Legal

Privacy Policy

This Privacy Policy explains how HUGO collects, processes, uses, stores, shares, and transfers personal data when you use F.T.R.E and related account, inquiry, and member features.

Last updated: April 1, 2026
Controller / Role: HUGO operates this site as the Taiwan-based contact window for overseas users. Real estate brokerage and transaction execution for Japanese properties are handled by partner corporations and licensed service providers in Japan. When an inquiry or transaction proceeds, necessary personal data will be provided to Japan.

1. Who This Policy Covers

This Policy applies to your use of this site, member registration and sign-in, saved preferences, favorites, browsing history, comparison features, property inquiries, and related communications.

HUGO acts as the Taiwan-based operator and contact window for overseas users. Brokerage explanations, transaction execution, contracts, closings, and other regulated real estate services for Japanese properties are handled by partner corporations and licensed service providers in Japan.

HUGO Asset Management Inc. is registered at 28F., No. 285, Sec. 2, Taiwan Blvd., West Dist., Taichung City, Taiwan. Privacy requests may be sent to info@hugo.tw.
If an inquiry advances to viewing coordination, offer negotiation, purchase support, or post-purchase support, the same personal data may continue to be used within the necessary scope by HUGO, its partner corporations in Japan, and related service providers.

2. Categories Of Personal Data We Collect

Depending on how you use the site, we may collect the following categories of personal data.

Identity and contact data: name, email address, phone number, country, preferred contact channel, preferred contact time, and account email.
Inquiry and transaction support data: property ID and type, inquiry category, message content, Japan property ownership status, follow-up communications, and support history.
Member and preference data: favorites, saved comparisons, browsing/view history, collections, investment preferences, locale, and notification settings.
Authentication data: account identifiers, session information, and limited profile data received from login providers such as Google, Apple, or LINE when enabled.
Usage and device data: IP-related metadata, browser and device type, page URL after query sanitization, locale, referrer, accept-language, pages viewed count, time on site, and related activity logs.
Identifiers and browser storage: visitor_id, session_id, UTM parameters, inquiry draft data, session context, auth cookies, and other localStorage or sessionStorage items used to operate the site.
Security and anti-abuse data: honeypot field values, time-to-submit signals, rate-limit inputs, hashed IP data when available, and server-side traffic or audit logs.

3. How We Use Personal Data

We collect, process, and use personal data only for specific purposes and within the necessary scope of those purposes, including where needed to establish or perform a contract-like relationship with you, where consent is given, where required by law, or where your rights and interests are not infringed.

To create and manage member accounts, authenticate users, and provide member-only features.
To receive, verify, route, and respond to property inquiries and general inquiries.
To connect overseas users with partner corporations and licensed service providers in Japan for brokerage, viewings, offers, contracting, settlement, and related support.
To remember saved drafts, preferences, favorites, browsing history, and comparison selections.
To prevent spam, fraud, abusive automation, duplicate submissions, security incidents, and misuse of the service.
To analyze product performance and improve the site. Direct contact details are intentionally excluded from inquiry analytics events sent to product analytics.
To comply with legal, tax, accounting, audit, recordkeeping, and dispute-handling obligations.

4. Notice Required Under Taiwan Law

For purposes of Taiwan personal data law, we provide the following notice when collecting personal data from you.

Name of collector: HUGO Asset Management Inc., the Taiwan-based operator and contact window for this site. Address: 28F., No. 285, Sec. 2, Taiwan Blvd., West Dist., Taichung City, Taiwan. Privacy contact: info@hugo.tw.
Purposes of collection: property information services, inquiry handling, customer support, account and membership management, transaction coordination, service improvement, analytics, security, fraud prevention, legal compliance, and related communications.
Categories of data: identification, contact, account, inquiry, communication, preference, browsing, device, log, authentication, and legally required record data.
Time period of use: for the period necessary to fulfill the above purposes, plus any additional period needed for legal compliance, dispute handling, audit, or defense of rights. Browser-side inquiry drafts are stored for up to 7 days unless deleted sooner. Session-based identifiers are generally retained until the browser session ends or the browser clears them.
Territory of use: Taiwan, Japan, and locations where authorized processors provide hosting, infrastructure, authentication, email, analytics, customer support, image delivery, or map services.
Recipients: HUGO, partner corporations and licensed service providers in Japan, infrastructure and SaaS vendors, payment or professional support providers if later needed, and competent authorities where disclosure is required by law.
Methods of use: automated and manual collection, recording, storage, organization, retrieval, review, use, internal transfer, cross-border transfer, reply by email or phone, deletion, and anonymization.
Your rights: access, review, request a copy, supplement or correction, cessation of collection/processing/use, and deletion of your personal data according to applicable law.
Impact of not providing data: we may be unable to create your account, respond to your inquiry, verify your identity, connect you with a Japanese brokerage counterparty, or provide certain site features or transaction support.

