Privacy Policy
Last Updated: April 15, 2026
1. Introduction
GemmWork (gemmwork.io) is operated by KozaWings Inc., a company registered in Okinawa, Japan. This Privacy Policy explains how we collect, use, store, and protect your information when you use the GemmWork website and related services (the “Service”).
By using the Service, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
| Data | When Collected | Purpose |
|---|---|---|
| Email address | When you request a Report | Report delivery, follow-up emails |
| Company/hiring inputs | During GEMM Navigator session | Generate personalized Report |
| Country, role type, seniority | During GEMM Navigator or Calculator use | Cost estimation and mode classification |
2.2 Information Collected Automatically
| Data | Technology | Purpose |
|---|---|---|
| Page views, session duration | Google Analytics 4 | Usage analytics, content improvement |
| Affiliate link clicks | Server-side logging | Commission attribution, conversion tracking |
| Device type, browser, OS | Google Analytics 4 | Technical optimization |
| IP address (anonymized) | Google Analytics 4 (IP anonymization enabled) | Approximate geographic analytics |
2.3 Cookies and Tracking Technologies
| Cookie / Technology | Provider | Duration | Purpose |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | 2 years | Distinguish users for analytics |
| Affiliate cookies | Deel, Remote.com, Toptal | 30–90 days | Attribute referrals for commission |
| Session token | GemmWork (first-party) | Session | Maintain Navigator session state |
3. How We Use Your Information
We use collected information to:
- Generate and deliver your Employment Intelligence Report
- Send follow-up emails related to your results (with one-click unsubscribe)
- Operate and improve the Service
- Analyze usage patterns to improve content and tools
- Track affiliate referrals for commission attribution
- Comply with legal obligations
We do not sell your personal information to third parties.
4. Affiliate Tracking — How It Works
When you click an affiliate link on GemmWork, the following occurs:
- GemmWork records the click event (partner name, timestamp, your session token) in our database
- You are redirected to the affiliate partner's website
- The partner may set their own cookies (typically 30–90 day duration) to track whether you subsequently sign up
- If you sign up, GemmWork may receive a referral commission from the partner
GemmWork does not receive any information about your activity on the partner's website beyond whether a commission was earned. We do not have access to any account information you create with affiliate partners.
5. Data Storage and Security
Your data is stored on infrastructure provided by Supabase (database) and Vercel (hosting), both of which maintain industry-standard security certifications. Session data and report content are stored in a PostgreSQL database hosted in the United States.
We implement reasonable technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.
6. Data Sharing
We share your information only in these circumstances:
- Service providers: Supabase (database), Vercel (hosting), Resend (email delivery), Google Analytics (analytics) — each processes data only as needed to provide their service
- Affiliate partners: Only the click event and redirect — we do not share your email, inputs, or report data with affiliate partners
- Legal requirements: If required by law, regulation, or valid legal process
- Business transfer: In connection with a merger, acquisition, or sale of assets, with appropriate data protection provisions
7. Data Retention
Session data and reports are retained indefinitely to allow you to re-access your Report via its unique URL. Email addresses are retained until you unsubscribe, at which point we mark the record as unsubscribed but retain a hashed version to honor the opt-out. Analytics data is retained according to Google Analytics' standard retention policies (default: 14 months).
8. International Data Transfers
GemmWork is operated from Japan. Your data may be processed in the United States (where our infrastructure providers are located) and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you
Correction
Request correction of inaccurate personal data
Deletion
Request deletion of your personal data (subject to legal retention requirements)
Opt-Out
Unsubscribe from marketing emails at any time via the link in each email
Data Portability
Request your data in a structured, machine-readable format
Objection
Object to certain processing activities, including direct marketing
To exercise any of these rights, please reach out via our contact form. We will respond within 30 days.
10. Children's Privacy
The Service is not directed at individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. GDPR and APPI Compliance
For users in the European Economic Area (EEA), our legal basis for processing personal data is legitimate interest (providing and improving the Service) and consent (email communications). For users in Japan, we comply with the Act on the Protection of Personal Information (APPI).
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last Updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
13. Contact
For privacy-related inquiries, please reach out via our contact form.
KozaWings Inc.
Okinawa, Japan