Cosmos Privacy Policy
The operator handles users' personal information appropriately in accordance with Japan's Act on the Protection of Personal Information and other applicable laws.
The Japanese version is the authoritative original; if interpretations differ, the Japanese version prevails. This Policy is governed by and interpreted under the laws of Japan.
Information We Collect
Name, address, email address, profile photo (face photo for workers only), emergency contact, identity-verification documents, location (when needed, e.g. at in-person start/completion), usage history, and payment-related information (card details are held by our payment processor; the operator does not store card numbers). A phone number is a profile field and is NOT used for authentication. It is an optional field for identity and contact.
Authentication Method (Passwordless)
The Service uses passwordless authentication via Apple Sign In, Google Sign In, and Email Magic Link. Users set no password and the operator stores no password, reducing the risk of leakage and credential reuse.
Purposes of Use
We use collected information to:
- Match users, complete requests, and verify safety of in-person work
- Verify identity and age and manage parental consent
- Process payments, commission settlement, and compensation claims
- Prevent and respond to misuse and trouble, and send operator notices
Provision to Third Parties
Except where required by law or where necessary to provide to subcontractors for payment, maps, or identity verification within the required scope, we do not provide information to third parties without consent. Subcontractors are appropriately supervised.
Handling of Location Data
Location is collected only when needed, such as for safety verification at in-person start/completion, and is not continuously tracked. Users can manage location permission from their device settings.
Automatic Address Hiding
The requested address is automatically hidden from the worker's screen the moment the job is completed. The operator retains the original address for audit and trouble handling and views it only when necessary (each view is recorded in the audit log).
Operator Audit Access
For trouble handling, fraud investigation, and legal compliance, the operator may access user data (original address, chat, etc.) to the minimum extent necessary. Access is recorded in the audit log and is not used for other purposes.
Handling of Parental Consent
For minor workers, we collect and retain the parent/legal-guardian's information and comprehensive consent. We contact guardians primarily by email and use the phone only in emergencies. Consent may be withdrawn; after withdrawal, the worker's activity is suspended.
Data Handling After Withdrawal
- 30-day grace period: For 30 days after withdrawal, the account can be restored; during this period the profile and similar data are progressively deleted.
- Immediately deleted data: Public profile display and inclusion in new matching are removed immediately.
- Statutory 7-year retention, anonymized: Records related to transactions, payments, and taxes are retained in anonymized (non-identifiable) form in accordance with statutory retention obligations (generally 7 years).
Your Right to Erasure
Under Japan's Act on the Protection of Personal Information and (where applicable) the GDPR, you may request disclosure, correction, suspension of use, or deletion of your personal information. You can request this via the in-app withdrawal feature or the operator support window. Records subject to a statutory retention obligation may be retained in anonymized form. This Policy is governed by the laws of Japan, and the English version is also interpreted under Japanese law.
Contact and Amendment
For questions about this Policy, contact the operator support window in the app. For material amendments, re-consent is requested within the app.