Legal

Privacy Policy

Effective date: July 1, 2025  ·  Last updated: June 27, 2026

This policy explains what personal data Tradexo collects, why, and how it is protected. It applies to all users of the Tradexo platform — including the web dashboard, mobile app, and API — regardless of where you are located. Tradexo is committed to compliance with Japan's Act on the Protection of Personal Information (APPI) and, where applicable, the EU General Data Protection Regulation (GDPR).

01 Who We Are

Tradexo is operated by izmotech (sole proprietor: Yusuke Ishimoto), located in Yamato-Koriyama City, Nara Prefecture, Japan. We are the data controller for personal information processed through the Tradexo platform.

References to "Tradexo," "we," "us," or "our" in this policy all refer to izmotech.

02 Information We Collect

Category Examples Source
Account data Name, email address, password (hashed), company name, country You, at registration
Profile & trade data Product categories, trade requirements, certifications, uploaded documents You, on platform
Communication data Messages sent via Tradexo chat, Trade Moments posts You, on platform
Usage data IP address, browser/device type, pages visited, feature usage logs Automatically collected
Payment data Billing name, country; card details handled by payment processor (not stored by us) You, at checkout

We do not collect sensitive personal information (e.g., health data, racial origin, political opinions) and ask that you do not submit such data through the platform.

03 How We Use Your Information

  • Operate and deliver the Tradexo matching and messaging service
  • Authenticate users and maintain account security
  • Display your company profile to other platform members
  • Send transactional emails (account confirmation, match notifications, billing receipts)
  • Improve platform features through aggregated, anonymised analytics
  • Comply with legal obligations under Japanese law and applicable foreign regulations
  • Prevent fraud, abuse, and violations of our Terms of Service

We do not use your personal data to train AI or machine-learning models, and we do not sell your data to third parties.

04 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

Processing activity Legal basis
Account creation and service delivery Contract Art. 6(1)(b)
Billing and tax records Legal obligation Art. 6(1)(c)
Fraud prevention and platform security Legitimate interests Art. 6(1)(f)
Optional marketing communications Consent Art. 6(1)(a)

05 Data Sharing

We share personal data only with:

  • Other Tradexo members — your company name, country, product categories, and public profile fields are visible to matched counterparties.
  • Infrastructure providers — cloud hosting and database services operating under strict data-processing agreements.
  • Payment processor — billing data is passed to our payment provider; we retain only a transaction reference.
  • Legal authorities — if required by applicable law, court order, or to protect the safety of users.

We never sell, rent, or trade your personal data.

06 International Data Transfers

Tradexo is operated from Japan. If you access the platform from the EEA or other regions with data-transfer restrictions, your data may be transferred to and processed in Japan.

Japan has been recognised by the European Commission as providing an adequate level of data protection under the GDPR adequacy decision (Decision (EU) 2019/419). No additional transfer mechanisms are currently required, but we will update this section promptly if that status changes.

07 Data Retention

  • Active accounts: data is retained for the duration of your subscription.
  • Closed accounts: profile and usage data is deleted within 90 days of account closure, except where retention is required by law.
  • Billing records: retained for 7 years as required by Japanese tax regulations.
  • Support correspondence: retained for 3 years to resolve potential disputes.

08 Your Rights

Depending on your location, you have the following rights regarding your personal data:

Right Japan (APPI) EEA / UK (GDPR)
Access your data
Correct inaccurate data
Delete your data ✓ (within scope)
Restrict or object to processing
Data portability
Withdraw consent

To exercise any of these rights, contact us at the address in Section 12. We will respond within 30 days. We may need to verify your identity before processing the request.

09 Cookies & Tracking

Tradexo uses cookies and similar technologies for the following purposes:

  • Essential cookies: required for authentication and session management — cannot be disabled.
  • Analytics cookies: help us understand aggregate usage patterns. These are opt-in; you may decline them via the cookie banner.

We do not use advertising or cross-site tracking cookies. You can manage cookie preferences in your browser settings at any time. For full details on the cookies we use, their purposes, and retention periods, see our Cookie Policy.

10 Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS/TLS encryption for all data in transit
  • Passwords stored using industry-standard one-way hashing (bcrypt)
  • Access controls limiting staff access to personal data on a need-to-know basis
  • Regular review of infrastructure security configurations

No transmission over the internet is 100% secure. In the event of a data breach affecting your rights, we will notify you and relevant authorities in accordance with applicable law.

11 Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by email or via an in-app notice at least 14 days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

Continued use of the platform after the effective date constitutes acceptance of the revised policy.

12 Contact & Complaints

Data controller

izmotech (Yusuke Ishimoto)
Yamato-Koriyama City, Nara Prefecture, Japan
Email: privacy@trade-xo.com

EEA/UK users
If you believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available at edpb.europa.eu.

Japan
Complaints may also be submitted to the Personal Information Protection Commission (PPC) at ppc.go.jp.