TEAM YORISOI

Team Yorisoi Privacy Policy (β Version)

Last Updated: December 29, 2025

1. Introduction

Team Yorisoi LLC ("we," "our," or "Company") operates a matching platform (the "Service") that connects service providers ("Providers") with service users ("Clients").

We respect the privacy of our users and are committed to protecting personal information. This Privacy Policy ("Policy") explains the types of personal information we collect, how we use it, how we manage it, and users' rights regarding their information.

By using our Service, users agree to this Policy.

Beta Version Notice

Our Service is currently provided as a beta version (trial operation). During the beta period, we are starting with a limited number of users, focusing on in-person services in the Seattle area and online services provided by Providers who have a business license in or reside in Washington State. Only individual Providers can register at this time; business entity registration functionality is currently under development.

Applicable Laws

This Policy complies with Washington State Privacy Law and U.S. federal law.

2. Personal Information We Collect

We collect the following personal information to provide our Service.

2.1 Information Collected During Registration

• Full name (kanji and romaji where applicable)
• Email address
• Phone number
• Address (including postal code)
• Date of birth
• Profile photo (optional)
• Password (stored in encrypted form)
• Preferred language (Japanese/English)

2.2 Identity Verification and Background Check Information (Providers Only)

Individual Providers:

• Information required for background checks (name, date of birth, last 4 digits of Social Security Number)
• Government-issued ID (driver's license, state-issued ID card, or passport)
• Professional licenses and certifications (where applicable)
• Criminal background check results (obtained through Checkr Inc.)

Important: Providers who do not pass the background check will be denied registration. We prioritize safety, and we do not accept registration from individuals whose background check results do not meet our safety standards.

2.3 Payment Information

Clients:

• Payment method information (credit card, debit card, bank account)
• Billing address
• Transaction history
• Receipt and invoice information

Providers:

• Stripe account information (including bank account for payment receipt)
• Transaction history
• Tax information required for withholding (where applicable)

Important: Payment information (credit card numbers, bank account details) is securely managed by our payment processor, Stripe Inc., and is not stored on our servers.

2.4 Service Usage Information

• Booking history (date, time, service type, duration)
• Service contract details
• Reviews and ratings
• Messages between users (may be reviewed when necessary to ensure safety and compliance)
• Customer support interactions
• Referral information
• Violation reports (reports of off-platform transaction solicitation, inappropriate behavior, and evidence such as screenshots submitted)

2.5 Technical Information

• IP address
• Device information (model, OS, browser type and version)
• Cookie information
• Access logs (timestamp, pages viewed)
• Location information (only when explicitly permitted by user)
• Referral URL

3. How We Use Personal Information

We use collected personal information for the following purposes.

3.1 Service Provision and Operation

• Creating and managing user accounts
• Matching Providers with Clients
• Processing bookings and contracts
• Processing payments and disbursing compensation
• Providing customer support
• Maintaining and improving service quality

3.2 Safety and Security

• Conducting identity verification
• Conducting background checks (for individual Providers)
• Verifying professional licenses and certifications and managing expiration dates
• Preventing and detecting fraud and misuse
• Investigating violations of Terms of Service
• Responding to safety concerns (abuse, neglect, or other dangers)
• Monitoring and preventing off-platform transactions

3.3 Service Improvement

• Improving service quality
• Developing and testing new features
• Analyzing usage patterns (matching rates, satisfaction levels, etc.)
• Enhancing user experience
• Conducting user surveys

3.4 Communications

• Service-related notifications (booking confirmations, changes, cancellations, reminders)
• License and certification expiration notices
• Provider annual fee renewal notices
• Important announcements (policy changes, system maintenance, etc.)
• Customer support responses
• Marketing communications (only with prior user consent)

3.5 Legal Compliance

• Complying with legal reporting and response requirements
• Responding to lawful requests from government agencies and law enforcement
• Resolving disputes and litigation
• Fulfilling tax filing and record-keeping obligations

4. Sharing Personal Information with Third Parties

We do not share personal information with third parties except in the following cases.

4.1 With User Consent

We may share information with third parties only with explicit user consent.

4.2 Third Parties Necessary for Service Provision

We share information with the following third parties only to the minimum extent necessary for business operations, and require them to protect information through appropriate contracts.

• Stripe Inc. (Payment Processing): For payment processing and compensation disbursement
• Checkr Inc. (Background Checks): For identity verification and criminal history checks of individual Providers
• PSPINC (Pacific Software Publishing, Inc.): For web hosting, data storage and processing
• Customer Support Tool Providers: For responding to inquiries
• Email Service Providers: For sending notification emails

4.3 Information Sharing on the Platform

• Provider profile information (name, photo, service description, credentials, years of experience, review ratings) is publicly visible to Clients
• Client reviews (name or initials, ratings, comments) are publicly visible to Providers and other users
• Information necessary for bookings and contracts (name, contact information, address, service details, etc.) is shared with transaction counterparties
• Emergency contact information may be shared with Providers

4.4 Legal Requirements and Safety Necessities

• When legally required to disclose
• When court orders or subpoenas are issued
• In response to lawful requests from government agencies or law enforcement
• When necessary to protect the life, health, or property of users or third parties
• When legally obligated to report abuse, neglect, or other dangers (to Adult Protective Services, Child Protective Services, etc.)

