Last Updated: November 7, 2026
This is a translation for convenience. The Japanese version is the official version and legally binding.
Professional Reader (hereinafter "the Service") is a web application and a Chrome browser extension operated by the Professional Reader Development Team (hereinafter "we," "us" or "our"), located in Naha-shi, Okinawa, Japan. We are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Service. By using Professional Reader, you agree to the collection and use of information in accordance with this policy.
Your document contents are never stored on our servers. In the web application, PDF files are stored locally in your browser's IndexedDB storage, and only metadata such as filename, file size, and page count is stored on our servers. In the Chrome Extension, PDFs are rendered directly from their source URL, and no metadata is stored on our servers.
When you upload a PDF in the web application, we collect and store the following metadata only:
IMPORTANT: The actual PDF file content is stored locally in your browser's IndexedDB. We never store, retain, or access your PDF file contents on our servers.
When you select text in a PDF or on a web page (via the Chrome Extension) for translation or explanation, or when you use the Detail Q&A follow-up chat:
This data is sent to OpenAI API for processing and is not permanently stored by us.
When you use the Professional Reader Chrome Extension:
We use the collected information for the following purposes:
We implement the following security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information using commercially reasonable means, we cannot guarantee absolute security.
We use cookies and similar tracking technologies for the following purposes:
Purpose: Authentication, session management
Provider: Supabase Auth
Can Disable: No
Required for basic Service functionality
Purpose: Storing language preferences and UI preferences
Provider: Local Storage / Chrome Storage
Can Disable: No
Remembers your settings
Purpose: Anonymous usage tracking, linking anonymous activity to account upon registration
Provider: Professional Reader
Can Disable: No
A randomly generated UUID stored as an HttpOnly cookie (pr_device_id) with 30-day expiration. Used to track usage for anonymous users and to link anonymous activity to your account when you register.
Purpose: Application performance monitoring, page view tracking
Provider: Vercel Analytics
Can Disable: No
First-party, privacy-friendly analytics that do not use cookies for tracking. Collects page views and performance metrics.
Purpose: Usage analysis, service improvement
Provider: Google Analytics
Can Disable: Yes
You can disable these cookies in your browser settings
Most browsers are set to accept cookies by default, but you can change your browser settings to refuse cookies or notify you when cookies are sent.
However, disabling cookies may prevent some features of the Service from functioning properly (such as maintaining login status).
We do not share your personal information with third parties except in the following cases:
To support the operation of the Service, we use the following third-party services:
Purpose: Authentication, database, file metadata storage
Data Shared: Email address, password hash, PDF metadata, token usage, subscription information, language preference, two-factor authentication settings
Purpose: Payment processing, subscription management
Data Shared: Billing information, credit card information (processed directly by Stripe)
Purpose: AI translation and explanation generation, web search (when enabled)
Data Shared: Selected text, context, Detail Q&A messages
OpenAI's data usage policy: Data sent via API is not used for model training
Purpose: Hosting, CDN, application analytics
Data Shared: Access logs (IP address, request information), page views, performance metrics
Purpose: Transactional email delivery (verification, password reset, security alerts)
Data Shared: Email address, email content (OTP codes, verification links)
Used solely for sending transactional emails. Resend does not use your data for marketing purposes.
Purpose: Usage analysis
Data Shared: Anonymized usage data
These providers are contractually obligated to protect personal information and are not permitted to use your data for purposes other than providing the Service.
We may disclose your information in the following cases:
In the event of a business transfer such as a merger, acquisition, or asset sale, your personal information may become part of the transferred assets. In such cases, we will notify you in advance and provide you with choices before a new privacy policy takes effect.
Your personal information is primarily stored on servers in the United States (Supabase, Stripe, Vercel).
In the web application, PDF file contents are stored only on your device (browser's IndexedDB) and are never transferred to our servers or third-party servers.
By storing data on servers outside Japan (primarily in the United States), your personal information is transferred internationally. These countries may not have data protection laws equivalent to Japan's, but all service providers we use implement industry-standard security measures.
