Privacy Policy

Last Updated: January 10, 2026

S3 Manager (hereinafter referred to as "Service") establishes and discloses this Privacy Policy in accordance with the Personal Information Protection Act to protect user privacy and promptly handle related grievances.

Article 1 (Collection of Personal Information)

1. Personal Information Collected

2. Collection Methods

• User input during registration and service use
• Automatic collection during service use

Article 2 (Purpose of Processing Personal Information)

The Service processes personal information for the following purposes:

1. Member Management: Membership registration verification, member identification
2. Service Provision: AWS S3 integration services, personalized service delivery
3. Service Improvement: New service development, service quality enhancement
4. Secure Environment: Account security, prevention of unauthorized use

Article 3 (Retention and Use Period)

1. Personal information is destroyed without delay once collection and use purposes are achieved.
2. However, information required by law is retained for the legally specified period:
   • Login records: 3 months (Telecommunications Business Act)
   • Service usage records: 3 months (Telecommunications Business Act)

Article 4 (Third-Party Provision)

The Service does not provide user personal information to third parties in principle. However, exceptions apply in the following cases:

• When users have given prior consent
• When required by law or requested by investigative agencies according to legal procedures

Article 5 (Destruction of Personal Information)

1. The Service destroys personal information without delay when retention periods expire or purposes are achieved.
2. Destruction methods:
   • Electronic files: Deleted using technical methods that prevent recovery
   • Paper documents: Shredded or incinerated

Article 6 (Security Measures)

The Service implements the following security measures in accordance with the Personal Information Protection Act:

1. Encryption: Passwords are hashed using bcrypt. AWS credentials are stored locally using iOS Keychain with hardware-level encryption.
2. Access Control: Access rights management for personal information access, modification, and deletion.
3. Secure Protocols: All communications encrypted via HTTPS/TLS.
4. JWT Authentication: Secure token-based authentication with access and refresh tokens.
5. Local Credential Storage: AWS credentials are stored only on the user's device using Keychain, not on our servers.

Article 7 (User Rights)

Users may exercise the following rights:

1. Access: View personal information processing status.
2. Correction: Request correction of incorrect personal information.
3. Deletion: Request deletion of personal information.
4. Suspension: Request suspension of personal information processing.

Rights may be exercised through the app settings or by contacting contact@tokyoaj.com.

Article 8 (AWS Credentials Handling)

1. AWS credentials (Access Key ID, Secret Access Key) are stored locally on the user's device using iOS Keychain.
2. Credentials are encrypted in transit when communicating with AWS services.
3. AWS credentials are NOT stored on our servers - they remain solely on the user's device.
4. Users may modify or delete stored AWS credentials at any time through the app settings.
5. Upon account deletion, all locally stored credentials are immediately destroyed.

Article 9 (Privacy Officer)

The Service designates the following Privacy Officer for personal information processing matters:

• Privacy Officer: TokyoAJ
• Contact: contact@tokyoaj.com

Article 10 (Changes to Privacy Policy)

This Privacy Policy is effective from the enforcement date. Any additions, deletions, or corrections to legal or policy requirements will be announced through notices at least 7 days before implementation.

Supplementary Provisions

This Privacy Policy is effective from January 10, 2026.