1. In short
We collect what we need to run a marketplace and a community: your account, what you publish, what you buy and sell, and how you use the platform. We use it to run the service, keep it safe, and personalise what you see. We do not sell your personal information. We keep it for set periods, listed in section 12, and you can ask us at any time to see, correct or delete it.
This section is a plain-language summary. It does not replace the clauses that follow. This document forms part of our Terms of Service. Where this document and the terms differ, the terms prevail.
2. Who is responsible for your information
2.1 Tokyofishmarket is operated by Manda SENC, 418, avenue des Pins Ouest, bureau 40, Montréal (Québec) H2W 1S2, Canada. Manda SENC is responsible for the personal information described in this document.
2.2 All questions and requests about your personal information go to one address: support@tokyofishmarket.com. Please say in the subject line that your message is a privacy request.
2.3 The person in charge of the protection of personal information at Manda SENC is its managing partner. You can reach them at support@tokyofishmarket.com.
3. Age
3.1 You must be at least 16 years old to create an account (section 5.1 of the terms). We do not knowingly collect personal information from anyone under 16. If we learn that an account belongs to someone under 16, we close it and delete the personal information collected from it, except what the law requires us to keep.
3.2 We ask for your date of birth when you set up your account. If it shows you are under 18, adult content is blocked on your account, and personalised advertising (section 7) cannot be switched on.
3.3 If you are under the age of majority where you live, you need the permission of a parent or legal guardian to use the platform (section 5.2 of the terms). A parent or guardian who believes a child's information has been collected may write to us at the address in 2.2.
4. What we collect
4.1 Account. Your email address, username, display name and avatar; a secure hash of your password if you use one; your two-factor authentication settings; your date of birth; your preferred language. If you sign in with Google, Apple, Discord or LINE, we receive from that provider the identifier and profile details it shares for sign-in.
4.2 Sign-in and device. The IP address and country from which you created your account; the IP address, city and country of your last sign-in; your active sessions, with the IP address and browser type used; the time you were last active; and, if you allow notifications on a device, a push notification token for that device.
4.3 What you publish and send. Listings, photos, videos, posts, comments, reviews, votes, reactions, collection and wishlist entries, contributions to the catalogue, contest entries, and the messages you exchange with other users.
4.4 Purchases. Your orders, their amounts and status, your shipping addresses, and shipment tracking. Card payments are taken by our secure payment service; we do not store your full card number.
4.5 Selling. If you apply to sell, the information the law requires us to verify about sellers: your legal names, date of birth, telephone number, nationality, country of residence, whether you are a politically exposed person, your addresses, tax identification numbers, bank account and, where required, a national identity number. Bank account and national identity numbers are stored encrypted. Identity checks may use a photo of an identity document and, only if you choose that method and give your express consent, a biometric comparison of your face with that document.
4.6 Creator verification. If you ask us to verify that you run a channel or an account elsewhere, such as on YouTube or Twitch, the proof of ownership you provide and the public channel details we check.
4.7 Activity. The pages, listings, articles and videos you view and for how long, what you search for, what you like, save, follow, join, add to your cart or wishlist, and what you buy. This is described further in section 6.
4.8 Gamification. Your points, XP, levels, badges, quests, streaks, leaderboard positions and your tamapon, as described in Gamification & Virtual Items.
4.9 Support and safety. Your messages to support, reports you file or that concern you, moderation decisions, appeals, and the fraud signals described in section 8.
5. Why we use it
5.1 We use your personal information to:
- provide the platform and the features you ask for: your account, orders, payments, shipping, messages, communities and games (the contract with you);
- keep the platform safe: screening content, detecting fraud and abuse, protecting accounts, and handling reports and appeals (our legitimate interest and, where the law requires it, a legal obligation);
- meet our legal obligations, including tax, seller verification and the records the law requires us to keep (legal obligation);
- personalise feeds, search and recommendations (section 6) (our legitimate interest, and your consent where the law requires it);
- show personalised advertising, only if you switch it on (section 7) (your consent);
- send you messages about your account and orders and, if you choose, promotional messages (section 9) (the contract with you, and your consent for promotional messages).
5.2 The words in brackets are the legal bases we rely on where the GDPR or a similar law applies to you.
6. Personalisation and recommendations
6.1 We personalise your home feed, product discovery, search results and suggestions using your activity on the platform: what you view and for how long, what you like, save, follow, join, add to your cart, wishlist or collection, buy, rate or review; how you vote, react to and share posts; the articles you read and the videos you watch; your contest activity; the tags and categories you engage with; the interests you declare during onboarding; and your gamification activity.
