Bank Invoice株式会社(以下「当社」といいます)は、デジタルインボイスサービス「BankInvoice」(以下「本サービス」といいます)および当社のウェブサイト(bankinvoice.com およびそのサブドメイン)の提供にあたり、利用者、ウェブサイトの閲覧者、お問い合わせをいただいた方、および利用登録をせずにインボイスの閲覧・確認・差戻しを行う方の個人情報を含む情報を、個人情報の保護に関する法律その他の関係法令に従い、以下のとおり取り扱います。
本サービスは、ログイン状態の維持等、サービスの提供に必要なCookieを使用します。当社のウェブサイトは、閲覧者が選択した表示テーマを記憶するためのCookie(bi-theme。有効期間1年。bankinvoice.com とそのサブドメインで共有)と、表示言語・表示テーマを閲覧者の端末に保存する機能(ブラウザのローカルストレージ)を使用します。これらは閲覧者が表示を切り替えたときに保存され、ブラウザの設定で削除できます。また、当社のウェブサイトは、閲覧の状況を把握するため、Cookieを使用しないアクセス解析(Cloudflare Web Analytics)を使用することがあります。広告配信のためのCookie・タグは使用していません。導入する場合は、本ポリシーを改定し、必要な同意取得の仕組みとあわせてお知らせします。なお、本サービスは、ブラウザのDo Not Track信号には応答しません。
This English version is provided for reference; the Japanese version prevails.
In providing its digital invoice service "BankInvoice" (the "Service") and its website (bankinvoice.com and its subdomains), Bank Invoice Corporation (the "Company") handles information, including personal information, about users, website visitors, people who contact the Company, and people who view, check or return invoices without registering, as follows, in accordance with the Act on the Protection of Personal Information of Japan and other applicable laws.
1. Data Controller
Bank Invoice Corporation
Representative: Taro Teshima, CEO
Address: 1-14-10 Kyobashi, Chuo-ku, Tokyo 104-0031, Japan
Contact: / contact form (https://biv.jp/chfJV0)
2. Information We Collect
Account information: organization name, department, name, email address and other information provided at registration.
Invoice Data: invoices and associated messages and histories created, sent, received or stored through the Service (which may include names and contact details of your counterparties' staff).
Usage information: operation logs and access logs for the Service and the website (such as IP addresses, dates and times of access, and pages viewed), and device and browser information.
Payment information: for credit card payments, card details are handled by our payment processor; the Company does not itself store card numbers.
Inquiry information: your name, organization, contact details and the content of your inquiry, as submitted through the contact form or by email.
The Service is intended for business-to-business use. The personal data we process generally relates to officers and employees acting on behalf of organizations in the course of their work, rather than to individuals acting as consumers.
The Service is not intended for use by children under 16. We do not intentionally collect or process special categories of personal data (or sensitive personal information under Japanese law); please do not enter such information into Invoice Data or elsewhere in the Service.
3. Purposes of Use
We use the information to: (i) provide the Service, verify identity and bill fees; (ii) respond to inquiries and provide support; (iii) address incidents and misuse and maintain security; (iv) send important notices such as amendments and maintenance; (v) send information about new features and use cases (you can opt out of such emails at any time); (vi) compile statistics in a form that does not identify any individual or organization, to improve the Service; and (vii) comply with laws.
4. Transmission and Sharing of Invoice Data
The purpose of the Service is to exchange Invoice Data with your counterparties. Accordingly, Invoice Data and associated messages and statuses are transmitted to and shared with the counterparties you designate, including via the Peppol access point providers used by those counterparties.
Once Invoice Data has been delivered to a counterparty, its handling is subject to the control of that counterparty and of the access point provider they use. We do not control, and are not responsible for, how those parties handle personal data.
5. Cookies
The Service uses cookies necessary to provide the Service, such as maintaining login sessions. Our website uses a cookie to remember the display theme chosen by the visitor (bi-theme; valid for one year; shared across bankinvoice.com and its subdomains), and stores the display language and theme on the visitor's device (in the browser's local storage). These are saved when the visitor changes the display settings and can be deleted through the browser's settings. Our website may also use cookieless analytics (Cloudflare Web Analytics) to understand how it is used. We do not use advertising cookies or tags. If we introduce them, we will update this Policy and implement any required consent mechanisms. The Service does not respond to browser Do Not Track signals.
6. Outsourcing
We may entrust the handling of information to external providers to the extent necessary for the purposes above (e.g., cloud infrastructure providers, payment processors), selecting them appropriately and supervising them as necessary.
The terms on which we entrust the processing of personal data are set out in the Data Processing Addendum. Our current providers are listed on the Subprocessors page.
7. Provision to Third Parties
We do not provide personal information to third parties except: (i) with your consent; (ii) transmission and sharing with counterparties inherent in the nature of the Service (Section 4); or (iii) as required by law.
8. International Transfers
Data for the Service is stored primarily in Japan. However, exchanges with the Peppol Network, the delivery of notification emails and the processing of payments are entrusted to providers in the countries and regions shown on the Subprocessors page (within the EU, the United States and elsewhere), and the information necessary for that processing is handled in those countries and regions. We take the measures required by law with respect to these providers in foreign countries.
In addition, where you exchange invoices with counterparties located outside Japan, Invoice Data is transmitted to the Peppol access point provider and the counterparty in the relevant country. Such transfers are made at your instruction and are necessary for the performance of the Service. We take the measures required by applicable law with respect to such transfers.
