Zentabi Privacy Policy

Effective date: October 6, 2026

1. Who Operates Zentabi

Zentabi is operated by Tetsuya Hinata, a sole proprietor in Japan trading as smart infini ("Zentabi," "smart infini," "we," "us," or "our").

Contact:
Email: t.hinata@washobi.net

This Privacy Policy explains how information is processed when you access or use Zentabi at https://www.zentabi.jp.

2. Information Processed by Zentabi

2.1 Information used to generate a destination suggestion

To use Zentabi, you select an exploration theme.

To generate a destination suggestion and its details, Zentabi may process and send the following information to its AI service provider:

• the exploration theme you selected (nature, food, culture, or slow-paced travel)
• a stay-length parameter used by the system, which is currently set automatically and not selected by you
• the service language setting
• up to five previously selected destination prefectures

Zentabi does not require you to provide your name, email address, account credentials, or payment information to generate a destination suggestion.

Generated itineraries are not currently stored in a Zentabi database or file system.

2.2 Destination history and service state stored in your browser

Zentabi uses browser local storage for limited operational purposes.

The current browser storage keys are:

• zentabi_cookie_consent
• destHistory
• retryState

These are used to:

• remember your analytics preference
• store up to five recent destination prefectures to reduce immediate repetition
• manage retries and protect the service from excessive requests

This information is stored on your device. It may remain until it is replaced, removed by the application, or cleared through your browser.

Zentabi also uses browser session storage, which is limited to your current browser tab or window and is cleared when that session ends.

The session storage key is:

• zentabiUtm

This is used to temporarily hold campaign attribution parameters (UTM parameters, such as utm_source, utm_medium, utm_campaign, and utm_content) taken from the URL you arrived with, so that they can be included in Google Analytics events after you provide analytics consent (see Section 2.4).

2.3 IP addresses and security information

Zentabi temporarily processes IP addresses on the server to enforce request limits, maintain security, prevent abuse, and protect the availability of the service.

Application-level rate-limit information is used for a limited request-control period.

Our hosting provider may separately process IP addresses, request information, approximate location derived from IP address, device information, system configuration, and runtime or security logs as part of providing and protecting the hosting service.

2.4 Analytics information

Zentabi uses Google Analytics 4 only after you provide consent.

Depending on your consent and browser settings, analytics information may include:

• pages viewed
• search start, success, or failure status
• destination result events
• optional feedback selections (see Section 2.5)
• browser, device, and general usage information
• approximate geographic information
• cookie or device identifiers used by Google Analytics

Google Analytics is not loaded when analytics consent has been declined.

2.5 Feedback

While showing a suggested destination, Zentabi may ask optional feedback questions about whether the destination had crossed your mind before and whether you would consider visiting it.

Answers are selected from fixed options. There is no free-text field in this feedback.

Zentabi may process these optional feedback selections through Google Analytics only after you have provided analytics consent. If you decline or have not yet provided consent, feedback selections are not sent to Google Analytics.

2.6 Destination photography

To display a representative photo for a suggested destination, Zentabi sends the destination search keyword to Unsplash's API and displays the returned photo and photographer credit.

Zentabi does not send your personal information to Unsplash as part of this request.

2.7 "Around this place" map

On the details page for a suggested destination, Zentabi may show an "Around this place" map of nearby places. This involves the following communications:

• Your browser to the Zentabi server: the suggested destination's place name and prefecture.
• Zentabi server to Nominatim (OpenStreetMap): to find the approximate location of the destination, the server sends a search query made of the place name, the prefecture, and "Japan", together with a header identifying Zentabi.
• Zentabi server to OpenPOI API: to find nearby places, the server sends the approximate coordinates of the destination, a search radius, and a result limit.
• Your browser to the Geospatial Information Authority of Japan (GSI): to display the map, your browser requests map tile images directly from the GSI tile server (cyberjapandata.gsi.go.jp).

The requests to Nominatim and OpenPOI API are made by the Zentabi server. Zentabi does not intentionally send your IP address, name, email address, or other personal information to these services as part of these requests. These services may technically process information about the requests they receive from the Zentabi server under their own terms and policies.

The Leaflet map library used to display this map is loaded by your browser from cdnjs (Cloudflare, cdnjs.cloudflare.com) when you open the Zentabi home page, whether or not a map is shown.

Because your browser connects directly to the GSI tile server and cdnjs, those services may technically process information such as your IP address and browser information, and, for map tiles, the map area requested, under their own terms and policies.

Zentabi does not store the place names, coordinates, or nearby place results in a database. To reduce repeated requests to Nominatim, the server may temporarily keep destination coordinates in memory. This information is keyed by place name and prefecture and is not linked to you.

Nearby place information, including its license and attribution information, is provided by OpenPOI API. Zentabi passes the license and attribution information received from OpenPOI API through its server without modification, and the map section shows a general attribution line linking to OpenPOI API, GSI, and OpenStreetMap.

2.8 External links

Zentabi may link to independent third-party websites, including accommodation, activity, tourism, map, and booking services.

When you click an external link, the third party may receive information from your browser and process it under its own privacy policy. Zentabi does not control the third party's processing.

