-notification preference states; and
– notification delivery and read data.

5.12 Public Sharing and Share-Preview Information

When content is shared publicly or accessed through share-preview endpoints, we may collect and process:

– asset type and asset ID;
– preview title, description, image URL, and related payload data;
– cache expiry and cache status information;
– request IP address;
– crawler or browser user-agent data;
– rate-limiting metadata; and
– redirect or interstitial handling data needed to route a person to the app or fallback web page.

5.13 Administrative, Moderation, and Compliance Information

We may collect and process:

– user-permission roles;
– moderation and enforcement records;
– internal compliance notes and memos;
– audit trails related to account deletion or sensitive-data access;
– records showing who accessed compliance-retained data and why;
– retention justification and expiration data; and
– data necessary to evidence lawful retention, fraud prevention, platform integrity, and compliance handling.

6. SOURCES OF INFORMATION

We collect personal information:

– directly from you;
– automatically from your device, app usage, and interactions with the Service;
– from service providers and infrastructure partners acting on our behalf;
– from other users when they interact with you or transact with you;
– from public sharing traffic, including crawler traffic to share-preview endpoints; and
– from administrators, moderators, or reviewers who handle support, verification, or enforcement matters.

7. HOW WE USE PERSONAL INFORMATION

We use personal information for the following purposes:

– to create, activate, authenticate, secure, and maintain accounts;
– to provide profile, marketplace, payment, payout, livestream, wiki, and support functionality;
– to publish content and metadata that users choose to make public;
– to process purchases, bidding, negotiations, shipping, payouts, refunds, and related operational steps;
– to send transactional, operational, security, verification, and support communications;
– to manage user preferences, including language, currency, and push notifications;
– to rank, personalize, and improve discovery and recommendation surfaces;
– to verify identity, prevent fraud, detect abuse, and protect users and the Service;
– to investigate disputes, not-as-described claims, misuse, or security incidents;
– to maintain internal accounting, records, and audit trails;
– to operate public share-preview and deep-linking flows;
– to monitor, troubleshoot, improve, and secure the Service;
– to enforce our Terms, policies, and platform rules; and
– to comply with legal obligations and defend legal claims.

8. LEGAL BASES FOR PROCESSING WHERE REQUIRED

Where applicable law requires a legal basis, we rely on one or more of the following:

– performance of a contract or steps taken at your request before entering into a contract;
– legitimate interests, including security, fraud prevention, moderation, service operations, support handling, recordkeeping, and platform protection;
– compliance with legal obligations;
– consent, where required, including certain device-level permissions such as push notifications, camera, microphone, or photo-library access; and
– protection of vital interests or public-interest grounds where permitted by law.

9. PUBLIC INFORMATION

Some information is intentionally public or visible to other users. This may include:

– username or display name;
– avatar;
– profile description;
– public listings and listing images;
– public livestream metadata, chat, comments, and reactions where exposed by the relevant feature;
– public wiki or community contributions; and
– share-preview metadata for public profiles, products, and livestreams.

Public information may be copied, cached, indexed, screenshotted, reshared, or stored by third parties beyond our control.

10. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information in the following circumstances.

10.1 Service Providers and Infrastructure Providers

We may disclose information to third-party providers that help us operate the Service, such as providers of:

– payment processing;
– livestream, realtime, or media delivery infrastructure;
– cloud hosting, storage, and content delivery;
– email delivery;
– push-notification delivery;
– security, encryption, monitoring, or anti-abuse services;
– support and operational communications tooling; and
– app distribution, app-link, or share-preview infrastructure.

10.2 Other Users

We may disclose information to other users when necessary to operate the Service, including when:

– your profile, listing, livestream, comment, bid, or public contribution is shown;
– a buyer and seller need transaction-related information to complete an order;
– a dispute or support case necessarily involves the relevant counterparties; or
– public share previews are generated for your profile, product, or livestream.