9. Retention
We retain information for as long as necessary for the purposes above. Invoice Data is retained during the contract period and may be exported for thirty (30) days after termination, after which it is deleted within ninety (90) days unless retention is required by law (data contained in backups is erased no later than one hundred and eighty (180) days after the deletion). Account information is deleted after termination, except to the extent and for the period required for statutory retention or the handling of disputes. Usage information such as operation logs is retained only for as long as necessary for security and the other purposes above.
10. Security
We take necessary and appropriate measures to prevent leakage, loss or damage of information, including the following.
Encryption in transit (TLS), encryption at rest, role-based access control on a least-privilege basis, two-factor authentication for sign-in, operation logging, periodic backups, and monitoring.
Data is stored at multiple geographically separate locations within Japan.
11. Your Requests
You may request, in accordance with applicable law, disclosure, correction, addition, deletion or suspension of use of your personal information held by us, whether or not you have registered for the Service. Please contact us via the contact form. We will respond in accordance with applicable law after verifying your identity. For personal information that we handle on behalf of users, we will respond in cooperation with the user concerned.
12. For Users in the EU/EEA, UK and Similar Jurisdictions
Where the GDPR or similar laws apply, we process personal data on the following legal bases: performance of a contract (providing the Service), legitimate interests (security, service improvement, communications with existing customers), compliance with legal obligations (such as record-keeping and tax requirements) and consent (where processing is based on consent). You have the rights of access, rectification, erasure, restriction, data portability and objection under applicable law, and the right to lodge a complaint with a supervisory authority. To exercise these rights, please use the contact form. Transfers of personal data from the EU/EEA or the United Kingdom to Japan are made on the basis of the adequacy decisions for Japan, and we comply with the Supplementary Rules issued by Japan's Personal Information Protection Commission.
US state privacy notice: We do not sell or share personal information.
13. Business Transfers
If we transfer our business through a merger, corporate split, transfer of business or otherwise, we may transfer information to the successor within the scope of the purposes set out in this Policy. In that case, we will require the successor to handle the information in a manner equivalent to this Policy.
14. Amendments
We may amend this Policy in response to changes in law or the Service. Material changes will be announced by posting on the Service or other appropriate means.
15. Contact
For inquiries regarding this Policy or our handling of personal information, please email or use the contact form (https://biv.jp/chfJV0).
Established: December 1, 2026
Bank Invoice Corporation
This English version is provided for reference; the Japanese version prevails (Article 21).
These Terms of Service (the "Terms") set out the conditions for use of the digital invoice service "BankInvoice" (the "Service") provided by Bank Invoice Corporation (the "Company"). By using the Service, you (the "User") agree to these Terms.
Article 1 (Application)
These Terms apply to all relationships between the Company and Users concerning use of the Service.
The Service is intended for use by businesses (organizations and individuals using the Service for business purposes).
Among the guidelines and other rules posted by the Company within the Service, those that the Company lists at the end of these Terms as forming part of these Terms (the "Individual Provisions") form part of these Terms. If the Individual Provisions conflict with these Terms, the Individual Provisions prevail. Help pages and other explanatory materials are reference information that explains how to use the Service; if they conflict with these Terms or the Individual Provisions, these Terms or the Individual Provisions prevail.
Article 2 (Definitions)
"Invoice Data" means invoices (including quotations, purchase orders and other transaction documents) and associated messages, statuses and histories created, sent, received or stored through the Service.
"Registered Organization" means a corporation, other entity or individual that has completed registration for the Service.
"Peppol Network" means the international document exchange network managed by OpenPeppol.
"Paid Plan" means a plan of the Service that is used upon payment of the fees prescribed by the Company.
"Receiving Registration" means the registration on the Peppol Network that enables a Registered Organization to receive invoices.
"Receiving Group Slot" means the contractual quantity, under a Paid Plan, used for receiving by group. Disabling receiving does not reduce the number of Receiving Group Slots.
"Expiry Date" means the last day of each contract period of a Paid Plan.
"Renewal Date" means the day following the Expiry Date (the day on which the next contract period begins).
"New Transmission" means newly sending Invoice Data (excluding Invoice Data sent back to its sender and other data prescribed by the Company) to a counterparty through the Service.
"Sending Credits" means a prepaid usage allowance used for New Transmissions.
"Self-Service Agreement" means an agreement for a Paid Plan applied for through the application screens and paid by credit card.
"Individual Agreement" means an agreement concluded individually between the Company and a User.
"Cancellation" means terminating the agreement for a Paid Plan (the Agreement continues as use on the free plan).
"Account Closure" means terminating the Agreement in its entirety.
Article 3 (Registration)
A person wishing to use the Service shall register through the method prescribed by the Company after agreeing to these Terms. The agreement between the Company and the User concerning use of the Service (the "Agreement") is formed when the registration procedure prescribed by the Company is completed.
The Company may decline a registration where it determines that any of the following applies, without any obligation to disclose its reasons: (i) the registration contains false statements, errors or omissions; (ii) the applicant has previously breached these Terms; (iii) the applicant breaches the representation in Article 15 (Exclusion of Anti-Social Forces); or (iv) the Company otherwise reasonably considers the registration inappropriate.
Article 4 (Account Management)
Users shall manage their account credentials (IDs, passwords, etc.) appropriately at their own responsibility.
Any act performed on the Service using an account is deemed the act of the User holding that account.
Where a Registered Organization allows its officers or employees to use the Service, it shall cause them to comply with these Terms and shall be responsible for their acts.