6.2 If you browse without signing in, the same kind of activity is linked to an anonymous session. If you then sign in, that activity is attached to your account. Anonymous activity that is never attached to an account is deleted after 90 days.
6.3 We do not read or analyse the content of your private messages to personalise recommendations, as section 10.5 of the terms says. When you open a conversation with a seller, the fact that you contacted that seller, and the listing you asked about, is used as a signal of interest.
7. Advertising
7.1 Personalised advertising is off unless you switch it on in your account settings, and it cannot be switched on if you are under 18.
7.2 When it is on, advertisers can reach you through audiences built from your age range, your country and city, your interests and the categories you engage with, and when you were last active. Advertisers never receive your name, email address or any other information that identifies you.
7.3 When you switch it off, your advertising profile and your membership of every advertising audience are deleted at once.
8. Moderation, safety and fraud
8.1 Images and videos you upload are screened automatically before they are published, in sequence, by OpenAI, then Hive, then Sightengine, for sexual, violent, hateful and other prohibited content. Text may also be screened by OpenAI. Content that is not cleared is held back from publication until a person reviews it. An automated system does not by itself take a final decision against you (section 14.4 of the terms).
8.2 Messages you send to a seller are checked automatically against lists of prohibited words and links, and for attempts to move a sale off the platform. A message may be blocked or flagged for review as a result.
8.3 Where screening detects possible child sexual abuse material, a safety incident is opened for review by a person, and we report to the competent authorities as the law requires.
8.4 Payments receive a risk score, calculated from signals such as the risk assessment of our payment provider, a card used by several accounts, repeated failed payments and past refund abuse. A high score can place the payment or the account on hold automatically. Every hold is placed in a queue for review by a person, and we tell you when an automatic hold is applied to your account.
8.5 Moderators of a Circle see the content published in their Circle and the reports about it.
9. Emails and notifications
9.1 We send you emails about your account, security, orders, shipping, payments and support requests. Promotional emails and the newsletter are off unless you turn them on. Some other categories, such as abandoned-cart reminders and community digests, are on by default. You can change your email preferences at any time from your account or from the link in every email.
9.2 Our email provider tells us whether an email was delivered, opened or clicked. We use this to measure deliverability and to stop sending to addresses that bounce.
9.3 Push notifications are sent through Firebase Cloud Messaging, using the device token described in 4.2.
10. Who we share it with
10.1 We do not sell your personal information.
10.2 Other users see your public profile and what you publish. When you buy, the seller receives what they need to fulfil your order, including your shipping address. When you sell, the information that Seller Identity Disclosure describes is shown to buyers.
10.3 Service providers process personal information on our behalf, only for the purposes below:
- Vercel: hosting of the platform, bot protection (BotID), web analytics, configuration, and the gateway for the assistant in our help centre;
- Cloudflare: content delivery and network protection for our domains;
- our database and file storage providers: storage of your account data and of the files you upload;
- Upstash (Redis and QStash): temporary data used for security, rate limiting and caching, and the queue of internal events;
- Sentry: error monitoring; when an error occurs, a recording of the page may be kept with all text masked and all media blocked;
- Stripe, through our secure payment service: card payments, the calculation of sales taxes at checkout, payouts to sellers and the related identity checks;
- Persona: identity verification of sellers (section 4.5);
- EasyPost: shipping labels and tracking;
- Bunny Stream: storage and delivery of videos;
- Resend: sending of emails; Google (Gmail): delivery of messages sent through our contact form;
- Google (Firebase Cloud Messaging): push notifications;
- OpenAI, Hive and Sightengine: content screening (section 8.1);
- Anthropic and OpenAI, through Vercel's gateway: answers from the assistant in our help centre, when you use it;
- Klipy: GIF search, which receives your search terms but not your identity;
- Have I Been Pwned: checking whether a password appears in known data breaches, which receives only the first characters of a hash of the password, never the password;
- Google (YouTube) and Twitch: checking that you control a channel, when you ask for creator verification;
- Printful: production and delivery of print-on-demand items, only if that option is enabled and you buy such an item.
10.4 Authorities. We disclose personal information to a public authority only where the law requires it or a valid legal order compels it.
10.5 A buyer of the platform. If the platform is transferred to another company (section 20.4 of the terms), your personal information is transferred with it, under this document.
