- Amazon Lightsail: the Tokyo VPN server and account/enrollment APIs, including protected operational storage.
- OpenAI Sites: the public website and its hosting infrastructure.
- Stripe: subscription Checkout, payment processing, billing events and the customer billing portal.
- Resend: transactional verification and password-recovery email.
- Namecheap: DNS management and the domain’s email-forwarding service.
- Let’s Encrypt: certificates for public HTTPS endpoints.
- The operator’s email mailbox provider: support, privacy and operational correspondence.
Providers process the data needed for their role and may have their own security logs and retention practices. Website/email/payment processing may take place outside Japan. The privacy policy describes the application’s data categories and request process.