Privacy Policy
Effective date: 2026-06-18
Operator: Polytope KK (a Japanese kabushiki kaisha) (“DASHIBANK”, “we”, “us”)
Contact: hello@dashibank.jp
DASHIBANK is a concierge service that arranges restaurant reservations on your behalf. This policy explains what personal information we collect, why, and your choices. We aim to collect the minimum needed to book your reservation and run the service responsibly.
1. Information we collect
—
Account information — your name, email address, and phone number; login credentials; and account settings.
—
Reservation details — the information needed to make a booking on your behalf: restaurant, date, time, party size, the name the booking is held under, a callback number, and any preferences or notes you provide (e.g. dietary or seating requests).
—
Payment information — processed by our third-party payment processor. We do not store full card numbers; we retain limited billing records (e.g. transaction amounts, status, and a processor reference) to operate your account.
—
Card-on-file for restaurant holds (optional) — some restaurants require a credit card (not debit) to hold a seat. If you opt in, we may read your card to the restaurant when they require it on a booking call you requested. We do not store full card numbers in our database.
—
Call records we keep — outcome, duration, and scrubbed transcripts or recordings for operations and quality. When a card number is spoken on a call, our telephony provider removes card numbers from stored transcripts and recordings after the call. We do not archive full card numbers or show them in your account history.
—
Records of bookings we make for you — to deliver the service and confirm outcomes, we keep records of the reservation requests we place on your behalf, including the outcome (e.g. confirmed, declined) and operational records of those interactions.
—
Usage and device information — basic, privacy-respecting analytics about how the service is used (e.g. pages viewed, conversion events). Our analytics are designed to avoid cookies and to keep personal identifiers out of analytics events.
We do not sell your personal information.
2. How we use your information
—
To provide the service — to place and manage reservation requests on your behalf and to confirm outcomes to you.
—
To operate your account and billing — funding, charges, receipts, and support.
—
To communicate with you — confirmations, service notices, and responses to inquiries, in line with your notification preferences.
—
To maintain quality, safety, and security — to improve reliability, prevent abuse and fraud, resolve disputes, and keep records of transactions.
—
To comply with law — to meet legal, regulatory, tax, and record-keeping obligations and to respond to lawful requests.
We use automated systems and trusted third-party service providers to deliver the service. We do not disclose the specific technologies, providers, or methods we use.
3. Calls made on your behalf
When you request a reservation, we contact the restaurant on your behalf and identify the service as an automated assistant calling for a real customer. We keep operational records of these interactions to deliver and confirm your booking, support you, and resolve disputes. If a credit card number is relayed on a call you authorized, the stored transcript and recording we retain are scrubbed — full card numbers are not kept in our archives or shown in your account. We treat any information about restaurant staff captured in these interactions as confidential and do not share it with you or other third parties; we share with you the outcome of your reservation request.
4. How we share information
We share personal information only as needed to run the service:
—
Restaurants — the reservation details necessary to make your booking (e.g. the name, time, and party size).
—
Service providers — vetted vendors who process information on our behalf under contract (e.g. payment, communications, hosting, and infrastructure), limited to what they need and bound to protect it.
—
Legal and safety — where required by law, regulation, or legal process, or to protect the rights, safety, and property of you, us, or others.
—
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
5. Retention
We keep personal information only as long as needed for the purposes above, including to provide the service, meet legal and accounting obligations, and resolve disputes, after which we delete or anonymize it. Operational call records are retained for a limited period and accessible only to authorized personnel.
6. Security
We use administrative, technical, and organizational measures appropriate to the sensitivity of the information, including access controls and restricted, logged access to operational records. No method of transmission or storage is perfectly secure.
7. Your rights and choices
Subject to applicable law, you may access, correct, update, or delete your personal information, object to or restrict certain processing, withdraw consent, or obtain a copy of your data, and you may update your notification preferences in your account. To exercise any right, contact us at the address above; we will verify and respond within the time your law requires. We will not discriminate against you for exercising a right.
Because we operate in Japan and serve customers who may be in Japan, the United States, the EEA or the UK, or elsewhere, the specific rights that apply depend on where you are:
7.1 Japan — Act on the Protection of Personal Information (APPI)
We handle personal information in accordance with the APPI: we use it only within the purposes of use stated in this policy, take measures to keep it secure, and restrict third-party provision as the law requires. You may request disclosure, correction, addition, deletion, suspension of use, or suspension of third-party provision of your retained personal data.
7.2 United States — California and other state privacy laws
If you are a U.S. resident, you may have rights under your state’s privacy law (e.g. the California Consumer Privacy Act as amended by the CPRA, and comparable laws in other states), which can include the right to know/access, delete, correct, and opt out of the “sale” or “sharing” of personal information, and the right to non-discrimination. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Sections 1–2 above serve as our notice of the categories of information we collect and the purposes for which we use it. You, or an authorized agent, may exercise these rights by contacting us at the address above.
7.3 European Economic Area & United Kingdom (GDPR / UK GDPR)
If you are in the EEA or the UK, we process your personal data on these legal bases: performance of our contract with you (to provide the reservation service), our legitimate interests (operating, securing, and improving the service and preventing fraud), your consent where we request it, and compliance with legal obligations.
You have the right to access, rectify, erase, restrict, and port your data, to object to processing based on legitimate interests, and to withdraw consent at any time (without affecting processing already carried out). You may also lodge a complaint with your local data-protection supervisory authority.
The data controller is Polytope KK. For transfers of personal data from the EEA or the UK to Japan, we rely on the adequacy recognition granted to Japan (the European Commission’s adequacy decision and the UK’s equivalent); for any other international transfer we use appropriate safeguards such as Standard Contractual Clauses.
8. International users and transfers
The service arranges reservations in Japan and may be used by customers located outside Japan. Where information is transferred across borders, we take steps consistent with applicable law to protect it; transfers from the EEA or the UK are addressed in §7.3.
9. Children
The service is intended for adults and is not directed to children. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new effective date and, where required, notify you.
11. Contact
Questions or requests: hello@dashibank.jp. Operator: Polytope KK (a Japanese kabushiki kaisha), 5-34-17 Room 405, Setagaya-ku, Tokyo, Japan.
FEEDBACK + INFORMATION FOR OPERATORS · 事業者の方へ — report a no-show / correct a listing →
CONTACT · お問い合わせ — hello@dashibank.jp
DASHIBANK · dashibank.jp