Legal
Privacy Policy
Last updated: 2026-06-09
This English version is provided for reference; the Japanese version prevails.
Last Mile, Inc. ("we", "us") sets out this Privacy Policy (the "Policy") regarding the handling of users' personal information and usage information in Last Mile (the "Service") that we provide.
1. Information we collect
The Service may collect the following information.
- Account information (name, email address, organization name, Google account information)
- When Sign in with Apple (Apple account) is used to sign in to the "Last Mile Picking" mobile app, the name and email address of that account. By Apple's design these are provided only at first sign-in, and when the "Hide My Email" feature is used, a relay email address in the @privaterelay.appleid.com format may be provided.
- Service usage logs (access date/time, IP address, browser information, operation history, request/response content)
- Business data obtained from connected services (Shopify product, inventory, order, and customer data; POS data; warehouse and shipping data, etc., within the scope the user authorizes)
- Information submitted via the contact form (company name, name, email address, inquiry content)
- Payment-related information (information needed for payment processing via Stripe; we do not store credit card numbers themselves)
- Session information such as cookies and tokens
2. Purposes of use
- To provide, maintain, protect, and improve the Service
- To respond to user inquiries
- For billing, charging, and contract management
- To send notices and notifications about the Service
- To prevent and investigate misuse, terms violations, and security incidents
- To create statistical and analytical data (in a form that does not identify individuals)
- For legal compliance and handling disputes
3. Handling of AI / large language model (LLM) use
To provide the AI-agent features, the Service sends some of the text and business data entered by the user to the APIs of AI model providers (such as Anthropic) to perform inference. The scope sent is the minimum necessary for the processing the user requests at that time, and is handled in accordance with the AI model providers' terms of use and data-handling policies. AI output is reference information for decision support; final business decisions are made under the user's own responsibility.
4. Camera use in the mobile app (Last Mile Picking)
In our mobile app for shipping and picking operations, "Last Mile Picking" (App ID: io.lmile.picking), the device camera is used solely to read barcodes / QR codes for matching products and inventory and for picking and shipping work.
- The camera feed is only processed on the spot to read codes; it is not saved to the device as photos or video.
- Captured images or video are not sent or uploaded to our servers or any third party.
- What is obtained from scanning is only business data such as the product identifier (SKU / barcode value) encoded in the barcode / QR code, used to provide the Service (inventory matching, picking, and shipping).
- Using the camera requires permission on the device. Permission can be changed at any time in the device settings; if not granted, only the barcode / QR scanning feature becomes unavailable.
5. Third-party processors (subcontractors)
To provide the Service, we entrust the handling of personal data, to the extent necessary, to the following providers. Each processor handles information in accordance with its contract with us and its own privacy policy.
| Provider | Purpose | Country / region |
|---|---|---|
| Stripe (Stripe, Inc.) | Payment processing (card payments, subscription management, invoicing) | United States |
| Shopify (Shopify Inc.) | E-commerce platform integration (retrieving product, inventory, order, and customer data; issuing discounts) | Canada |
| Google (Google LLC) | Authentication (Google OAuth), operational communications, Google Workspace, etc. | United States |
| Apple (Apple Inc.) | Authentication (Sign in with Apple); used for sign-in to the "Last Mile Picking" mobile app | United States |
| Anthropic (Anthropic, PBC) | AI-agent inference (Claude API); some user-entered text and business data is sent for inference | United States |
| Supabase (Supabase, Inc.) | Database and auth infrastructure (PostgreSQL hosting, Storage) | United States / Singapore / Tokyo region |
| Resend (Resend, Inc.) | Sending notification and report emails | United States |
| Fly.io (Fly, Inc.) | Application hosting (Tokyo region) | United States / Tokyo region |
The processors above may be located outside Japan. We entrust handling after taking appropriate protective measures in accordance with applicable laws.
6. Provision to third parties
We do not provide personal information to third parties without the user's consent, except in the following cases.
- When required by law
- When necessary to protect a person's life, body, or property, and obtaining the individual's consent is difficult
- When especially necessary to improve public health or promote the sound development of children, and obtaining the individual's consent is difficult
- When it is necessary to cooperate with a national or local government body, or a party entrusted by them, in performing duties prescribed by law
7. Security management measures
We take organizational, personnel, physical, and technical security measures to prevent leakage, loss, or damage of the personal information we handle, and to otherwise manage it safely. Specifically, we restrict access permissions, encrypt communication paths (TLS), encrypt the database, keep audit logs, and conduct periodic reviews.
8. Cookies / analytics
The Service may use cookies and similar technologies to maintain login state, for authentication and session management, and to understand usage. Users can disable cookies in their browser settings, but some features of the Service may then become unavailable.
9. Requests for disclosure, correction, deletion, etc.
Users may request disclosure, correction, addition, deletion, suspension of use, and suspension of third-party provision of their own personal information held by us. To make a request, please contact the contact point below. We may ask for information necessary to verify your identity.
10. Contact
For inquiries about this Policy and requests regarding the handling of personal information, please contact:
- Company: Last Mile, Inc.
- Address: N&E BLD. 7F, 1-12-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan
- Personal data manager: Shota Tabata
- Email: admin@lmile.io
- Business hours: Weekdays 10:00–18:00 JST (excl. weekends & Japanese holidays)
11. Amendments
We may change this Policy as needed. The amended Policy takes effect when posted on the relevant page of the Service. If there are material changes, we will notify users within the Service or by individual email, etc.