Etymon Privacy Policy

Effective Date: 1st June, 2026
Last Updated: 1st June, 2026

Glyph Inc. ("Company," "we," "us," or "our") establishes this Privacy Policy ("Policy") to explain how we collect, use, store, share, and protect user information in connection with "Etymon" and related websites, applications, APIs, verification pages, and other related services collectively referred to as the "Service."

Etymon is a service designed to help users create verifiable records for digital files and other digital content, including records relating to existence at a specific point in time, registration history, integrity, and related verification data. The Service does not guarantee the truthfulness, legality, copyright ownership, or other rights status of any registered content.

This Policy explains the types of information we collect, the purposes for which we use such information, how we share information, the rights and choices available to users, and the security measures we take.


1. Information We Collect

We may collect the following types of information in connection with the Service.

1.1 Information You Provide to Us

We may collect information that you provide when you create an account, log in, contact us, subscribe to a plan, change settings, request support, or otherwise use the Service.

This may include:

1.2 Information Automatically Collected Through Use of the Service

When you use the Service, we may automatically collect certain information, including:

We use this information to provide the Service, ensure security, prevent misuse, respond to errors and incidents, improve the Service, and analyze usage.

In connection with files and other digital content registered by users, the Service may collect, generate, and store information including:

We do not store registered files themselves on a public blockchain. However, hash values, ledger records, anchor information, and other data required for verification may be recorded in a tamper-resistant manner.

1.4 Payment and Subscription Information

If we provide paid plans, subscriptions, or other paid features, we may collect or process information including:

We may use Stripe or other payment processors to process payments. As a general rule, detailed payment method information such as credit card numbers is collected and managed directly by the payment processor, and we do not directly store such information. However, we may receive and store information necessary to provide the Service, such as payment status, billing history, and plan information.

1.5 Information Obtained Through Third-Party Service Integrations

If you log in using an external service account or connect the Service with a third-party service, we may receive information provided by that external service.

This may include:

We use this information to provide login functionality, verify identity, manage accounts, provide integration features, and ensure security.


2. Purposes of Use

We use collected information for the following purposes:

  1. To provide, operate, maintain, and improve the Service
  2. To register accounts, verify identity, authenticate logins, and manage accounts
  3. To create and provide verification records, ledger records, receipts, certificates, and verification pages for registered files
  4. To enable third parties to verify registered files or verification records
  5. To reflect user settings such as Public Mode, Private Mode, sharing links, and visibility settings
  6. To provide support, respond to inquiries, verify identity, and send important notices
  7. To detect, prevent, investigate, and respond to violations of terms, unauthorized access, fraudulent registrations, impersonation, spam, and security threats
  8. To respond to system failures, errors, crashes, and security incidents
  9. To process payments, manage billing, administer subscriptions, calculate fees, and confirm payment status
  10. To analyze usage of the Service and improve functionality, quality, and user experience
  11. To send notices regarding new features, updates, important changes, campaigns, and other information related to the Service
  12. To comply with laws, regulations, court orders, administrative requests, and requests from public authorities
  13. To respond to disputes, infringement claims, legal claims, unlawful acts, and misuse
  14. To protect the rights, property, and safety of the Company, users, third parties, and the public
  15. For purposes incidental or related to the above

3. Handling of Registered Files, Hash Values, Ledger Records, and Blockchain Anchors

Etymon is designed to create records that can later be verified in relation to files and other digital content registered by users.

The Service may create hash values, registration timestamps, signature information, ledger records, receipts, certificates, anchor information, and other verification data related to registered files.

We do not store registered files themselves on a public blockchain. However, to enhance tamper-resistance and verifiability, part of the ledger records managed by us, or summaries of such records, Merkle roots, hash values, anchor information, or similar data may be recorded on public blockchains or other external ledgers.

Some of this information may, by its nature, be impossible to modify or delete later. In particular, transactions, anchor information, hash values, or other data recorded on a public blockchain cannot be modified or deleted by us alone.

However, with respect to account information, display information, registered files, sharing links, and other information stored on servers managed by us, we may delete, make private, disable, or otherwise process such information within the limits of applicable laws, contracts, and technical or operational constraints.


4. Public Mode and Private Mode

The Service may provide Public Mode, Private Mode, and other settings for registered files or verification records.