Article 5 (Fees and Payment)
Fees for Paid Plans and the price of Sending Credits are as displayed on the application screens and the Company's pricing page. No per-invoice fees are charged for receiving invoices. The currency of the fees is determined by the Company according to the country in which the Registered Organization is located and, in principle, cannot be changed.
Payment shall be made by credit card under a Self-Service Agreement, and by the method specified in the Individual Agreement (including payment by invoice) under an Individual Agreement. Fees for a Paid Plan under a Self-Service Agreement are payable in advance at the start of each contract period. However, if Receiving Group Slots are added during a contract period, the fee from the day of the addition until the day before the next Renewal Date is calculated on a daily pro rata basis and is payable together with the next payment for monthly billing, or in a single monthly payment for annual billing (if a Cancellation takes effect before then, it is payable at that time). Payments by invoice are due by the payment deadline stated in the invoice issued by the Company.
If a User delays payment, the Company may charge late payment interest at a rate of 14.6% per annum.
The Company does not charge for receiving invoices on a per-invoice basis and does not impose a limit on the number of invoices received. However, if a User's use continues to significantly exceed the range of normal use for a comparable plan, the Company may contact the User to discuss moving to an Individual Agreement (the Enterprise plan). In such a case, the Company shall notify the User, and the change shall apply from the first Renewal Date falling after thirty (30) days have elapsed from the date of the notice. The Company shall not suspend or delay the receipt of invoices on the basis of this paragraph.
If the Company revises the fees for Paid Plans or the price of Sending Credits, it shall notify Users of the details of the revision and its effective date at least thirty (30) days before the effective date, by posting on the Service or by other appropriate means. Revised fees apply, for Self-Service Agreements, from the first contract period beginning on or after the effective date and, for Sending Credits, to purchases made on or after the effective date. The quantity and validity period of Sending Credits already purchased do not change. Fees under an Individual Agreement are governed by the Individual Agreement.
Article 5-2 (Sending Credits)
Users shall use Sending Credits for New Transmissions. One Sending Credit is consumed per New Transmission; however, no Sending Credit is consumed in cases prescribed by the Company (such as where a transmission is not completed).
Sending Credits are valid for six (6) months counted from the date of purchase (or, for Sending Credits granted free of charge, the date of grant), and expire on the day before the corresponding day six (6) months later (or, if there is no corresponding day, on the last day of that month). Sending Credits whose validity period has passed lapse and can no longer be used.
The Company does not refund unused or lapsed Sending Credits, except where a refund is required by law.
The Company grants Sending Credits free of charge to Registered Organizations that meet the conditions shown on the pricing page or by other means prescribed by the Company, in the quantity shown by those means. Free grants are limited to once per business; businesses identified by the same corporate number, qualified invoice issuer registration number or other number prescribed by the Company are treated as the same business. The Company may change the conditions or quantity of free grants, or discontinue free grants; in either case, Sending Credits already granted are not affected.
Sending Credits may not be transferred to another Registered Organization or exchanged for cash.
If a payment for the purchase of Sending Credits is reversed (including by chargeback), the Company may revoke the Sending Credits granted through that payment.
For Users under an Individual Agreement, unless otherwise provided in the Individual Agreement and notwithstanding paragraph 1, the number of New Transmissions is totaled each month and billed in the following month.
Article 6 (Term, Renewal and Cancellation)
The contract period of a Self-Service Agreement is one (1) month or one (1) year according to the billing cycle selected at the time of application, and automatically renews with the same billing cycle (or, if changed under paragraph 7, the billing cycle after the change) unless cancelled under this Article, and so on thereafter.
Users under a Self-Service Agreement may cancel their Paid Plan at any time through the method prescribed by the Company. In this case, the Cancellation takes effect upon the passing of the Expiry Date of the then-current contract period, and no further renewal takes place. On or before the Expiry Date, the User may withdraw the Cancellation through the method prescribed by the Company. After the Cancellation takes effect, the Company shall delete the Receiving Registration without delay.
Notwithstanding the preceding paragraph, Users under a Self-Service Agreement may cancel their Paid Plan by requesting deletion of the Receiving Registration through the method prescribed by the Company. In this case, the Cancellation takes effect when the request procedure is completed, and the Company shall delete the Receiving Registration without delay.
If any fees remain unbilled when a Cancellation takes effect under this Article, they are billed at that time. Fees already paid are not refunded, except where due to reasons attributable to the Company or as otherwise approved by the Company. To use a cancelled Paid Plan again, a new application is required.
The contract period, renewal and cancellation of an Individual Agreement are governed by the Individual Agreement. If the Individual Agreement contains no such provisions, the contract period is one (1) year and automatically renews for successive one-year periods on the same conditions, unless either party gives notice of non-renewal no later than thirty (30) days before the expiry date. Even if a User under an Individual Agreement cancels during a contract period, the obligation to pay fees for the remaining contract period is not extinguished.
A change that reduces the number of Receiving Group Slots takes effect from the next Renewal Date. Fees up to the day before that Renewal Date are not refunded.
Of changes to the billing cycle, a change from annual to monthly billing takes effect from the next Renewal Date, and a change from monthly to annual billing takes effect upon completion of the procedure. Where the billing cycle is changed from monthly to annual, a new one-year contract period begins at the time of the change, and the fee for the remaining days of the contract period before the change is deducted from the annual fee. Where a change that sets the number of Receiving Group Slots to one or more changes the Paid Plan, the change likewise takes effect at the time of the change, and the fee of the previous plan for the remaining period is calculated on a daily pro rata basis and deducted from the fee of the new plan.
