Privacy Policy

Panthera Ltd ("the Company," "we," "us," or "our") (Ark Mori Building 12F, 1-12-32 Akasaka, Minato-ku, Tokyo 107-0052, Japan) is the personal information handling business operator with respect to personal information collected through pantherahq.com, under the Act on the Protection of Personal Information (the "APPI"). Contact: [email protected].

Panthera operates an AI-powered credit-risk analytics platform that helps digital lenders and neobanks score thin-file borrowers across Vietnam, Indonesia, the Philippines, and Japan. Our platform processes alternative financial data -- mobile wallet activity, utility payment records, and informal repayment signals -- to generate credit scores for borrowers who are invisible to traditional bureau-based underwriting. This Privacy Policy explains how the Company handles personal information collected through our website and partner onboarding processes.

1. Personal Information We Handle

Depending on how you interact with pantherahq.com and our platform services, the Company may collect and handle the following categories of personal information:

• Identity and professional contact information you submit directly, including your name, work email address, company name, role or title, and phone number provided via our partner registration form or contact inquiries;
• Market and business context information you provide, such as the Asian lending markets you operate in and monthly origination volume estimates, used to scope a suitable pilot arrangement;
• Communication content arising from your inquiries and ongoing partnership correspondence;
• Technical and usage information collected automatically when you visit our website, including IP address, browser type and version, referring URL, pages visited, and session duration;
• Analytics data collected with your acknowledgment, used to measure and improve our website and platform documentation.

Our credit scoring platform processes borrower data on behalf of our lender partners under separate data processing agreements. Borrower-level scoring data is submitted by lenders using pseudonymous identifiers; the Company does not receive or store raw personal identification information about individual end-borrowers beyond what is necessary to return a scoring response. Partners remain the data controller for borrower data they submit to the platform.

2. Purposes of Use

The Company uses personal information for the following purposes:

• To respond to partnership and access inquiries submitted through our contact form or partner registration process;
• To evaluate partner fit and structure pilot engagements for our credit scoring API;
• To operate and maintain our website, including ensuring security and diagnosing technical issues;
• To communicate with partners regarding platform updates, model performance reports, and service changes;
• To meet obligations under applicable law, including financial services and data protection regulations in Japan and the markets we serve.

We will not use personal information beyond these purposes without your prior consent, except as permitted or required by the APPI or other applicable law. We do not use information submitted through our platform to train machine learning models without the explicit written agreement of the lender partner who submitted that data.

3. Provision to Third Parties and Cross-Border Transfers

The Company does not sell personal information. We may share personal information with:

• Service providers and processors acting under our instructions and appropriate contractual supervision, such as cloud infrastructure providers that host our platform and website;
• Professional advisers (legal, accounting, audit) where required;
• Regulatory authorities or courts where disclosure is required by law.

Because Panthera serves lenders across Vietnam, Indonesia, the Philippines, and Japan, some of our infrastructure providers operate in foreign countries. Where personal information is provided to entities in foreign countries, the Company takes the steps required under APPI Article 28: we obtain prior consent where required, provide information about the recipient country's data protection framework, and ensure appropriate contractual protections are in place. You may contact us at [email protected] to request information about the specific countries and protection measures that apply to your information.

4. Retention

The Company retains personal information only for as long as necessary for the purposes described above:

• Partner inquiry and registration records are retained for the duration of the business relationship and for a period of five years thereafter, to meet business and legal documentation obligations;
• Scoring request metadata and output (score, band, reason codes) submitted through the API is retained for 90 days for audit trail purposes, after which it is deleted;
• Raw borrower data submitted by lender partners for scoring is not persisted after the scoring response is returned;
• Website analytics data is retained in anonymised or aggregated form for up to 13 months.

5. Your APPI Rights

Under the Act on the Protection of Personal Information, you have the following rights with respect to retained personal data the Company holds about you:

• Right to disclosure of retained personal data -- you may request that the Company disclose what personal data it holds about you;
• Right to correction, addition, or deletion -- you may request correction or deletion if information is inaccurate or no longer necessary;
• Right to cease use or cease provision to third parties -- you may request that the Company stop using or disclosing your personal data in circumstances permitted by the APPI;
• Right to disclosure of records of provision to third parties -- you may request disclosure of records showing when and to whom your data was provided.

To exercise any of these rights, email [email protected] with your request. The Company will respond promptly and without undue delay. We may ask you to verify your identity before acting on any request.

6. Security

The Company maintains technical and organisational measures appropriate to the nature of the personal information handled and the risk involved. Platform API traffic is transmitted over encrypted connections. Access to personal data within our systems is limited to personnel who need it to perform their duties. We periodically review our security practices as our platform and team scale.

7. Complaints

If you have a concern about how the Company handles your personal information that we have not resolved to your satisfaction, you may file a complaint with the Personal Information Protection Commission of Japan at ppc.go.jp.

8. Cookies

For detailed information about how we use cookies and similar technologies on pantherahq.com, see our Cookie Policy.

9. Changes to This Policy

The Company may update this Privacy Policy to reflect changes to our practices or applicable law. Material changes will be posted with a new "Last updated" date at the top of this page. Continued use of our website or platform following such notice constitutes your acknowledgment of the updated policy.

10. Contact

For any questions or requests relating to this Privacy Policy or the handling of your personal information, contact the Company at:

Panthera Ltd
Ark Mori Building 12F, 1-12-32 Akasaka, Minato-ku
Tokyo 107-0052, Japan
Email: [email protected]
Phone: +81 3 6234 5100