Privacy Policy

This policy explains what Momoca Inc. ("we"), the operator of ReqoData (reqodata.com), collects when you use this website, why and on what legal basis we use it, how long we keep it, and how you can exercise your rights.

Who we are

ReqoData is a service operated by Momoca Inc. (株式会社モモカ), a company in Japan. We decide how the personal data described here is used: we are the "controller" under the EU and UK GDPR and the business handling personal information under Japan's Act on the Protection of Personal Information. If you ask using the form at the bottom of this page, we will tell you our postal address, the name of our representative and our phone number without delay.

1. Information you give us

"Get notified" sign-ups

When you ask to be notified, we store:

• your email address;
• the language of the page, the button you used, and the page you were on;
• any text you had typed into the search box on the home page at that moment;
• the referring page (only its address without query parameters) and any campaign tags in the link (utm_source, utm_medium, utm_campaign).

Sign-ups recorded before we changed this form also contained the IP address, the browser user-agent string, the keyword you clicked on the home page, and sometimes the full referring URL. We no longer collect these, and we automatically erase them from the older records.

List reservations

When you reserve a full list, we store your email address, the list (page and language), the price shown to you, your optional answers about use case and the contact details you need, which button opened the form, the referring page (address only, without query parameters), and the country your request came from. The country is determined by Cloudflare from your connection; we do not store your IP address or user-agent for reservations. Reserving does not charge you anything.

Purchases

Some lists can be bought. Payment is made on Stripe's checkout page: your card details go directly to Stripe, and we never receive or store them. When we confirm a payment with Stripe (when you open the download page or download the file, and in our daily check of the last two days' payments), we store what Stripe returns: the Stripe checkout session ID, the date and time, the list you bought (page and language), the amount and currency, the email address you entered at checkout, and your billing country. We also store when the file was first downloaded.

When you press "Continue to payment", we also record, without any email address, the checkout session ID, the list, the price, which button you used and the country your request came from (determined by Cloudflare). In our daily check with Stripe we add whether that checkout was completed, expired or is still open.

If you use "Find your download page", the email address and the last 4 digits of your card that you enter are sent to Stripe to look up your purchase. We do not store them.

If you report a problem from the download page, or choose "A purchase" in the form at the bottom of this page, we store your email address, your message, the page language and, from the download page, the checkout session ID and the list, so that we can reply.

The address of the download page contains the checkout session ID. Anyone who has this address can download the file, so please keep it private. We do not load analytics tools on the download page.

Clicks on reservation and buy buttons

On list pages we record, without any email address, when a reservation or buy button is clicked and when the reservation or purchase form is first shown: the page, language, price shown, which button, the referring page (address only) and country.

Privacy requests

If you use the form at the bottom of this page for anything other than deletion, we store your email address, the type of request, your message and the page language so that we can reply. For deletion requests, see section 6.

2. Analytics

For visitors outside the European Economic Area (EEA), the United Kingdom and Switzerland, we use Google Tag Manager to load two analytics tools. Both use cookies or similar browser storage.

• Google Analytics 4 records the pages you view, how you arrived, and device, browser and approximate location information.
• Microsoft Clarity records how you interact with pages (clicks, scrolling, mouse movement) to produce session replays and heatmaps. The Google Analytics identifiers for your browser and session are shared with Clarity so the two can be matched. Email and message fields are masked from Clarity recordings.

We do not load these tools for visitors in the EEA, the UK or Switzerland, or when we cannot tell which country a visit comes from. This is decided from the country Cloudflare detects for your connection.

These services process data under their own terms and keep it according to their retention settings. See the Google Privacy Policy and the Microsoft Privacy Statement. You can block these cookies in your browser settings, or install the Google Analytics opt-out add-on.

3. Hosting and security

This website and its database run on Cloudflare. Cloudflare processes your IP address and request data to deliver the site and protect it from attacks, as described in the Cloudflare Privacy Policy. To limit abusive traffic to our forms, we briefly hold the IP address of a request in memory to count requests; it is not written to our database.

4. Why we use it, and our legal basis

• "Get notified" sign-ups: to email you if we start offering full lists. Legal basis: your consent.
• Reservations: to measure how many people want each list at the price shown, and, only if enough people reserve a list and we compile it, to email you a purchase link for that list (buying is optional). If we do not compile it, we will not contact you about it. Legal basis: your consent.
• Purchases and purchase reports: to deliver the list you bought (every download is checked with Stripe), to help you find your download page again, to answer reports and questions about your purchase, and to keep sales records. Legal basis: performing our contract with you, and our legal obligations (accounting).
• Button clicks, checkout records and analytics: to measure interest in lists and prices, how many people who start a checkout complete it, and to improve the site. Legal basis: our legitimate interest in understanding demand. Click and checkout records contain no email or IP address.
• Abuse prevention: to keep our forms working. Legal basis: our legitimate interest.
• Privacy requests: to respond to you. Legal basis: our legal obligations.

We do not use your email address for anything else. You can withdraw your consent at any time by deleting your data with the form below.

5. Sharing and international transfers

We do not sell or rent personal data, and we do not give your email address, reservation, purchase or request details to anyone else. We use these service providers: Cloudflare (hosting, database and security) for all visitors; Stripe (payment processing) when you buy a list, which processes your payment details under the Stripe Privacy Policy and keeps its own records of the payment as required by law; and Google and Microsoft (analytics) only for visitors outside the EEA, the UK and Switzerland. These companies are based in the United States or have group companies there and may process data in the United States and other countries, so your data may be stored or processed outside the country where you live.

6. How long we keep it

• Sign-ups, reservations, button-click records and privacy requests: until you ask us to delete them, and in any case no longer than 24 months after they were recorded. Older records are deleted automatically every day.
• Purchases: the email address is erased 24 months after the purchase, or earlier if you ask us to delete your data. The rest of the sales record (session ID, date, list, amount, currency, billing country and download date) is kept for our accounting records. Your download link keeps working after deletion, because it is checked with Stripe.
• Checkout records (no email or IP address) and reports about a purchase: no longer than 24 months after they were recorded (reports are also deleted when you ask us to delete your data). Older records are deleted automatically every day.
• Deletion requests: we keep only a one-way hash (SHA-256) of the email address and the number of records deleted, for 24 months, so we can show the request was handled. The email address itself is not kept.

7. The lists themselves

The lists we offer are about organizations, and we do not include personal contact details of individuals. A few older pages describe lists of individuals (for example, individual experts). We do not offer those lists, do not show their sample rows, and ask search engines not to index those pages.

8. Your rights

Depending on where you live, you can ask us to:

• tell you what personal data we hold about you and give you a copy (access and portability);
• correct it;
• delete it;
• stop using it, restrict how we use it, or object to our use of it;
• tell you our postal address, the name of our representative and our phone number.

You can delete your data yourself, immediately, with the form below. For the other requests, choose the request type in the form. We will reply to the email address you enter without delay, and in any case within one month. We may ask you to confirm that the email address is yours.

You also have the right to complain to a data protection authority, for example in the country where you live or work. In Japan, this is the Personal Information Protection Commission.

9. How we protect it

Only the operator can access the database. Connections to this site are encrypted (HTTPS). Card details are handled only by Stripe. We keep only the items listed above and delete them automatically when the retention period ends.

10. Changes

If what we collect changes, we will update this page and the date above.