11. Where your information is processed
11.1 The platform runs on servers in the United States. Several of the service providers listed in 10.3 are located, or process data, outside Canada. Your personal information may therefore be processed outside Québec and outside Canada, where it is protected by our contracts with those providers, and where local authorities may have access to it under their own law.
12. How long we keep it
12.1 We keep personal information only for as long as we need it for the purpose it was collected for, or for as long as the law requires. The periods below are applied automatically every day.
- Content you delete: kept in your trash for 30 days, during which you can restore it (section 10.4 of the terms), then permanently deleted within the next 7 days.
- Videos attached to something that no longer exists: deleted 30 days later, or 90 days later when the item was sold.
- Seller applications abandoned before completion: the identity, address, tax and bank details entered are erased 30 days after the application was last changed.
- Identity verification: the provider's copy of your verification is erased 1 day after the decision; the documents we store are deleted 30 days after the decision.
- Creator verification: the file is deleted 180 days after it is closed.
- Shipping: the delivery address and the personal details in tracking events are erased 90 days after delivery.
- Sign-in data: once your account is 90 days old, the IP address used to create it and the IP address and city of your last sign-in are erased, and are then erased each day.
- Sessions: a session expires after 7 days without use, and expired sessions are deleted daily.
- Activity from anonymous sessions never attached to an account: 90 days. Records of which recommendations were shown to you: 90 days.
- Search queries: detached from you after 30 days, deleted after 180 days.
- Reports you filed or that concern you, once resolved: 90 days.
- Fraud data: risk events 90 days; payment fraud facts 180 days; risk scores and risk decisions 365 days.
- Push notification tokens: deleted 30 days after they stop working, or 180 days after they were last used.
- Your tamapon's detailed journal: 30 days.
- Delivery events from our email provider: 30 days.
- Internal event logs: 30 days; internal tracking events: 90 days.
- Records of staff access to a user's file: 365 days.
12.2 Order, payment and tax records are kept after your account is closed for the period the law requires (section 6.4 of the terms). Your account and profile, your messages, your activity linked to your account, and support and moderation records are kept while your account is open and are handled on closure as section 13 describes.
13. Closing your account
13.1 You can ask us to close your account by writing to support@tokyofishmarket.com (section 6.4 of the terms). There is no self-service button for this. Before we close it, orders in progress are completed or refunded, and a seller is paid what is owed to them.
13.2 Closing an account does not delete every record at once. We anonymise your profile: your name, username, avatar, contact details and date of birth are removed or replaced, so that the account no longer identifies you. We keep the records we must keep, such as orders you placed or received, payments, refunds, payouts and tax records, because the law and the rights of the other party to each transaction require them. Those records are kept for the periods in section 12 and then deleted.
13.3 What you published is handled as section 10.4 of the terms describes.
14. Your rights
14.1 Depending on where you live, you have the right to:
- know whether we hold personal information about you, and receive a copy of it;
- have inaccurate or incomplete information corrected;
- have your information deleted, or stop its dissemination, subject to what the law requires us to keep;
- receive the information you gave us in a structured, commonly used technological format, and have it sent to another organisation;
- withdraw your consent, for example to personalised advertising or promotional emails, at any time;
- object to processing based on our legitimate interest, including personalisation;
- be told about, and submit observations on, a decision made exclusively by automated processing;
- complain to a data protection authority, such as the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, the authority of your EU member state, the Personal Information Protection Commission of Japan, or the Personal Information Protection Commission of Korea.
14.2 To exercise a right, write to the address in 2.2. We may ask you to confirm your identity, and we answer within 30 days. Exercising your rights is free.
15. Security
15.1 Access to personal information is limited by rules enforced in the database itself, so that each user and each part of the platform can reach only the records it is entitled to. Bank account numbers, national identity numbers and legal names given for verification are encrypted. Staff access to a user's file is logged. You can protect your account with two-factor authentication, and we check new passwords against known breaches.
15.2 No system is perfectly secure. If a confidentiality incident involving your personal information presents a risk of serious injury, we notify you and the competent authorities as the law requires.
16. Cookies
How we use cookies and similar technologies is described in our Cookie Policy.
17. Changes to this document
This document is one of the documents listed in section 4.2 of the terms. We change it as section 19 of the terms describes. Every version is kept and dated.
18. Contact
Privacy requests and questions: support@tokyofishmarket.com. Manda SENC, 418, avenue des Pins Ouest, bureau 40, Montréal (Québec) H2W 1S2, Canada.