Privacy Policy

Last updated: April 14, 2026

This Privacy Policy describes how InOkinawa ("we", "us", "our") collects, uses, and protects your personal information when you use our websites at www.inokinawa.com, jobs.inokinawa.com, and related subdomains (together, the "Service").

1. Information We Collect

We collect the following categories of information:

• Account information — when you create an account, we collect your email address and a password (stored as a salted hash, never in plaintext). If you sign in with Google, we collect the Google profile information described below instead of a password.
• Profile and resume information — any information you voluntarily provide to your profile or resume builder, including name, work history, education, skills, and location preferences.
• Usage information — pages viewed, jobs viewed or liked, searches performed, and interactions with the Service. We self-host analytics via Umami, which does not use tracking cookies or collect personally identifiable usage data across sites.
• Technical information — IP address, browser type, operating system, and referring URLs, used for security, abuse prevention, and aggregate analytics.

2. Google User Data

When you choose to sign in with Google, we request and receive the following Google user data through the openid, email, and profile OAuth scopes:

• Email address — used as your account identifier and for transactional email (account verification, password reset, security notifications).
• Basic profile information — your name and profile picture URL, displayed within your own account on the Service.
• Google account identifier (sub) — a stable, opaque ID used to link your Google identity to your InOkinawa account across future sign-ins.

We do not request access to Gmail, Google Drive, Calendar, Contacts, or any other Google services. We do not sell, rent, or share Google user data with third parties for advertising or other purposes. Google user data is used solely to provide the authentication and account features described in this policy, and is not shared with any human reader outside of our operations and support staff acting on your behalf.

InOkinawa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

• To create and manage your account and authenticate your sessions.
• To provide core Service features, including job search, resume building, and match recommendations.
• To send transactional email strictly related to your account (verification, password reset, security alerts) and, only if you opt in, job alerts or newsletters.
• To detect, prevent, and respond to fraud, abuse, or security incidents.
• To generate aggregated, de-identified analytics about Service usage.

4. How We Share Your Information

We do not sell your personal information. We share information only with:

• Service providers that we rely on to operate the Service, under contractual confidentiality obligations — currently: Cloudflare (network and DDoS protection), Resend (transactional email delivery), DeepSeek and Google Gemini (LLM processing of public job-posting text and resume PDF parsing, respectively).
• Employers and recruiters — only with your explicit opt-in (for example, by marking your profile as "recruiter-searchable" or by clicking an external "Apply" link, which leaves the Service).
• Legal authorities — when required by applicable law, subpoena, or court order.

5. Data Retention and Deletion

We retain your account data for as long as your account is active. You may delete your account at any time from the account settings page. Upon deletion, we soft-delete your user record and asynchronously purge associated profile, resume, and preference data from our databases, typically within 30 days. Some information may be retained longer in backups and in operational logs for a limited period to support security investigations and legal obligations, after which it is permanently removed.

6. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact us at [email protected].

7. Security

We use industry-standard safeguards including HTTPS/TLS for all traffic, hashed password storage, scoped internal service-to-service authentication, and principle-of-least-privilege access controls. No system is perfectly secure, and we cannot guarantee absolute security, but we work to protect your information and will notify affected users of any material breach as required by law.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. International Users

The Service is operated from Okinawa, Japan. If you access the Service from outside Japan, you consent to the transfer and processing of your information in Japan and in other countries where our service providers operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-product notice or email at least 14 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Questions about this policy or your personal information can be directed to [email protected].