Privacy Policy
Last updated: July 29, 2026
This Privacy Policy explains how Miraiworks LLC (合同会社, a Japanese limited liability company, the operator of CommissionHub, referred to in this Policy as we, us, or the Company) collects, uses, discloses, and protects personal information in connection with the CommissionHub platform (the Platform).
Overview and Scope
CommissionHub is a marketplace where fans commission original 2D illustration and manga artwork from creators based in Japan, including pooled commissions in which multiple fans fund a single request. This Policy applies to everyone who uses the Platform, including fans, creators, and visitors, wherever they are located.
We aim to comply with Japan's Act on the Protection of Personal Information (APPI) and, for users located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR), which is addressed specifically in Section 5 below.
This Policy should be read together with our Terms of Service, Content Moderation Policy, and Prohibited Content Policy, which describe related obligations such as moderation, know-your-customer (KYC) checks, and age verification.
1. Information We Collect
We collect the following categories of information:
- Account information: your name, email address, password and other authentication credentials, and any profile details you choose to provide.
- Payment-related information: we do not store your full card number or other complete payment credentials. That information is collected and processed directly by our payment processor(s). We retain only limited transaction metadata, such as the amount, date, currency, status of a transaction, and your Points balance.
- Access and usage information: your IP address, device and browser type, operating system, pages viewed, referring URLs, and other usage and analytics data, collected automatically including through cookies and similar technologies (see Section 4).
- Age-verification information: where required to access age-restricted content, information submitted through our age-verification service provider, as described in our Content Moderation Policy.
We only ever see limited transaction metadata for payments made on the Platform. Full payment card details are collected and stored solely by our payment processor(s), not by the Company.
2. How We Use Information
We use the information described above for the following purposes:
- To operate and provide the Platform, including creating and managing accounts and facilitating commissions between fans and creators.
- To process payments and Points purchases, and to reconcile transactions with our payment processor(s).
- To prevent fraud and enforce content-safety rules, including the moderation and know-your-customer (KYC) processes described in our Content Moderation Policy.
- To verify age and eligibility to access age-restricted content, as described in our Content Moderation Policy and Prohibited Content Policy.
- To provide customer support and communicate with you about your account, transactions, and Platform updates.
- To comply with applicable laws, regulations, and legal process, including Japanese tax and accounting record-keeping requirements.
- To maintain, secure, improve, and analyze the performance and safety of the Platform.
3. Third-Party Disclosure
We do not sell your personal information to third parties for their own marketing purposes.
We may share personal information with the following categories of recipients:
- Our payment processor(s), to process Points purchases, payouts, and refunds.
- Our age-verification service provider, to confirm eligibility to access age-restricted content.
- Law enforcement, child-safety organizations (such as the National Center for Missing & Exploited Children, NCMEC), courts, or regulators, where required by law or where necessary to investigate, prevent, or take action regarding illegal content, fraud, or violations of our Terms of Service, Content Moderation Policy, or Prohibited Content Policy.
- Professional advisors, such as legal, accounting, and auditing firms, and other service providers who process information on our behalf and are subject to confidentiality obligations.
- A successor entity in connection with a merger, acquisition, reorganization, or sale of assets, subject to the terms of this Policy.
4. Cookies
We and our service providers use cookies and similar technologies, including:
- Functional cookies, which are necessary to keep you logged in, maintain your session, and remember your preferences.
- Analytics cookies, which help us understand how the Platform is used so that we can improve it.
You can control or disable cookies at any time through your browser settings. Please note that some features of the Platform may not function properly if you disable certain cookies.
Visitors from the EU and UK will be shown a cookie-consent banner allowing them to accept or reject non-essential cookies before those cookies are set, as required by applicable law.
5. GDPR — Rights of EU/UK Data Subjects
This section applies to individuals located in the EEA or the United Kingdom, in addition to the rest of this Policy. We rely on the following legal bases to process your personal information:
- Performance of a contract, to provide the Platform and process your commissions and payments.
- Your consent, for example for certain cookies or communications, or where required for age verification.
- Our legitimate interests, such as fraud prevention, content-safety enforcement, and improving the Platform, balanced against your interests and rights.
- Compliance with a legal obligation, such as tax, accounting, anti-fraud, and law-enforcement requirements.
Subject to applicable conditions and exceptions under the GDPR, you have the following rights regarding your personal information:
- Right to access the personal information we hold about you.
- Right to rectification of inaccurate or incomplete information.
- Right to erasure, sometimes called the right to be forgotten.
- Right to restrict processing of your information in certain circumstances.
- Right to data portability, to receive certain information in a structured, commonly used format.
- Right to object to processing based on our legitimate interests.
- Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
If you are located in the EEA or UK and believe we have not adequately addressed your concerns, you also have the right to lodge a complaint with your local data protection supervisory authority.
6. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to satisfy legal, accounting, or reporting obligations. In general:
- Account information is retained while your account is active, and for a reasonable period after closure to resolve disputes, enforce our agreements, and comply with legal obligations.
- Financial and transaction records, including Points purchase and payout records, are retained for seven (7) years from the date of the relevant transaction, consistent with Japanese tax and accounting record-keeping requirements.
- Content-moderation, KYC, and age-verification records are retained for as long as necessary for safety, legal-compliance, and law-enforcement cooperation purposes, as described in our Content Moderation Policy.
7. How to Exercise Your Rights
You may request access to, correction of, or deletion of your personal information, or exercise any of the other rights described in Section 5, by following this process:
- Send your request to contact.miraiworks@gmail.com, describing the information or right concerned.
- We may ask you to verify your identity before we can act on your request, to protect your information from unauthorized access.
- We will respond to your request within a reasonable time, and in any event within thirty (30) days, except where a longer period is permitted or required by applicable law due to the complexity or number of requests.
- In some cases we may not be able to fully honor a request, for example where retention is required by law or necessary to protect against fraud or illegal content; where that occurs, we will explain the reason.
8. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices or for legal or operational reasons. We will post the revised Policy on this page with an updated date, and where changes are material, we will take reasonable steps to notify you.
9. Contact Us
If you have questions about this Policy or how we handle your personal information, please contact us at:
Miraiworks LLC (合同会社)
Representative: Hideto Kumakura
Address: Futaba Bldg 8B, 1-16-6 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan
Email: contact.miraiworks@gmail.com