Privacy policy
What Sendora collects, why, where it goes, and how long we keep it.
Who we are
Sendora is a shipping service operated by Meta Studios Creative Agency k.k (株式会社), Tobu Bldg. 5F, 6-28-9 Jingumae, Shibuya-ku, Tokyo 150-0001, Japan (“Sendora”, “we”). Questions about this policy or your data: galarcon@metastudios.jp.
Who this covers
- Sellers who create a Sendora account and connect a store.
- Buyers of those sellers, whose order details reach us only because a seller connected their store.
- Visitors to this website.
What we collect
- Seller account data — name, email, business name and address, and the store connections you authorize.
- Order data from connected stores — order number, items, quantities, weights, declared values, and the buyer’s name, shipping address and (where the marketplace provides it for shipping) phone number.
- Shipment data — packaging, carrier, label and customs-declaration details, tracking numbers.
- Technical data — server logs needed to run and secure the service (time, endpoint, error codes). We do not run advertising trackers.
Why we use it
Only to provide the service you asked for: importing paid orders, preparing shipping labels and customs declarations, sending tracking back to your store, billing you, and supporting you. Buyer data is used solely to ship that buyer’s order.
What we never do
- Sell or rent personal data, or use it for advertising or marketing.
- Ask for your marketplace passwords — stores connect through each platform’s official authorization (OAuth / Login with Amazon).
- Use marketplace or buyer data to train AI or machine-learning models.
- Contact your buyers ourselves.
- Store payment card numbers.
Who we share it with
Only the parties needed to ship an order, each for that purpose alone:
- Carriers and customs providers you choose — e.g. Japan Post, Yamato, Sagawa, and Zonos (United States) for duties-prepaid U.S. shipments — receive the shipping and customs details on the label.
- Your connected marketplaces (Etsy, Shopify, Amazon) — receive tracking numbers and shipment status.
- Infrastructure providers that host the service on our behalf under confidentiality and security obligations, currently Netlify, Inc. (United States, hosting) and Google LLC (United States, web fonts — receives visitors’ IP addresses only).
- Authorities, where Japanese or other applicable law requires it.
International transfers
Some of the providers above are located outside Japan, mainly in the United States. Under Japan’s Act on the Protection of Personal Information (APPI), we transfer data abroad only to providers that maintain protection equivalent to APPI standards, or as needed to deliver the international shipment you requested. On request we will tell you which providers hold your data and where.
How long we keep it
- Buyer personal data (names, addresses, phone numbers) is deleted no later than 30 days after the order is delivered, unless a law requires us to keep it longer — and then only for that legal purpose.
- If a seller disconnects a store or closes their account, that store’s data is deleted within 30 days, including backups.
- Seller account and billing records are kept for as long as the account is open and then as long as Japanese tax and accounting law requires.
How we protect it
Encryption in transit (HTTPS/TLS) everywhere, encryption at rest for any stored personal data, least-privilege access, and secrets kept in server-side secret stores. Details are on our Security page.
Your rights
You can ask us to disclose, correct, stop using or delete your personal data, as provided by APPI and other laws that apply to you. Buyers may contact the seller they bought from, or us directly. Write to galarcon@metastudios.jp; we reply within 14 days.
Cookies
This website uses only storage that it needs to work (for example, your language and cookie choice). See Cookies.
Changes
If we change this policy in a way that matters, we will update this page and tell account holders by email before the change applies.
Last updated: October 22, 2026.