If a User fails to pay fees and payment has still not been made after the period prescribed by the Company has elapsed, the Company may, upon notice to the User, cancel the Paid Plan and delete the Receiving Registration. In this case as well, the Agreement continues as use on the free plan.
Except as provided in the preceding paragraph, the Company shall not suspend or delay the receipt of invoices on the grounds of unpaid fees.
Users may close their account (Account Closure) at any time through the method prescribed by the Company.
Cancellation of a Paid Plan does not terminate the Agreement; use continues on the free plan. The Agreement terminates (the termination referred to in Article 8) when the User requests Account Closure through the method prescribed by the Company, or when the Agreement is terminated in accordance with these Terms.
Article 7 (Nature of the Service)
The Service enables Users to send, receive and share Invoice Data with counterparties designated by the User, via the Peppol Network or via email-based notifications.
Email notifications sent by the Service may fail to arrive due to the recipient mail server’s settings, spam filtering or other factors outside the Company’s control. The Company does not guarantee the delivery of email.
By the nature of the Service, Invoice Data and associated messages and statuses are transmitted to, and shared with, the counterparties designated by the User.
Where a counterparty uses another provider's Peppol-ready service, some functions or information (such as messages) may not be displayed on the counterparty's screen, depending on the specifications of that service.
Article 8 (Handling of Data)
Rights in Invoice Data belong to the User or the User's Registered Organization.
The Company handles Invoice Data to the extent necessary to provide, maintain and troubleshoot the Service, to comply with laws, and to compile statistics and analyses in a form that does not identify any individual or organization, for the purpose of improving the Service.
Statutory obligations to preserve books and records (including under Japan's Electronic Bookkeeping Act) rest with the User; the Company provides functions for such preservation but does not guarantee the User's own compliance.
For thirty (30) days after termination, Users may export their Invoice Data through the method prescribed by the Company. After that period, the Company will delete Invoice Data within ninety (90) days, except where retention is required by law. Data contained in backups is erased in the ordinary rotation of backups, and in any event within one hundred and eighty (180) days of the deletion.
Article 9 (Intellectual Property)
Rights in Invoice Data and other data entered or stored in the Service by Users belong to the User or the registered organization to which the User belongs, as set out in the preceding article.
All intellectual property rights in the Service, including its software, screens, documentation and trademarks, belong to the Company or to third parties that license those rights to the Company.
These Terms grant Users the right to use the Service in accordance with these Terms. They do not assign the intellectual property rights referred to in the preceding paragraph or transfer any other rights to Users.
The Company may use any suggestions, requests or other feedback provided by Users in connection with the Service, for improving the Service or otherwise, without any obligation to the User, including any obligation of payment.
Article 10 (Prohibited Acts)
Users shall not: (i) violate laws or public order and morals; (ii) send false Invoice Data or otherwise deceive third parties; (iii) infringe the intellectual property, privacy or other rights or interests of the Company or third parties; (iv) place excessive load on, or interfere with, the Service's servers or networks; (v) gain unauthorized access to, reverse engineer or otherwise analyze the Service (excluding vulnerability testing and reporting carried out within the scope set out on the Company's Security page); (vi) transfer or lend accounts to third parties; (vii) use the Service in violation of applicable export control or economic sanctions laws (including use in or from sanctioned countries or regions, or by persons on sanctions lists); or (viii) engage in any other act the Company reasonably considers inappropriate.
Article 11 (Suspension of the Service)
The Company may suspend or interrupt all or part of the Service, only to the extent and for the period necessary, where: (i) maintenance or updates of the Service's systems are performed; (ii) provision becomes difficult due to earthquake, lightning, fire, power outage, other force majeure, or failures of telecommunication lines or cloud infrastructure; (iii) suspension or interruption is necessary to respond to unauthorized access or otherwise to ensure the security of the Service; or (iv) the Company otherwise reasonably determines that suspension or interruption is necessary. The Company will announce planned maintenance in advance where possible and, in an emergency, will give notice promptly afterwards.
This Article does not permit the Company to suspend or delay the receipt of invoices solely on the grounds of the volume of use or unpaid fees in the cases set out in Article 5(4) or Article 6(9).
The Company is not liable for damage arising from suspension or interruption under this Article beyond the scope of Article 14.
Article 12 (Changes to and Termination of the Service)
The Company may change the content of, or terminate, the Service with reasonable prior notice to Users.
Where the Service is terminated, the Company will in principle give at least thirty (30) days' notice and provide an opportunity for Users to export their Invoice Data.
Article 13 (Disclaimer of Warranties)
The Company does not warrant that the Service is free from defects in fact or in law (including as to safety, reliability, accuracy, completeness or fitness for a particular purpose).
The Company is not liable for delays, non-delivery or malfunction of transmissions caused by the Peppol Network, telecommunication lines, services used by counterparties, or other factors outside the Company's control. However, this does not apply where they are caused by the acts of a subcontractor engaged by the Company.
The Company does not control, and is not responsible for, the availability, operational policies or specification changes of OpenPeppol, other Peppol authorities, or the access point providers used by counterparties.
The Company does not warrant that the Service will operate without interruption. No uptime or other service level is guaranteed unless separately agreed in writing between the Company and the User.
The Company is not liable for damage caused by force majeure, including natural disasters, epidemics, war or terrorism, cyberattacks, power outages, failures of telecommunications lines or cloud infrastructure, or changes in law or government action.