4.5 Business Transfers

In the event of merger, acquisition, business transfer, bankruptcy, or similar events, personal information may be transferred. We will notify users in advance through the Service and email, and require the transferee to comply with this Policy.

5. Information Storage and Security Management

5.1 Security Measures

We implement the following security measures to protect personal information from unauthorized access, loss, destruction, alteration, and leakage.

• Communication Encryption: SSL/TLS (256-bit) encrypted communications
• Data Encryption: AES-256 encryption for stored data
• Access Control: Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA)
• Regular Audits: Regular security vulnerability scanning and assessment
• Employee Training: Annual privacy and security training for all employees
• Physical Security: Physical access control at data centers (managed by PSPINC)
• Backups: Regular data backups and disaster recovery plans

5.2 Data Storage Location

Personal information is stored at PSPINC (Pacific Software Publishing, Inc.)'s U.S. data center.

5.3 Retention Periods

Data Type	Retention Period
Account Information	90 days after account deletion
Transaction History and Contract Records	7 years after transaction completion (tax and accounting requirements)
Background Check Results	Most recent results only (previous results deleted upon update)
License and Certification Information	1 year after expiration
Reviews and Ratings	Indefinitely displayed on platform (considered upon deletion request)
Message History	1 year after transaction completion
Customer Support Records	3 years from last interaction
Access Logs	90 days
Provider Annual Fee Payment Records	7 years from last payment

Even after purposes are achieved, we may retain certain information for legal compliance (tax record retention, dispute resolution) or legitimate business purposes.

5.4 Data Breach Response

In the event of a personal information breach, we will take the following actions:

1. Notify affected users by email within 72 hours of discovery
2. Provide details about the scope, impact, and countermeasures of the breach
3. Provide credit monitoring services as necessary
4. Report to regulatory authorities as required by applicable laws
5. Implement and publicize recurrence prevention measures

6. User Rights

Users have the following rights regarding their personal information.

6.1 Right to Access (Disclosure Request)

Users can request disclosure of personal information we hold about them. We will provide the information electronically or in writing within 30 days of the request.

6.2 Right to Rectification

Users can request correction if personal information is inaccurate. We will respond within 14 days of the request.

6.3 Right to Deletion (Erasure Request)

Users can request deletion of personal information in the following cases:

• Collection purpose has been achieved
• Consent has been withdrawn
• Information was collected unlawfully
• Deletion is legally required

However, deletion is not possible when:

• Necessary for contract performance
• Required for legal compliance (tax records, etc.)
• Needed for litigation or dispute resolution
• Legitimate business purposes exist

We will respond to deletion requests within 30 days.

6.4 Right to Restriction of Processing

Users can request restriction of processing (use and sharing) of personal information. However, processing necessary for service provision cannot be restricted.

6.5 Right to Data Portability

Users can request to receive personal information they have provided in a machine-readable format (CSV, JSON, etc.).

6.6 Marketing Opt-Out

Users can opt out of marketing emails at any time using the "Unsubscribe" link in emails. However, important transaction-related notifications (booking confirmations, policy changes, etc.) will continue to be sent.

6.7 Exercising Rights

To exercise these rights, please contact us through the contact information below. We will verify your identity by comparing with registered information.

7. Minors

Our Service is intended for individuals 18 years of age or older. We do not knowingly collect personal information from individuals under 18.

If we become aware that a person under 18 has provided personal information, we will promptly delete the account and erase all related personal information.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately.

8. International Data Transfers

Regarding Beta Version: Currently, our Service operates only within the United States, and user personal information is stored within the U.S. (at PSPINC's U.S. data center).

If the Service expands internationally in the future, user personal information may be transferred to and stored in countries other than the user's country of residence. In such cases, we will implement the following protective measures:

• Appropriate security measures
• Use of Standard Contractual Clauses
• Compliance with laws in the destination country
• Compliance with applicable privacy laws and personal information protection laws of each country

9. Additional Rights for Washington State Residents

Under Washington State Consumer Privacy Law, you have the following rights:

• Opt-out of sale or sharing of personal information (We do not sell personal information)
• Restriction on use of sensitive information
• Non-discrimination for exercising rights

10. Changes to Privacy Policy

We may modify this Policy due to legal amendments, service changes, or other reasons.

Notice of Changes:

• For significant changes, we will provide notice on the Service and via registered email addresses
• Notice will typically be provided 30 days before changes take effect, but during the beta period may be 7 days
• The last updated date will be indicated at the top of this Policy

Application After Changes: Continued use of the Service after changes constitutes agreement to the modified Policy. If you do not agree to changes, please delete your account.

11. Contact Information

For questions about this Policy, inquiries about personal information, or to exercise your rights, please contact us:

Team Yorisoi LLC Attn: Privacy Officer
Email: info@yorisoi.team
Phone: 425-891-5963
Address: 14150 NE 20th St, F1-245, Bellevue, WA 98007

Business Hours: Monday - Friday, 9:00 AM - 5:00 PM (Pacific Time)
Response Time: We will respond within 30 days of receiving your inquiry

12. Dispute Resolution

Disputes regarding this Policy will first be addressed through discussion with our Company. If unresolved, the exclusive jurisdiction and venue shall be the courts of King County, Washington State.

Last Updated: December 29, 2025

This Policy may be changed without notice. Please check periodically for updates.