Privacy Policy
Who we are
GoGaijin (gogaijin.ai and the GoGaijin app) is run by International Design LLC (インターナショナルデザイン合同会社), Shinjuku Dai-7 Hayama Bldg 3F, 1-36-2 Shinjuku, Shinjuku-ku, Tokyo 160-0022, Japan, represented by Carlos Lastres. For questions or requests about your data, write to carlos@intdesign.jp.
What we collect
- Your account. Your email address, your name and your language. For a workspace: its name and, if an owner adds them, a phone number and an email address for travelers.
- Google or Apple sign in. If you choose it, the account ID Google or Apple gives us, your email address and your name. Apple shares your name only the first time, and may give us a private relay address instead of your real one.
- Signing in. Each sign in link and invite carries a one time code. We store only a scrambled (hashed) version of it, and the same goes for your session. Your browser keeps a session cookie,
gg_session, for up to 30 days, and a short lived cookie,gg_oauth, for up to 10 minutes while you sign in with Google or Apple. - What you put into GoGaijin. Trips, days, stops, notes, booking references, saved library items, and the names of travelers if you add them.
- Teams. Who belongs to each workspace, their role, who invited whom, and the email addresses of pending invites.
- Trip discussions. The name a traveler types and the message they post on a shared trip, and messages from the agency.
- Technical data. GoGaijin runs on Cloudflare. To deliver pages and block abuse, Cloudflare processes your IP address, browser user agent and the addresses you request. Our sign in rate limit uses your IP address for about one minute. Our server logs record requests and errors for a few days.
- Travelers you add. A traveler's name and, if you add it, their email address, plus the personal link we create for them. If you ask us to, we email that traveler their link.
- Files. Vouchers, tickets and other documents you attach to a trip, and the photo and logo you add to your agency's branding.
- Activity on shared trips. When a shared link or a personal link is opened (and, for a personal link, which traveler it belongs to), messages, and which proposal option a client chose, with the name they typed.
- Smart Import. When you paste a booking confirmation into Import a booking, we send that text to TypeSafe so its model can pick out the dates, times and booking details. You review every stop before it is added.
No analytics, no advertising. GoGaijin has no analytics, no advertising cookies and no tracking pixels, and our fonts are served from our own domain.
On your device. Your browser keeps your language choice and, when you open a shared trip, a copy of it so the trip works offline. The GoGaijin app keeps the trips you open on your phone and schedules booking reminders as notifications on the phone itself. Neither is sent to us.
Why we use it
- to create your account and sign you in
- to let you build trips, work with your team and share trips with travelers
- to send sign in links, invites and messages that are essential to the service
- to show your agency's name and contact details to the travelers you share a trip with
- to keep GoGaijin secure, prevent abuse and fix problems
- to answer your questions and requests, and to meet legal obligations
We do not send marketing email without your consent, and we never sell personal data.
Travelers' data that agencies enter
An agency decides what it writes about its travelers in a trip. We handle that data on the agency's behalf, only to run GoGaijin for them. If you are a traveler and want to know what an agency holds about you, ask the agency first. You can also write to us.
Who receives data
- Cloudflare hosts GoGaijin, its database and its logs.
- Resend sends our emails.
- Google and Apple receive the sign in request only if you choose to sign in with them.
- People you share a trip with. Anyone with a trip's link or code can see that trip, the agency's name and contact details, and its discussion. Turn sharing off to stop that.
- Your teammates see the trips in your workspace and the names and email addresses of its members.
- TypeSafe (TypeSafe AI, Inc.) receives the text you paste into Import a booking, only to read it for you. TypeSafe states that it does not train its models on this input.
We disclose data to others only when the law requires it, to protect someone's life, body or property, or with your consent.
Data outside Japan
Cloudflare, Resend, TypeSafe, Google and Apple are companies based in the United States, and they may store and process data there and in other countries. The United States has no general federal privacy law equivalent to Japan's Act on the Protection of Personal Information; privacy there is covered by sector specific federal laws and by state laws such as California's. Each of these providers handles data under its contract with us or its own terms, with security measures we have reviewed. If you would like more detail about these measures, write to us.
How we protect it
All traffic is encrypted with HTTPS. Sign in codes, invite codes and sessions are stored only in hashed form, and session cookies cannot be read by scripts. Every request is checked against the workspace it belongs to, sign in requests are rate limited, and only the people who run GoGaijin can reach the database.
How long we keep it
- Your account, workspaces, trips and discussions are kept until you delete them or delete your account.
- When you delete your account, we delete your account and every workspace only you use, with its trips, discussions and share links, right away. Workspaces you share stay with your teammates. Copies in our database backups disappear within 30 days.
- Sign in links and setup codes are deleted 30 days after they were created. Sessions are deleted after they expire. Invites are deleted 30 days after they were accepted or expired.
- Server logs at Cloudflare are kept for a few days, and never longer than 30.
- Files are deleted when you delete them or the trip they belong to, and stored copies are removed within a day after that. Activity on a trip is kept as long as the trip.
Your choices and rights
You can change your name and your workspace details in Settings, and delete your account there at any time. You can ask us to disclose, correct, add to, delete or stop using your personal data, to stop giving it to third parties, and for records of what we have given to third parties. Write to carlos@intdesign.jp. We will confirm who you are, there is no fee, and we will answer without undue delay.
If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to object to or restrict processing, to receive your data in a portable form, and to complain to your data protection authority. We rely on our contract with you to provide your account and the service, and on our legitimate interest to keep GoGaijin secure and to handle travelers' data for agencies.
Children
GoGaijin is for adults 18 and over. It is not directed at anyone under 18, and we do not knowingly collect their personal data. If you believe someone under 18 has given us data, write to us and we will delete it.
Changes
When this policy changes, we update this page and the date at the top. If a change matters for how we use your data, we tell you by email or in GoGaijin before it takes effect.