Back to HomeLast updated: September 2026
Data Protection & APPI / GDPR Compliance

Privacy Policy

At Torii, we understand that immigration documents contain some of your most sensitive personal information — including passport details, residence history, family relationships, tax documents, and employment contracts. This Privacy Policy details how we collect, handle, store, and safeguard your data, and how you retain total control over your documents at all times.

Your private immigration documents and case responses are never used to train public machine learning models. Uploaded files are strictly encrypted at rest and in transit.

1. Information We Collect

We only collect information necessary to assess your Japanese immigration eligibility, complete official statutory forms, assemble customized required document checklists, and generate personal statements.

A. Personal Identification & Immigration History

  • Full legal name, nationality, date of birth, sex, and marital status.
  • Passport number, issue date, expiration date, and issuing authority.
  • Residence Card (在留カード) number, current Status of Residence, expiration date, and designated activities.
  • Historical entries into Japan, previous visa applications, and Certificate of Eligibility (CoE) numbers.

B. Employment, Educational & Sponsor Information

  • Japanese employer details: corporate number (法人番号), company name, capital, annual withholding tax category (Category 1 to 4).
  • Job title, job duties, proposed annual compensation, and employment contract details.
  • Educational background: degrees, graduation dates, institutions, and Japanese language test scores (e.g., JLPT).

C. Financial & Statutory Evidentiary Records

  • Municipal tax certificates (住民税の課税証明書・納税証明書) and withholding slips (源泉徴収票).
  • Bank statements or balance certificates required to prove financial solvency for student, dependent, or designated activities visas.

D. Technical & Usage Data

  • Account email address, login timestamps, IP address, device type, browser information, and session tokens.

2. How We Use Your Information

We use your information strictly to provide and maintain the Torii software platform. Specifically, your data is processed for:

• Form Population: Accurately mapping your questionnaire answers into official statutory Ministry of Justice (法務省) and Immigration Services Agency (出入国在留管理庁) PDF and Excel templates.

• Statutory Checklist Generation: Matching your specific visa category, category tier, and applicant status against published immigration requirements to construct an itemized checklist.

• Inconsistency Detection: Flagging discrepancies (e.g., salary mismatches, date gaps, or missing statutory proofs) before you file.

• Case Resumption: Saving your questionnaire progress across sessions so you can pause and resume filing at any stage.

• Optional Professional Escalation: If you explicitly request professional escalation to a licensed administrative scrivener (行政書士) or immigration lawyer, we share case documents only with your affirmative consent.

Zero Model Training on Customer Files

Torii does NOT use your uploaded identification documents, tax records, or case answers to train public artificial intelligence models. Any automated extraction or assisted drafting processes operate under strict zero-retention enterprise terms.

3. Security & Storage Architecture

We adhere to strict data protection principles designed for high-security legal and compliance workloads:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using modern TLS 1.3 protocols.

• Encryption at Rest: User documents and database records are encrypted using industry-standard AES-256 encryption.

• Strict Access Controls: Torii employees have zero access to your uploaded documents and private case responses, except where you explicitly authorize customer support intervention to troubleshoot a technical issue.

• Data Residency & Redundancy: Primary data storage is maintained in enterprise-grade ISO 27001 and SOC 2 Type II certified cloud data centers.

4. Third-Party Service Providers

Torii does not sell, rent, or trade your personal information to advertisers or brokers. We only share information with reputable infrastructure partners under strict data processing agreements:

• Cloud & Database Hosting: Secure hosting providers that manage encrypted infrastructure.

• Payment Processing: Stripe handles payment and credit purchases. Torii never receives or stores your full credit card number or CVV.

• Transactional Email: Providers used solely to send account verifications, password resets, and case status notifications.

• Legal Compliance: We may disclose data only if required by a valid, legally binding order issued by a court of competent jurisdiction under Japanese law.

5. Your Rights and Data Ownership

Under Japan's Act on the Protection of Personal Information (APPI / 個人情報保護法) and global privacy standards (such as GDPR), you retain full rights over your data:

• Right to Access & Export: You can download your generated forms, checklist data, and personal dossier at any time through your dashboard.

• Right to Rectification: You can edit and correct your answers at any point prior to final export.

• Right to Erasure (Deletion): You can delete individual cases or permanently close your account. When you delete a case or account, all uploaded documents, drafted statements, and personal answers are irreversibly purged from our active databases.

6. Contact Us

If you have questions about this Privacy Policy, your personal data, or wish to exercise your data rights, please contact our Data Protection Team at privacy@torii.jp.