Additional privacy terms if you are located in Japan

We make every effort to keep personal information accurate and up to date, within the scope necessary for achieving the purpose of use, and to promptly delete personal information if it is no longer required, as required by law.

We take necessary and appropriate measures for managing the security of personal information including measures to help prevent leak, loss or damage of personal information. These include:

• Information Security Program. We maintain a program that provides for the protection of data confidentiality, integrity, availability, possession, utility, and authenticity, including processes and procedures to respond to security incidents. This program complies with all applicable state, federal, and/or regulatory data protection requirements.
• Data Encryption. We encrypt personal information using valid encryption processes.
• Malware and Virus Detection and Prevention. We use and maintain commercially reasonable malware and virus detection and prevention mechanisms to protect personal information in our systems.
• Application Security Testing. We regularly perform commercially reasonable tests for security vulnerabilities of applications developed or used by us that process personal information.
• Intrusion Detection. We monitor for unauthorized access attempts to our systems and services using commercially reasonable tools and practices.
• Security Logs and Audit Trail. We log information for our systems, including firewalls, routers, network switches, and operating systems, to our respective system log facility and/or a centralized log server (for network systems). We monitor logs to identify unauthorized activity to facilitate incident response.
• Change Management. We maintain a change management program that ensures all system, application, and service changes have been appropriately reviewed, tested, and approved prior to deployment into our production environment.
• Network Protection. We restrict and control access between our network and other networks, including the Internet, using firewalls and other commercially reasonable control mechanisms.
• Incident Management. We maintain security incident management policies and procedures, including detailed security incident escalation procedures. We promptly investigate and notify users and Visitors of our Websites in the event we become aware of an actual or reasonably suspected unauthorized leakage or disclosure of personal information.
• Physical Security. We provide physical security to production data using commercially reasonable controls and restricting access to only authorized personnel that have a verifiable need to access the security areas.
• Business Continuity Management. We maintain a business continuity plan and perform tests of the business continuity plan at least annually. If we experience a material business continuity disruption event that impacts or may impact services, we provide regular updates, at an appropriate frequency, including a summary description of the event, the impact, and an estimate when services will return to normal operations.
• Disaster Recovery. We maintain disaster recovery plans and perform disaster recovery testing at least annually.
• Reliability and Backup. We provide appropriate levels of system and data reliability and backup to meet applicable legal obligations.