The Service uses the following third-party services. These services have their own privacy policies that detail how they handle your data:
We are not responsible for the privacy practices of these third-party services. We recommend reviewing their privacy policies.
We retain your personal information for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required to comply with legal obligations.
| Data Type | Retention Period |
|---|---|
| Account Information | Deleted immediately after account deletion (login sessions are invalidated), except for email address hash and subscription history boolean (see Section 10). |
| PDF Metadata | Deleted immediately after account deletion. |
| PDF File Contents | Stored in your browser. We do not retain this information. |
| Billing Information | Retained for 7 years from the last transaction for tax reporting (based on Japanese tax law). |
| Usage Logs | Retention period is reviewed periodically. |
| Anonymous Usage Data | Retained indefinitely on our servers. In the web application, it is linked to your account upon registration, and the device identifier expires after 30 days (a new identifier is generated on subsequent visits). In the Chrome Extension, the device identifier is kept until the extension is removed. The hashed network address used for the request limit is removed by a periodic cleanup after its 24-hour counting window ends. |
| OTP Codes | Expire after 10 minutes. Marked as used after verification. |
| API Performance Logs | Retained indefinitely for monitoring purposes. |
| Device Identification Cookie | 30-day expiration. Refreshed on each visit. |
You can delete your account at any time from your account settings. Upon deletion, your personal information (except billing information, email address hash, and subscription history boolean) will be permanently removed from our systems. See Section 10 for details.
To prevent abuse, we implement the following measures:
When you delete your account, the following information is retained:
The information above, retained to prevent abuse, does not include billing information, payment history, contract details, etc. (the retention period for billing information is set out in Section 9).
Since the hash cannot be used to identify you and cannot identify you even when combined with other information, it does not constitute 'personal data' under GDPR Article 4(1) after account deletion. Therefore, GDPR rights (such as the right to erasure) do not apply to this hash.
If you have concerns about these measures, please contact us at contact@professional-reader.app.
You have the following rights regarding your personal information:
The right to access and obtain a copy of your personal information held by us
The right to request correction of inaccurate or incomplete personal information
The right to request deletion of your personal information (under certain conditions)
When you delete your account, your personal information is permanently removed from our systems. However, billing information is retained for 7 years from the last transaction for tax reporting. To prevent abuse, we also retain the email address hash and the salt used to generate it, whether you had a subscription, the deletion timestamp, and an internal record of which user initiated the deletion (user ID). See Sections 9 and 10 for details.
The right to request restriction of processing of your personal information
The right to receive your personal information in a structured, commonly used, and machine-readable format
The right to object to our processing of your personal information
The right to withdraw consent at any time for processing based on your consent (without affecting the lawfulness of processing before withdrawal)
To exercise these rights, please contact us at contact@professional-reader.app. We may request additional information to verify your identity.
We will typically respond within 30 days of your request.
The Service is not intended for individuals under 16 years of age. We do not intentionally collect personal information from anyone under 16. However, individuals under 16 may use the Service with parental consent. Parental consent is required for subscription registration. If we become aware that personal information has been provided by someone under 16 without parental consent, we will take steps to promptly delete that information. If you believe that someone under 16 has provided personal information to us, please contact us at contact@professional-reader.app.
We may update this Privacy Policy from time to time. When changes are made, we will post the new Privacy Policy on this page and update the "Last Updated" date.
For significant changes, we will provide advance notice through the Service or via email to your registered email address before the changes take effect.
Your continued use of the Service after changes constitute your acceptance of the revised Privacy Policy. We recommend checking this page periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:
Professional Reader Development Team
Representative: Sekito Shinjo / 新城世紀斗
Address: Naha-shi, Okinawa
Detailed address will be disclosed promptly upon request.
Email: contact@professional-reader.app
Will be disclosed promptly upon request.
Business Hours: Weekdays 9:00-18:00 (excluding weekends and holidays)
We will typically respond to inquiries within 5 business days.