10.3 Legal, Safety, and Enforcement Reasons

We may disclose information when we reasonably believe it is necessary to:

– comply with law, regulation, court order, subpoena, or lawful request;
– protect users, rights, property, or safety;
– investigate fraud, abuse, moderation violations, or security incidents;
– enforce our Terms or policies; or
– establish, exercise, or defend legal claims.

10.4 Business Transfers

If Showchase is involved in a sale, financing, acquisition, restructuring, or similar transaction, personal information may be disclosed as part of that process, subject to applicable law.

10.5 Your Directions or Sharing Choices

We may disclose information where you instruct us to do so or where your use of public or sharing features necessarily causes disclosure.

11. INTERNATIONAL DATA TRANSFERS

Showchase operates from Japan. Your personal information may be processed in Japan and in other countries where our providers operate. Those jurisdictions may not provide the same level of data protection as your home jurisdiction.

Where required by applicable law, we use appropriate safeguards for international transfers, such as contractual protections, technical measures, and operational controls.

12. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, preserve transaction integrity, respond to disputes, prevent fraud, enforce agreements, and comply with legal obligations. Our general retention periods are as follows.

12.1 Account, Authentication, and Profile Data

We generally retain account and profile data for as long as your account remains active and for up to 5 years after account closure or last meaningful account activity, unless a longer period is required for security, fraud prevention, dispute handling, or legal compliance.

12.2 Security, Device, and Technical Logs

We generally retain security, device-association, authentication, API request, and rate-limit logs for up to 12 months, unless a longer period is required for an active investigation, abuse-prevention need, or legal obligation.

12.3 Transaction, Payment, Ledger, Payout, Support, and Dispute Records

We generally retain transaction, payment, purchase-intent, ledger, payout, ticket, dispute, refund, and related accounting records for up to 7 years after the relevant transaction or case is closed, unless a longer period is required by law or necessary to defend legal claims.

12.4 Verification and Trust-and-Safety Data

We generally retain verification submissions, review outcomes, and trust-and-safety records for up to 5 years after the final verification decision, account closure, or last related enforcement action, unless a longer period is required by law or necessary for fraud prevention or legal defense.

12.5 Public Content, Livestream, and Community Data

We generally retain public listings, community posts, chat records, livestream metadata, replay records, and related moderation history for as long as the relevant feature remains active and for up to 7 years afterward where needed to preserve transaction integrity, enforce rules, or respond to claims.

12.6 Share-Preview and Cache Data

Preview-cache records are generally retained only until their configured expiry, and ordinarily for no more than 30 days in cache systems. Rate-limit and share-preview request logs are generally retained for up to 12 months unless needed longer for security or abuse prevention.

12.7 Account Deletion Audit Retention

When you request deletion, we may keep a limited encrypted deletion-audit record containing original identifying contact data and related compliance metadata for 5 years from the deletion event, unless a different period is required by law.

13. ACCOUNT DELETION AND ANONYMIZATION

If you request account deletion, we may implement deletion through anonymization and deactivation rather than immediate hard deletion of every related record. Because the Service includes payments, payouts, disputes, support, and fraud-prevention controls, certain records may need to be retained.

Depending on the circumstances, deletion may include:

– marking the account as deleted and anonymized;
– disabling account access and notifications;
– detaching devices and clearing push tokens;
– removing follow relationships involving the account;
– blanking or anonymizing address data;
– blanking payout-method account identifiers;
– blanking or removing verification images and related sensitive verification fields;
– hiding livestreams and public products by moving them to deleted or non-public states; and
– replacing direct identifying values with anonymized substitutes.

At the same time, we may retain limited encrypted compliance-contact data and deletion audit logs for the retention period described above.

14. SECURITY MEASURES

We use administrative, technical, and organizational safeguards designed to protect personal information, including measures such as:

– password hashing;
– role-based access controls;
– authentication and account-blocking logic;
– transport and infrastructure security controls;
– encryption for certain retained compliance data;
– logging and audit controls for sensitive data access;
– rate-limiting and anti-abuse controls; and
– provider-managed security controls.

No system is perfectly secure, and we cannot guarantee absolute security.