3. Why We Process Information

We process information for the following purposes:

• to select a destination and generate an itinerary
• to provide the requested service
• to reduce immediate destination repetition
• to operate retry functions
• to protect the service from abuse and excessive requests
• to maintain security and diagnose failures
• to measure service usage and improve Zentabi, where you have consented to analytics
• to comply with legal obligations
• to establish, exercise, or defend legal claims where necessary

4. Legal Bases

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• performance of a service requested by you, for processing needed to generate a destination suggestion and its details
• our legitimate interests in operating, securing, maintaining, and protecting Zentabi
• your consent for optional analytics
• compliance with legal obligations where required

Analytics consent may be withdrawn at any time using the Cookie Settings control described in Section 9.

Withdrawing consent does not affect processing that took place before the withdrawal.

5. AI Service Provider

Zentabi uses the Anthropic API to generate destination suggestions and their details, including itinerary content.

Apart from instructions generated by Zentabi itself (such as the current season and the prefecture selected by program logic), the information sent to Anthropic is limited to the exploration theme you selected, the stay-length parameter used by the system (currently set automatically), the language setting, and up to five previous destination prefectures.

Zentabi does not intentionally send your IP address, name, email address, or payment information to Anthropic as part of generating a suggestion.

Anthropic processes API information under its applicable commercial terms, data processing terms, security measures, and privacy practices.

AI-generated content may contain inaccurate, incomplete, or outdated information. Please verify important information through official or current sources.

6. Service Providers and Recipients

Information may be processed by the following categories of service providers:

• Anthropic, for AI itinerary generation
• Unsplash, for destination photography
• Nominatim / OpenStreetMap, for locating suggested destinations on the map
• OpenPOI API, for nearby place information
• the Geospatial Information Authority of Japan (GSI), for map tiles loaded by your browser
• cdnjs (Cloudflare), for delivery of the map library
• Vercel, for website and server hosting, delivery, logging, and security
• Google Analytics, for optional analytics after consent
• technical service providers used to maintain, protect, or diagnose Zentabi

Third-party websites that you voluntarily visit through external links process information independently under their own policies.

7. International Data Transfers

Some service providers may process information in countries outside Japan, the European Economic Area, or your country of residence.

Where required, we use or rely on appropriate contractual or legal safeguards made available by the relevant provider, such as data processing agreements, standard contractual clauses, or other recognized transfer mechanisms.

The availability and details of those safeguards may depend on the provider and service configuration.

8. Retention

Zentabi applies the following general retention approach:

• Generated itineraries are not currently stored by Zentabi.
• Destination coordinates used for the "Around this place" map may be kept temporarily in server memory and are not stored in a database.
• Application-level IP rate-limit information is processed for the limited period needed to enforce request limits.
• Up to five previous destinations may remain in your browser until replaced or cleared.
• Retry state may remain in your browser until reset, replaced, or cleared.
• Your analytics preference remains in your browser until changed, cleared, or approximately six months have passed, after which you may be asked to confirm your preference again.
• Google Analytics information is retained according to our Google Analytics property settings: 2 months.
• Hosting and security logs may be retained according to Vercel's service and account configuration.
• Information processed by Anthropic is retained according to Anthropic's applicable commercial service terms and retention configuration.

We retain information only for as long as reasonably necessary for the relevant purpose, legal obligation, security requirement, or dispute.

9. Cookies and Similar Technologies

Zentabi distinguishes between essential browser storage and optional analytics.

Essential browser storage may be used to:

• remember your analytics choice
• maintain recent destination history
• manage retries
• protect the service

Optional Google Analytics technologies are activated only after consent.

You can change your analytics preference at any time using the Cookie Settings control in the site footer. Declining prevents future optional analytics events from being sent by Zentabi. Where technically possible, Zentabi also attempts to remove Google Analytics cookies (such as _ga and _ga_*) that were set for this site.

This does not guarantee removal of information already processed by Google Analytics before your preference was changed, or removal of any data outside Zentabi's control.

10. Sale of Personal Information

Zentabi does not sell your personal information.

Zentabi does not currently use affiliate tracking identifiers in its external links.

11. Your Rights

Depending on your location and applicable law, you may have rights concerning your personal data, including the right to:

• request access
• request correction
• request deletion
• restrict or object to certain processing
• withdraw consent
• request data portability where applicable
• lodge a complaint with an appropriate data protection authority

Some requests may not apply where Zentabi does not hold information that can reasonably be linked to you.

To submit a request, contact:
t.hinata@washobi.net

12. Children

Zentabi is not directed to children under 16.

We do not knowingly request names, email addresses, account information, or payment information from children through the itinerary generation service.

13. Security

We use reasonable technical and organizational measures intended to protect the service and the limited information processed through it.

No internet service or transmission method can be guaranteed to be completely secure.

14. Changes to This Policy

We may update this Privacy Policy when the service, providers, data processing, or applicable requirements change.

The updated version will be posted on this page with a revised effective date.

15. Contact

Operator: Tetsuya Hinata, trading as smart infini
Service: Zentabi
Country: Japan
Email: t.hinata@washobi.net