Article 14 (Limitation of Liability)
Where the Company is liable to a User for default or tort, the Company shall compensate only direct and ordinary damage actually incurred, up to the total fees actually received by the Company from that User for the Service during the twelve (12) months preceding the occurrence of the damage. The Company is not liable for lost profits or indirect, incidental or special damage, except in cases of the Company's willful misconduct or gross negligence.
For use of the Service free of charge, the Company is not liable except in cases of its willful misconduct or gross negligence.
The preceding Article and this Article do not apply to damage caused by the Company's willful misconduct or gross negligence, or to liability that cannot be excluded under applicable law.
If a third party brings a claim against the Company arising from a User's breach of these Terms or unlawful use of the Service, the User will resolve the claim at its own responsibility and expense and will compensate the Company for resulting damage, including reasonable attorneys' fees.
Article 15 (Exclusion of Anti-Social Forces)
Users represent and warrant that they are not, and have no socially condemnable relationship with, organized crime groups, their members or equivalent persons. The Company may terminate the agreement without notice if a User is found to be in breach of this representation.
Article 16 (Confidentiality)
The Company and Users shall not disclose or divulge the other party's confidential information obtained in connection with the Service to third parties without prior consent, except for disclosure required by law and transmission or sharing with counterparties inherent in the nature of the Service.
Article 17 (Personal Information)
The Company handles personal information obtained through the Service appropriately in accordance with its Privacy Policy. The terms on which the Company processes personal data on behalf of Users are set out in the Data Processing Addendum (DPA), which is an Individual Provision.
Article 18 (No Assignment)
Users may not assign or pledge their contractual status or rights or obligations under these Terms to third parties without the Company's prior written consent.
Article 19 (Amendment of these Terms)
The Company may amend these Terms in accordance with Article 548-4 of the Civil Code of Japan.
When amending these Terms, the Company will announce the amended Terms and their effective date by posting on the Service or other appropriate means a reasonable period before the effective date (in principle, at least thirty (30) days for changes that materially affect Users).
Article 20 (Governing Law and Jurisdiction)
These Terms are governed by and construed in accordance with the laws of Japan.
The Tokyo District Court has exclusive jurisdiction as the court of first instance over any dispute concerning the Service.
Article 21 (Language)
The Japanese text of these Terms is the authentic text. Where a translation is prepared for reference, the Japanese version prevails in the event of any inconsistency.
Esta página ofrece los datos de la empresa Bank Invoice Corporation, proveedora del servicio BankInvoice.
Empresa
Bank Invoice Corporation (Bank Invoice株式会社)
Representante
Taro Teshima, CEO
Domicilio
1-14-10 Kyobashi, Chuo-ku, Tokyo 104-0031, Japón
Actividad
Desarrollo y operación de una plataforma de facturación digital
Contacto
Correo electrónico:
Formulario de contacto: https://biv.jp/chfJV0
El número de teléfono se facilita por correo electrónico sin demora previa solicitud.
Ta strona zawiera dane firmy Bank Invoice Corporation, dostawcy usługi BankInvoice.
Firma
Bank Invoice Corporation (Bank Invoice株式会社)
Przedstawiciel
Taro Teshima, CEO
Adres
1-14-10 Kyobashi, Chuo-ku, Tokyo 104-0031, Japonia
Działalność
Rozwój i prowadzenie platformy faktur cyfrowych
Kontakt
E-mail:
Formularz kontaktowy: https://biv.jp/chfJV0
Numer telefonu udostępniamy e-mailem niezwłocznie na żądanie.
Dane rejestrowe
Numer identyfikacyjny (Japonia): 7010001167632 (sprawdź w gBizINFO (METI))
Numer rejestracyjny kwalifikowanego wystawcy faktur (Japonia): T7010001167632 (sprawdź w rejestrze NTA)
W razie rozbieżności między japońską a polską wersją tej strony rozstrzygająca jest wersja japońska.
Tato stránka obsahuje údaje o společnosti Bank Invoice Corporation, poskytovateli služby BankInvoice.
Společnost
Bank Invoice Corporation (Bank Invoice株式会社)
Zástupce
Taro Teshima, CEO
Sídlo
1-14-10 Kyobashi, Chuo-ku, Tokyo 104-0031, Japonsko
Předmět činnosti
Vývoj a provoz platformy pro digitální faktury
Kontakt
E-mail:
Kontaktní formulář: https://biv.jp/chfJV0
Telefonní číslo sdělíme e-mailem bez zbytečného odkladu na vyžádání.
Registrační údaje
Identifikační číslo (Japonsko): 7010001167632 (ověřit v gBizINFO (METI))
Registrační číslo kvalifikovaného vystavitele faktury (Japonsko): T7010001167632 (ověřit v registru NTA)
V případě rozporu mezi japonskou a českou verzí této stránky má přednost japonská verze.
Šiame puslapyje pateikiama informacija apie įmonę Bank Invoice Corporation, paslaugos BankInvoice teikėją.
Bendrovė
Bank Invoice Corporation (Bank Invoice株式会社)
Atstovas
Taro Teshima, CEO
Adresas
1-14-10 Kyobashi, Chuo-ku, Tokyo 104-0031, Japonija
Veikla
Skaitmeninių sąskaitų faktūrų platformos kūrimas ir priežiūra
Kontaktai
El. paštas:
Kontaktų forma: https://biv.jp/chfJV0
Telefono numerį pateikiame el. paštu nedelsdami pagal prašymą.