15. AUTOMATED PROCESSING, RANKING, AND PLATFORM LOGIC

We may use automated or semi-automated logic to:

– rank feeds, recommendations, or search results;
– determine notification delivery status;
– calculate payout or ledger eligibility conditions;
– enforce auction rules, payment windows, or request validation;
– prevent duplicate or inconsistent transactions;
– detect suspicious or abusive behavior; and
– assist moderation or review workflows.

Where applicable law gives you rights regarding significant automated decision-making, you may contact us as described below.

16. CHILDREN AND MINORS

The Service is not intended for persons who are not legally permitted to use the Service or participate in the relevant transactions under applicable law. If you are a minor, you may use the Service only where lawful and, where required, with valid parent or guardian authorization.

17. YOUR PRIVACY RIGHTS AND CHOICES

Depending on where you live, you may have rights including:

– access;
– correction;
– deletion or erasure;
– restriction of processing;
– objection to certain processing;
– data portability;
– withdrawal of consent where processing is based on consent;
– appeal of a denied request where applicable law provides that right; and
– complaint to a regulator or supervisory authority.

17.1 In-App Controls

The Service may allow you to:

– edit profile information;
– manage addresses;
– manage notification preferences and device-level permissions;
– manage payout methods;
– request password-reset flows; and
– request account deletion.

17.2 How to Exercise Rights

You may submit privacy requests by emailing hello@showchase.net or using the contact form at https://showchase.net/contact/.

We may ask for information needed to verify your identity and authority before fulfilling a request. We will respond within the time required by applicable law. Where no specific legal deadline applies, we aim to respond within 30 days.

17.3 Regional Notes

For Japan:
We handle requests in light of the Act on the Protection of Personal Information and other applicable Japanese requirements.

For the EEA, UK, and Switzerland:
You may have rights to access, rectify, erase, restrict, object, and data portability, and the right to complain to your local supervisory authority.

For California and certain other jurisdictions in the Americas:
You may have rights to know, access, delete, correct, and receive information about disclosures of personal information, subject to exceptions and limitations under applicable law.

18. SENSITIVE OR HIGH-RISK DATA

Some information processed through the Service is sensitive or high risk, including verification images, legal name, phone numbers, payout-related identifiers, support evidence, and encrypted deletion-audit data. We process this information only where necessary for identity verification, payments or payouts, fraud prevention, support, dispute handling, compliance, or related operational needs.

19. COOKIES, SDKS, AND SIMILAR TECHNOLOGIES

Because Showchase includes mobile-app, backend, and share-preview components, data collection may occur through app permissions, device identifiers, secure local storage, authentication tokens, request logs, caching systems, push-notification frameworks, and server-side request handling rather than only through browser cookies.

On public share-preview surfaces, we may use request logs, user-agent handling, caching, and IP-based rate limiting. On mobile surfaces, we may rely on device permission frameworks and secure device storage. If other browser-facing surfaces use cookies or similar technologies, we may provide additional notice where required.

20. THIRD-PARTY SERVICES AND LINKS

The Service may integrate with or link to third-party services, such as payment providers, cloud providers, livestream or realtime providers, email providers, app stores, and external websites. Those third parties govern their own privacy practices under their own notices.

21. DO NOT TRACK AND SIMILAR SIGNALS

Some mobile-app and backend contexts do not operate in the same way as traditional websites for browser-based Do Not Track signals. Where applicable law requires recognition of specific browser privacy preference signals on relevant surfaces, we will address those requirements to the extent legally required and technically applicable.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. If we make material changes, we may notify users through the Service, by email, or by other reasonable means. The updated version becomes effective on the date stated in the revised policy.

23. CONTACT US

If you have questions, requests, complaints, or regulator inquiries relating to this Privacy Policy or our privacy practices, contact:

Showchase
Rodrigo Cerecero Curiel, doing business as Showchase
Address: 東京都千代田区神田和泉町1番地6-16ヤマトビル405, Japan
Email: hello@showchase.net
Contact form: https://showchase.net/contact/