4.1 Public Mode

In Public Mode, registered files, displayed content of registered files, verification records, verification pages, metadata, and other related information may become viewable by third parties.

If you select Public Mode, such information may be displayed or provided to third parties through sharing links, verification pages, search functionality, external sharing, or other Service features.

Once information has been made public or shared with third parties, we may not be able to fully retrieve, delete, hide, or stop the use of such information.

4.2 Private Mode

In Private Mode, the contents of registered files are generally not made public to third parties.

If we store registered files in encrypted form in Private Mode, the design of the Service may be such that we do not hold the user's decryption key. In that case, we cannot decrypt or view the contents of the registered files.

However, even in Private Mode, hash values, registration timestamps, object IDs, ledger records, signature information, public key information, verification metadata, anchor information, and other related information may be stored or recorded for the purpose of providing the Service, managing records, and ensuring verifiability.

If you provide sharing links, decryption keys, verification information, registered files, or other information to third parties, those third parties may be able to view, store, copy, or re-share the registered files or related information. We cannot fully control the use, storage, disclosure, or re-sharing of information you provide to third parties.


5. Sharing and Disclosure of Information

We may share or disclose user information in the following cases.

We may share information with third parties designated by the user based on the user's consent.

5.2 As Necessary to Provide the Service

We may provide information to contractors, cloud service providers, payment processors, authentication service providers, analytics service providers, support vendors, and other external service providers to the extent necessary for providing, operating, maintaining, improving, securing, analyzing, and supporting the Service.

We require such service providers to manage information appropriately through contracts or other appropriate means.

5.3 For Payment Processing

We may provide necessary information to Stripe or other payment processors for payment processing, billing management, fraud prevention, refunds, accounting, and related purposes.

5.4 For Verification and Sharing Features

If you use verification pages, certificates, receipts, sharing links, or other sharing or verification features, we may display or provide registered files, verification records, metadata, hash values, registration timestamps, public key information, verification results, and other related information to third parties to the extent necessary to provide such features.

5.5 As Required by Law

We may disclose user information when necessary to comply with laws, regulations, court orders, administrative requests, lawful inquiries from investigative authorities, or other legal obligations.

5.6 To Protect Rights, Safety, and Property

We may disclose user information if we determine that disclosure is necessary to protect the rights, property, or safety of the Company, users, third parties, or the public. This includes responding to misuse, security incidents, fraud, rights infringement, and unlawful acts.

5.7 In Connection with Business Transfers

If we are involved in a merger, company split, business transfer, share transfer, financing, reorganization, bankruptcy, or similar transaction, user information may be transferred to relevant parties or successors for the purpose of considering, executing, or completing such transaction.


6. If We Provide Business or Organization Features

If we provide features for companies, organizations, research institutions, media organizations, enterprises, or other entities in the future, organization administrators may be able to view or manage information relating to users belonging to that organization, including account information, usage status, registration history, access permissions, sharing settings, verification records, and other information.

Such features may include:

In such cases, information of users belonging to an organization will be handled in accordance with the contract with the relevant organization, administrator settings, terms of use, individual agreements, and other applicable conditions.


7. External Transmission of User Information

We may use cookies, SDKs, tags, scripts, and similar technologies for the purpose of providing and improving the Service, ensuring security, processing payments, analyzing usage, providing user support, and other related purposes. As a result, information stored on the user's device or information transmitted from the user's device may be sent to servers operated by us or external service providers.

Information that may be externally transmitted includes:

The external services used by us, the information transmitted, the purposes of use, and the purposes of use by recipients are set forth in the Appendix.

At present, we use Stripe for payment processing. Information necessary for payment processing, billing management, fraud prevention, refunds, confirmation of payment status, and other payment-related operations may be transmitted or provided to Stripe.

For other external services, we will update the Appendix or this Policy when their introduction is confirmed.


8. Use for AI and Machine Learning

We do not use the contents of files registered by users with the Service for training generative AI models or other machine learning models without the user's consent.

We may analyze statistical information, log information, metadata, and usage data that do not include the contents of registered files for the purpose of improving the Service, ensuring security, preventing misuse, responding to errors, and analyzing usage.

However, if we obtain the user's explicit consent, or if permitted by applicable law, we may use information in accordance with separately specified conditions.