Registracijos duomenys
Įmonės kodas (Japonija): 7010001167632 (patikrinti gBizINFO (METI))
Kvalifikuoto sąskaitų išrašytojo registracijos numeris (Japonija): T7010001167632 (patikrinti NTA registre)
Esant neatitikimų tarp šio puslapio japonų ir lietuvių kalbos versijų, pirmenybė teikiama japonų kalbos versijai.
Halaman ini memaparkan maklumat syarikat Bank Invoice Corporation, penyedia perkhidmatan BankInvoice.
Syarikat
Bank Invoice Corporation (Bank Invoice株式会社)
Wakil
Taro Teshima, CEO
Alamat
1-14-10 Kyobashi, Chuo-ku, Tokyo 104-0031, Jepun
Aktiviti
Pembangunan dan pengendalian platform invois digital
Hubungi
E-mel:
Borang hubungan: https://biv.jp/chfJV0
Nombor telefon akan diberikan melalui e-mel tanpa berlengah atas permintaan.
Maklumat pendaftaran
Nombor pendaftaran perniagaan (Jepun): 7010001167632 (sahkan di gBizINFO (METI))
Nombor pendaftaran pengeluar invois layak (Jepun): T7010001167632 (sahkan dalam daftar NTA)
Sekiranya terdapat percanggahan antara versi bahasa Jepun dan bahasa Melayu halaman ini, versi bahasa Jepun akan diguna pakai.
Nagbibigay ang pahinang ito ng mga detalye ng kumpanya tungkol sa Bank Invoice Corporation, ang provider ng serbisyong BankInvoice.
Kumpanya
Bank Invoice Corporation (Bank Invoice株式会社)
Kinatawan
Taro Teshima, CEO
Rehistradong Address
1-14-10 Kyobashi, Chuo-ku, Tokyo 104-0031, Japan
Negosyo
Pagbuo at pagpapatakbo ng platform para sa digital na invoicing
Makipag-ugnayan
Email:
Contact form: https://biv.jp/chfJV0
Ibibigay sa pamamagitan ng email nang walang pagkaantala ang numero ng telepono kapag hiniling.
This Addendum sets out the terms on which Bank Invoice Corporation (the "Company") processes personal data on behalf of Users in providing BankInvoice (the "Service"). This Addendum forms part of the Terms of Service. It is intended to address the requirements of Article 28 of the EU General Data Protection Regulation (GDPR) and the corresponding provisions of the UK GDPR, and the requirement under Japan's Act on the Protection of Personal Information (APPI) to supervise parties entrusted with the handling of personal data.
1. Definitions
In this Addendum:
Personal Data means information entered into the Service, or sent or received through it, that identifies an individual.
Controller means the party that determines the purposes and means of processing.
Processor means the party that processes Personal Data on behalf of a Controller.
Subprocessor means a third party engaged by the Company to carry out part of the processing.
Invoice Data has the meaning given in Article 2 of the Terms of Service and includes returns and other messages attached to invoices, and records of their status.
Account Information means information the Company collects for the registration, authentication and billing of Users (such as the name and email address of the registrant and payment-related information).
Service Metadata means records the Company generates in operating the Service (such as sending and receiving timestamps, message IDs, operation logs and system logs).
2. Scope and Roles
For Personal Data contained in Invoice Data, the User is the Controller and the Company is the Processor.
For Account Information and Service Metadata (in each case, to the extent they constitute Personal Data), the Company acts as its own Controller and processes them in accordance with its Privacy Policy, for the purposes of operating the Service, ensuring security, preventing misuse, troubleshooting, billing and complying with law. That processing is outside the scope of this Addendum. However, records provided to Users as part of Invoice Data (such as status records), including timestamps and similar Service Metadata, are covered by this Addendum as Invoice Data.
The Service may send and receive Invoice Data through the Peppol Network. The service provider (access point provider) that the Company uses to connect to the Peppol Network and to register receiving capability (SMP) is a Subprocessor of the Company and is listed in the Subprocessor List. The operators of the Peppol Network (OpenPeppol and the operator of the SML), as well as the access point providers and SMP operators used by counterparties, are not Subprocessors of the Company and are not under its direction or control.
Once Invoice Data has been delivered to a counterparty, its handling is subject to the control of that counterparty and of the access point provider they use. The counterparty is an independent Controller, and the Company is not responsible for that processing.
3. Details of Processing
Purpose: provision of the Service, namely sending, receiving, storing, viewing and returning Invoice Data and recording its status.
Types of data: counterparty names, names of staff, department names, contact details and other information appearing on invoices.
Categories of data subjects: officers and employees of Users and their counterparties. The Service is intended for business-to-business use and does not primarily concern individuals acting as consumers.
Duration: the term of the contract and the period after termination set out in Article 8 of the Terms of Service.
4. Obligations of the Company
The Company processes Personal Data only on the User's instructions and in accordance with this Addendum. The User gives instructions through its use of the Service and through operations performed in accordance with the Terms of Service and this Addendum; any different instructions require the written agreement (including by electronic means) of the Company and the User.
Where the law requires processing that differs from this Addendum or from the User's instructions, the Company will inform the User before processing, unless prohibited from doing so by law. The Company will also inform the User if, in its view, an instruction infringes the law. In that case, the Company is not obliged to follow that instruction.
The Company ensures that Personal Data is processed only by personnel who are bound by contractual or statutory obligations of confidentiality.
