Privacy Policy

Last updated: 14 November 2026

List79 (list79.com) is run by RECEIPTROLLER Inc., 1535 Kawakami, Iizuna-machi, Kamiminochi-gun, Nagano 389-1226, Japan ("we"). This policy explains what personal information List79 handles, why, who else sees it, and what you can ask of us.

Two kinds of people, two roles

Our customers' teams: the people who sign up for List79 and manage products in it. For their information we decide how it's used, and this policy applies to it directly.
Our customers' end users: the people who post, vote and comment through a customer's widget, portal or API. That information belongs to our customer, who decides what to send us. We process it on their behalf and only to run List79 for them. If you're an end user, the product you used is your first point of contact, and its privacy policy applies; we'll help them answer you.

What we collect

If you sign up (team users)

Account details: your name, email address, and password (stored only as a salted hash), or the account identifier from Microsoft, Google or Apple if you sign in with one of them; whether you confirmed your email; your language.
What you create: business accounts, products, settings, API keys (stored hashed), decisions, notes, milestones, your product page (icon, screenshots, description), and the email addresses of people you invite to your team (we email them the invitation). Screenshots and icons are public on your portal once it's on; we remove location and camera details from them when you upload.
Billing: your plan, subscription status and Stripe customer ID. Card details go straight to Stripe; we never see or store them.
Activity: when you sign up, sign in, create a product, connect the widget or API, and similar milestones, with the date and sign-in method. We use these to support you and to understand where people get stuck.

What customers send us about their end users

The end user's ID in the customer's product, and, if the customer chooses to send them, a name, an email address and the revenue the customer earns from them.
The requests, votes and comments the end user makes, and when.
If a customer lets people sign in to its portal with just an email address: the address (and a name, if given) that the person enters. We email that address a sign-in link and use it as their identity on that portal, with the customer as the controller as above.

When anyone visits

Technical logs: IP address, browser, pages requested and errors, used to keep the service secure and working.
Counts: daily totals of page views, widget loads and API calls per product. These are counts, not records about you.
Messages you send us through the contact form: your name, email and message.

Why we use it

To provide List79: sign you in, store your requests, show your portal and widget, send the emails you or your team asked for (confirmations, status updates).
To bill paid plans, through Stripe.
To keep List79 secure, fix problems and prevent abuse.
To support you and improve List79, for example by seeing which setup step people stop at.
To meet legal obligations, such as keeping billing records.

We don't sell personal information, show advertising, or use it to train AI models. We don't use advertising or tracking cookies.

Activity records and our staff

We record account activity (for example signing up, signing in, connecting the widget, and plan changes) and daily usage counts, to improve List79, see where people get stuck, and support customers. A small number of List79 staff can see account data, including these records, to give support and keep the service running. Their access requires strong sign-in, everything they open or change is recorded in an audit log, and who has access is reviewed every six months. When an account is deleted, its activity records are deleted too, and audit entries about it keep only internal IDs.

Who else handles it

We use these service providers, each only for the purpose listed:

Microsoft Azure (Microsoft Corporation): hosting, database, sending email (Azure Communication Services) and monitoring (Application Insights).
Stripe: payments and subscriptions.
Microsoft, Google and Apple: only if you choose to sign in with them.
AB Support (ActionBridge): our support desk, for messages sent through the contact form.

Some of these providers process data outside Japan, including in the United States. We use providers that protect personal information to a standard comparable to Japan's Act on the Protection of Personal Information (APPI) and, where it applies, the GDPR. We may also disclose information when the law requires it.

Cookies

List79 uses only cookies it needs to work: to keep you signed in (to List79 or to a customer's portal), to remember your language, and to protect forms against forgery. The widget works inside our customers' sites and sets no cookies of its own.

How long we keep it

Your account and what you create: while your account is open. When you delete a product or ask us to delete your account, we delete it, except records we must keep by law.
Queued emails (including the address): 30 days after sending, or 90 days if sending failed.
Daily usage counts: 13 months.
Account activity records: 25 months.
Our staff audit log: 3 years.
Billing records: as long as Japanese tax law requires.

Your choices and rights

You can ask us to tell you what we hold about you, correct it, delete it, or stop using it, and you can withdraw consent you gave. Under Japan's APPI, and the GDPR if you're in the EU, EEA or UK, you have these rights by law. Send requests through the contact form; we'll confirm it's you and reply within a reasonable time, and within any period the law sets. If you're an end user of one of our customers, we'll pass your request to them. You can also complain to your local data protection authority.

Security

Connections are encrypted (HTTPS), passwords and API keys are stored hashed, data is held in Microsoft Azure, and access by our staff is limited to people who need it, requires strong sign-in, and is recorded.

Children

List79 is a service for businesses and isn't meant for children.

Changes

If we change this policy, we'll update the date above, and tell signed-up users by email or in List79 when a change is significant.

Contact

RECEIPTROLLER Inc., 1535 Kawakami, Iizuna-machi, Kamiminochi-gun, Nagano 389-1226, Japan. Person responsible for handling personal information: Shohei Shimoda. Use the contact form.