9. User Rights and Choices

Users may, in accordance with applicable laws, request disclosure, correction, addition, deletion, suspension of use, erasure, suspension of third-party provision, or other handling of their personal information held by us.

Users may be able to change registration information, visibility settings, sharing links, notification settings, and other settings through account settings or other methods designated by us.

However, the following types of information may be subject to restrictions on modification, deletion, suspension of use, or non-disclosure due to their nature:

When we receive a request from a user, we will verify the identity of the requester and respond within a reasonable period in accordance with applicable laws.


10. Retention and Deletion of Information

We retain collected information for as long as necessary for the provision of the Service, performance of contracts, legal compliance, accounting, security, prevention of misuse, dispute resolution, audit purposes, and other legitimate purposes.

Even after an account is deleted or use of the Service ends, we may retain the following information to the extent necessary:

When information is no longer necessary, we will delete, anonymize, disable, or otherwise appropriately process such information by reasonable means.


11. Security

We take reasonable and appropriate security measures to prevent leakage, loss, damage, unauthorized access, misuse, alteration, and loss of user information.

Such measures may include:

However, no method of transmission over the Internet or electronic storage is completely secure. Users are responsible for appropriately managing their passwords, authentication information, private keys, decryption keys, sharing links, and other sensitive information.

In particular, if users manage their own decryption keys in Private Mode, we may not be able to recover lost decryption keys. If a user loses a decryption key, the contents of the registered file may become impossible to decrypt or view.


12. Use by Minors

The Service is generally intended for users who have reached the age required to validly enter into contracts in their respective jurisdictions.

If a minor uses the Service, the minor must obtain the consent of a parent or other legal representative. If we become aware that a minor is using the Service without the consent of a legal representative, we may suspend the account, delete information, or take other necessary measures.


13. International Transfer of Information

For the purpose of providing the Service, storing data, processing payments, authentication, security, analytics, support, and other related purposes, we may store, process, or transfer information to cloud service providers, payment processors, contractors, or other third parties located outside Japan.

In such cases, we will take necessary and appropriate measures in accordance with applicable laws.


14. Use of Cookies and Similar Technologies

We may use cookies, local storage, session storage, and similar technologies to provide the Service, maintain login sessions, ensure security, analyze usage, improve the Service, and enhance user experience.

Users may refuse or delete cookies through browser settings. However, if cookies are disabled, some features of the Service may not function properly.


15. Third-Party Websites and Services

The Service may include links to, or integration features with, websites, services, or applications operated by third parties.

We are not responsible for the handling of personal information, content, security, terms of use, or privacy policies of third-party websites or services. Users should review the privacy policies and terms of use of such third-party services before using them.


16. Changes to This Policy

We may change this Policy due to changes in laws, changes to the Service, technical changes, operational needs, or other reasons.

If we change this Policy, we will notify or publish the changes and the effective date by posting them on the Service, sending an email, or using other appropriate methods.

Unless otherwise specified by us, the revised Policy will take effect when posted on the Service or on the effective date notified by us.

If users continue to use the Service after the Policy has been changed, they may be deemed to have agreed to the revised Policy.


17. Governing Law and Language

This Policy is governed by and interpreted in accordance with the laws of Japan.

If there is any inconsistency or discrepancy between the Japanese version and any version in another language, the Japanese version shall prevail unless otherwise expressly stated.


18. Contact

For inquiries regarding this Policy, or for requests regarding disclosure, correction, deletion, suspension of use, or other handling of personal information, please contact us at:

Company Name: Glyph Inc.
Address: 313-30 Mugio, Yakushima-cho, Kumage-gun, Kagoshima-ken, Japan 891-4402
Representative: CEO Takashi Fuchigami
Contact: [email protected]


Appendix: External Transmission Services

The Service may use the following external services.

External Service Provider Purpose of Use Information That May Be Transmitted Purpose of Use by Recipient
Stripe Stripe, Inc. and its affiliates Payment processing, billing management, subscription management, fraud prevention, refunds Name, email address, billing information, payment amount, payment date and time, payment status, IP address, device information, and other information necessary for payment processing Payment processing, billing management, fraud prevention, legal compliance, and service provision
TBD To be added separately Provision, improvement, analysis, and security of the Service To be specified separately To be specified separately

We will update this Appendix as necessary when external services are added, changed, or discontinued.