The Company implements the technical and organizational security measures set out in Annex 1.
The Company does not use Personal Data beyond what is necessary to provide the Service. In particular, the Company does not use Personal Data for advertising, for sale to third parties, or for training machine-learning models.
The Company keeps records of its processing of Personal Data to the extent required by law.
Where the Company is required by law to disclose Personal Data, it will notify the User unless prohibited from doing so by law. In that case, the Company will limit the disclosure to what is required by law.
Where the California Consumer Privacy Act (CCPA) applies, the Company acts as a "service provider" under that law and does not sell or share Personal Data, or retain, use or disclose it beyond what is necessary to provide the Service.
5. Subprocessors
The User authorizes the Company to engage Subprocessors for the provision of the Service. Current Subprocessors are listed on the Subprocessors page.
Where the Company adds or replaces a Subprocessor, it will give notice by posting on the Service or by other appropriate means at least thirty (30) days before the change takes effect. In case of urgency, however, it will give notice as soon as possible.
After such notice, the User may object on reasonable grounds by the date on which the change takes effect. If the parties cannot resolve the matter through discussion, the User may close its account (Account Closure under the Terms of Service) by the date on which the change takes effect.
The Company imposes obligations equivalent to this Addendum on its Subprocessors and remains responsible to the User for their acts as for its own.
6. Assistance with Data Subject Rights and Compliance
Where a data subject makes a request for access, correction, deletion, restriction or any similar right, the Company will provide reasonable assistance, including through the functions of the Service, so that the User can respond. If the Company receives such a request directly, it will forward it to the User, and will not respond to the request without the User's prior authorization, except where the Company is itself required to respond by law.
Where the User carries out a data protection impact assessment (DPIA) or a prior consultation with a supervisory authority, the Company will provide reasonable assistance, including information about the processing.
7. Notification of Incidents
If the Company becomes aware of any leakage, loss or damage of Personal Data, or a risk of the same, it will notify the User without undue delay and, where feasible, within seventy-two (72) hours of becoming aware. The notification will include, so far as known, an outline of the incident, the types and volume of data affected, and the measures the Company has taken.
The Company will investigate the cause of the incident and take reasonable measures to prevent recurrence. Where the User is required by law to report to a supervisory authority or to notify data subjects, the Company will cooperate reasonably.
8. Audits and Information
On the User's request, the Company will provide, in writing, the information necessary to verify compliance with this Addendum.
Such information will be provided no more than once per year, except following an incident involving Personal Data or where required by law.
Whether an on-site audit is carried out, and its scope, method and allocation of costs, will be agreed separately between the parties.
9. International Transfers
The Company may transfer Personal Data outside Japan, including by reason of the location of a Subprocessor. Where it does so, the Company takes the measures required by the law of the relevant jurisdiction.
Transfers from the European Economic Area or the United Kingdom to Japan are made on the basis of the adequacy decisions for Japan. For Personal Data transferred from those jurisdictions, the Company complies with the Supplementary Rules issued by Japan's Personal Information Protection Commission.
Where a Subprocessor outside Japan processes Personal Data, the Company applies the obligations set out in Article 5 and takes any protective measures required by law for that transfer.
Where standard contractual clauses or another transfer mechanism must be agreed separately (including if an adequacy decision ceases to have effect), the Company and the User will negotiate and agree them in good faith.
10. On Termination
The treatment of Personal Data after termination follows Article 8 of the Terms of Service. For thirty (30) days after termination, Users may export their Invoice Data through the method prescribed by the Company. After that period, the Company will delete the Personal Data within ninety (90) days, except where retention is required by law. Personal Data contained in backups is erased in the ordinary rotation of backups, and in any event within one hundred and eighty (180) days of the deletion. On the User's reasonable request, the Company will provide written confirmation (including by electronic means) that deletion has taken place.
11. Responsibilities of the User
The User is responsible for having a lawful basis for the collection of Personal Data and for its provision to the Company.
The User is responsible for notices to data subjects, for obtaining any necessary consent, and for any other steps required of a Controller by law.
The User will ensure that its instructions to the Company comply with the law.
12. Relationship to the Terms of Service
This Addendum forms part of the Terms of Service. In the event of any inconsistency between this Addendum and the Terms of Service or any other document concerning the processing of Personal Data, this Addendum prevails. The liability of the parties under this Addendum is subject to Article 14 (Limitation of Liability) of the Terms of Service.
13. Governing Law
This Addendum is governed by the laws of Japan.
Annex 1 (Technical and Organizational Measures)
The Company implements the following measures to protect Personal Data. The Company may update the measures in this Annex, provided that the level of protection is not materially reduced.
Encryption in transit: encryption of communication channels (TLS).
Encryption at rest: encryption of stored data.
Access control: role-based access with least privilege.
Authentication: two-factor authentication for sign-in to the Service. Multi-factor authentication is required for administrative access by Company personnel to the underlying infrastructure.
Logging: recording of operation logs.
Backups: regular backups; data is stored at multiple geographically separated locations within Japan, supporting recovery from failures.
Monitoring: monitoring of system operation.
Vulnerability management: software updates and response to vulnerabilities.
Personnel: confidentiality obligations (Article 4) and training.
Physical security: reliance on the physical controls and third-party certifications of the data centers of the Company's cloud infrastructure (see the Subprocessors page).
Incident response: the notification and response procedures set out in Article 7.
Subprocessor management: equivalent obligations imposed on Subprocessors under Article 5.
