Privacy Policy

Last Updated: April 3, 2026

Urushigusa (hereinafter referred to as "The Provider" or "We") considers the protection of user personal information to be of utmost importance in providing the Photoshop plugin "Dual Linked Layers Panel (DLLP)" (hereinafter referred to as "The Plugin").

1. Information We Collect
In using The Plugin, we collect and process the following information:
•	Adobe User ID: A unique identifier linked to your Adobe Creative Cloud account.
•	License Information: License Key, subscription status, and expiration date.
•	Device and Environment Information:
o	IP address, access logs.
o	Basic information about the usage environment: OS type and version, Adobe Photoshop version, The Plugin version, language settings.
o	Device Unique Identifier: Hardware configuration, and an identifier (hash value) in a non-personally identifiable format generated based on software environment information.
•	Customer Information: Email address and name (if applicable) provided by the payment provider (Paddle).

2. Methods and Timing of Collection
This information is automatically transmitted to our managed server (Cloudflare network) at the following times:
•	At Activation: Upon initial registration of the License Key.
•	At Startup and Verification: When The Plugin is launched or when verifying the validity of the license periodically.
•	During Use (Heartbeat): While The Plugin is running, it communicates periodically in the background.
o	This communication is essential for the provision of the plugin's functions, aimed at real-time verification of license validity and detection of fraud patterns (such as prevention of simultaneous multiple use of the same license).

3. Purpose of Use
Collected information is used solely for the following purposes:
•	Verification and management of license authentication and validity.
•	Detection and prevention of unauthorized use, piracy, and violation of terms (such as circumvention of Business License requirements).
•	Environmental statistical analysis for product improvement and enhancement of support quality.
•	Service maintenance and security assurance.

4. Third-Party Services
We utilize the following third-party services to provide the service, ensure security, and analyze usage. These services process data to the extent necessary under our instructions:
• Paddle (Paddle.com Market Ltd): 
  Payment processing and transaction management. Paddle acts as the "Merchant of Record" for this service.
• Cloudflare: 
  Provision of serverless backend (Pages Functions), database (D1), and cache (KV).
• Cloudflare Turnstile: 
  Security measures to prevent spam submissions (CAPTCHA alternative). No tracking for advertising purposes is performed.
• Cloudflare Web Analytics: 
  Access analysis in a non-personally identifiable format (Cookie-less analytics).
• YouTube (No-Cookie Mode): 
  Display of demo videos. We use the privacy-enhanced mode, so tracking cookies are not set unless the video is played.
• Email Services (Resend / SendPulse): 
  For sending authentication magic links, important notifications, and user support emails.
• IP Geolocation Services (ip-api.com, etc.): 
  Acquisition of geographic location based on IP address (for fraud detection and statistical analysis).

5. Data Storage and Management
Collected information is managed as follows:
•	Data Archiving: To optimize database capacity and ensure security, server logs and old history data may be archived to secure long-term storage (such as cloud object storage or offline environments) and deleted from the active database as appropriate.
•	Retention Period: These data are strictly stored for 7 years in principle for the fulfillment of the license agreement, prevention of unauthorized use, and fulfillment of legal obligations (such as bookkeeping obligations under tax laws).

6. Security Measures
We implement appropriate technical and organizational measures to protect collected information.
•	Use of Robust Infrastructure: We use industry-standard secure cloud platforms (Cloudflare) to ensure data safety.
•	Encryption of Communication: All communications between The Plugin and the server are encrypted using SSL/TLS.
•	Access Restriction: Access to personal information databases is limited to necessary administrators under strict authority management.
•	Data Minimization: Server logs are periodically archived or deleted to ensure unnecessary data is not left online.

However, please understand that it is technically impossible to guarantee complete security for communications over the internet.

7. Response to Data Breaches
In the unlikely event of a security incident such as leakage, loss, or damage of personal information, we will take the following actions in accordance with relevant laws:
•	Reporting to Supervisory Authority: We will promptly report to the Personal Information Protection Commission (PPC) of Japan in accordance with the law.
•	Notification to Users: We will promptly notify potentially affected users via their registered email address or the official website.
•	Implementation of Recurrence Prevention Measures: We will investigate the cause and implement technical and organizational measures to prevent recurrence.

8. International Data Transfer
The Plugin utilizes global cloud services.
•	Cloudflare: Data may be processed and stored on Cloudflare's global network (edge servers worldwide, including the US).
•	Paddle / Resend / SendPulse: Data may be processed on their global networks (including the US, UK, and EU).
These providers meet appropriate security standards, and we carefully select services from the perspective of data protection.

9. User Rights
Users have the following rights regarding their personal information held by us:
•	Right of Access: The right to verify how your personal information is processed and request disclosure of that data.
•	Right to Rectification: The right to request correction of inaccurate or incomplete information.
•	Right to Erasure (Right to be Forgotten): The right to request deletion of personal information under certain conditions.
•	Right to Restrict Processing: The right to request temporary suspension of data processing under certain circumstances.
•	Right to Data Portability: The right to receive data in a machine-readable format.

We strive to respond within a reasonable period after verifying your identity upon receipt of a request. However, we may refuse requests that are clearly unfounded, excessive, or where refusal is permitted by law.

Exceptions: The following information may be exempt from deletion requests due to contract fulfillment (license management), legal obligations (tax processing, etc.), and prevention of unauthorized use:
•	Adobe User ID and License Key linked to a currently valid license.
•	Logs and identifiers necessary for the prevention and verification of unauthorized use.
•	Transaction records required to be preserved by law.

Please contact the address at the end of this Policy for requests regarding the exercise of these rights.

10. Information of Minors
This service is not intended for persons under the age of 16. If a person under the age of 16 uses this service, please do so with the consent of a parent or guardian.
If it is discovered that we have unintentionally collected personal information of a person under the age of 16, we will promptly delete such information (unless preservation is required by legal obligation).

11. Changes to Policy
We may change this Privacy Policy in accordance with changes in laws or service content. If there are significant changes, we will strive to notify users via notification upon plugin startup or by contacting the registered email address. The modified Policy shall take effect at the time it is posted on this page.

12. Governing Law and Jurisdiction
This Privacy Policy shall be governed by and interpreted in accordance with the laws of Japan. The Yokohama District Court shall be the exclusive agreed court of first instance for any disputes regarding this Policy.

13. Governing Language
This Policy is drawn up in the Japanese language, which shall be the governing language. Any translation into English or any other language is for reference purposes only. In the event of any conflict or inconsistency between the Japanese version and a translated version, the Japanese version shall prevail.

14. Contact
For questions regarding this Privacy Policy, please contact:
Operator: Urushigusa (DLLP Operations Team)
Email: [support@urushigusa.com]