Security contact: for security reports and inquiries, please contact .
Established: December 1, 2026
Bank Invoice Corporation
This page lists the providers to which the Company entrusts part of the processing of personal data in providing BankInvoice (the "Service"). It is published under Article 5 of the Data Processing Addendum.
Email addresses and the contents of notification emails
Data for the Service is stored in regions within Japan. Payment, email-delivery and Peppol Network processing takes place at the locations shown above. Each Subprocessor is provided only with the data necessary for its service. The safeguards for transfers outside Japan are set out in Article 9 of the Data Processing Addendum.
About the Peppol Network
The service provider that the Company uses to connect to the Peppol Network and to register receiving capability (SMP) — Datajust B.V. (Storecove) — is a Subprocessor of the Company and is listed in the table above. The operators of the Peppol Network (OpenPeppol and the operator of the SML), as well as the access point providers and SMP operators used by counterparties, are not Subprocessors of the Company, because they do not process Personal Data on the Company's instructions. The allocation of roles is set out in Article 2 of the DPA.
Changes
Where the Company adds or replaces a Subprocessor, it will give notice by posting on the Service or by other appropriate means at least thirty (30) days before the change takes effect. Users may object on reasonable grounds by the date on which the change takes effect. The procedure is set out in Article 5 of the Data Processing Addendum.
Contact
For questions about this page, please email () or use the contact form (https://biv.jp/chfJV0).
This page summarizes how BankInvoice (the "Service") approaches information security. Our commitments as a processor are set out in the Data Processing Addendum (DPA) and its Annex 1; our vendors are listed in the Subprocessor List.
Principles
Rights in Invoice Data and other data entered by Users belong to the User or the User's registered organization. We do not use Personal Data beyond what is necessary to provide the Service — in particular, not for advertising, not for sale to third parties, and not for training machine-learning models.
Where data is stored
Service data is stored in regions within Japan, across geographically separated locations for recovery. Exchanges with the Peppol Network pass through an access point within the EU (see the Subprocessor List). Notification emails are delivered, and payments are processed, by providers in the United States and elsewhere (see the Subprocessor List).
Encryption
Traffic is encrypted in transit (TLS) and data is encrypted at rest.
Access control and authentication
Permissions follow the principle of least privilege by role. Sign-in to the Service uses two-factor authentication, and administrative access to our infrastructure by our staff requires multi-factor authentication. Personal Data is handled only by staff bound by contractual or statutory confidentiality obligations.
Monitoring, logging and backups
We keep operation logs, monitor availability, take regular backups, and run a redundant configuration that can fail over to standby systems.
Vulnerability handling and reporting
We keep software up to date and respond to vulnerabilities on an ongoing basis. Please report vulnerabilities to (a machine-readable contact is published at /.well-known/security.txt). When testing, please stay within your own account and data, and do not access other users' data, destroy or alter data, or disrupt the Service (including tests that put load on it, such as sending large volumes of requests). We review and reply to reports we receive.
Connection to the Peppol Network
We provide Peppol Network connectivity and receiving registration (SMP) in partnership with Datajust B.V. (Storecove), an OpenPeppol-certified service provider (access point). Processing takes place within the EU. The allocation of roles and cross-border safeguards are set out in Articles 2 and 9 of the DPA.
Payments
For card payments, card details are handled by our payment processor; we do not hold card numbers ourselves.
Third-party certification
Physical security relies on the physical controls and third-party certifications of the data centres of our cloud infrastructure.
If an incident occurs
If we become aware of a leak, loss or damage of Personal Data (including a risk thereof), we will notify Users without undue delay — where possible within 72 hours of becoming aware (Article 7 of the DPA).
Established: December 1, 2026
Bank Invoice Corporation
アクセシビリティ方針
Bank Invoice株式会社は、本サイト(bankinvoice.com)を、より多くの方が支障なく利用できるよう、次の方針で取り組みます。
目標とする水準
JIS X 8341-3:2016(WCAG 2.0に対応)の適合レベルAAを目標として、段階的に改善します。なお、「準拠」「一部準拠」等の表記は、規格に基づく試験を実施したうえで行います。本方針は目標の表明であり、試験結果の表明ではありません。
Bank Invoice Corporation works to make this site (bankinvoice.com) usable by as many people as possible, under the following policy.
Target level
We aim for conformance level AA of JIS X 8341-3:2016 (which corresponds to WCAG 2.0) and improve in stages. We will state conformance only after testing against the standard; this statement expresses a target, not a test result.
Scope
The public pages of this site. Product screens and exported files such as PDFs will be brought into scope progressively.
What we do today
Document structure with headings and landmarks; full keyboard operation (tabs, disclosures, menus); alternative text for images and diagrams; lang attributes matching the display language (42 language/region variants); respect for the "reduce motion" setting (prefers-reduced-motion) — animations stop and the original text is shown; readable printing (disclosures open on paper; marks drawn with backgrounds are redrawn with borders); and contrast in both light and dark themes.
Known limitations
Detailed descriptions for some diagrams, avoiding reliance on colour alone for every state, and comprehensive testing with assistive technologies remain on our roadmap.
Feedback
If anything is hard to use, please tell us via the contact form (https://biv.jp/chfJV0) or . If you need assistance accessing information or completing procedures on this site because of a disability or similar circumstances, please contact us through the same channels. We will ask about your situation and consider necessary and reasonable accommodations.
Established: December 1, 2026
Bank Invoice Corporation