5. Sharing, Outsourcing, And Transfer To Japan

We do not sell personal data. We share personal data only within the scope necessary to operate the site, handle inquiries, provide support, and carry out or support Japanese real estate transactions.

Japanese brokerage disclosure: because actual brokerage and transaction execution are handled in Japan, necessary personal data will be provided to partner corporations and licensed service providers in Japan when you request property information, viewings, offer support, contracting, settlement, or related assistance.
Related Japan-side recipients may include seller-side or buyer-side agents, property managers, interpreters, legal or tax professionals, lenders, and other service providers involved in the transaction or post-transaction support, but only to the extent necessary.
Service providers acting on our behalf may include Supabase for authentication or account infrastructure, FreeScout for inquiry operations and replies, Google Maps services for map features, PostHog and Microsoft Clarity for product analytics without direct contact details, and hosting, database, network, image, CDN, or logging providers.
If competent authorities, courts, or law enforcement agencies lawfully require disclosure, we may provide relevant data to the extent required.
If a business transfer, restructuring, or asset transfer occurs, personal data may be transferred within the lawful scope after appropriate safeguards and notices.

6. Cookies, Local Storage, And Similar Technologies

We use cookies and similar technologies, including localStorage and sessionStorage, to operate the site, maintain sign-in state, store preferences, preserve inquiry drafts, and understand service usage.

Essential cookies remain active without a banner choice because they are required for sign-in persistence, auth session handling, CSRF protection, language preferences, and similar core site functions.
Analytics cookies are used only for PostHog and Microsoft Clarity. We store your analytics preference in the cookie_consent cookie and let you change it at any time from the Cookie Settings link in the site footer.
For visits from the EEA and the United Kingdom, analytics cookies are off by default and are enabled only after you explicitly agree. For other regions, analytics cookies are on by default and you can opt out later from the banner or footer settings.
Browser storage may be used for visitor_id, session_id, UTM parameters, pages viewed count, viewed property IDs, inquiry drafts, map UI state, and similar operational data. Inquiry analytics are designed not to include name, email, or phone number.
If you block cookies or clear browser storage, sign-in persistence, favorites, comparisons, saved drafts, and some personalized features may not work correctly.

7. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required by law or is necessary to handle disputes or protect legal rights.

Inquiry drafts stored in the browser expire after 7 days and are removed sooner when submitted or manually discarded.
Session-based storage is generally retained until the session ends or the browser clears it.
Account, inquiry, and support records may be retained while your account remains active, while a response or transaction is ongoing, and for a reasonable period thereafter for compliance, audit, and dispute purposes.
Security, traffic, and audit logs may be retained as needed to prevent abuse, investigate incidents, and meet compliance obligations, then deleted or anonymized when no longer needed.
When the specific purpose no longer exists or the retention period expires, we will delete, anonymize, or cease processing the data unless continued retention is legally permitted or required.

8. Data Accuracy, Security, And Sensitive Data

We take administrative, technical, and organizational measures intended to protect personal data against unauthorized access, theft, alteration, damage, loss, or leakage.

Measures may include access control, least-privilege permissions, vendor management, encrypted transmission where appropriate, logging, backup, and operational safeguards.
Please provide accurate and up-to-date data. If your information changes, tell us so we can update it.
Please do not include medical, health, biometric, criminal record, passport, or other sensitive personal data in an inquiry unless it is legally necessary and specifically requested.
No internet service can guarantee absolute security. You should also protect your account credentials and devices.

9. Your Rights And How To Exercise Them

Subject to applicable law, you may request access to, review of, a copy of, correction of, supplementation of, cessation of processing or use of, or deletion of your personal data.

To exercise these rights, contact HUGO Asset Management Inc. at info@hugo.tw, or reply to the latest inquiry receipt email if available. We may need to verify your identity before processing the request.

Requests for access, review, or copies are generally decided within 15 days and may be extended by up to 15 more days where necessary, with written notice of the reason.
Requests for correction, supplementation, cessation, or deletion are generally decided within 30 days and may be extended by up to 30 more days where necessary, with written notice of the reason.
We may charge necessary cost-based fees for copies where permitted by law.
If we use your personal data for marketing and you object, we will stop using your data for that marketing purpose.

10. Data Incidents, External Links, And Policy Updates

If we become aware of theft, leakage, alteration, damage, loss, or other compromise of personal data, we will investigate, take appropriate response measures, and notify affected persons as required by applicable law.

This site may contain links to external websites or services. Those services are governed by their own privacy notices and terms.

Taiwan personal data law was amended on November 11, 2025, and the official PDPC database notes that some amended provisions are not yet effective. This draft is therefore designed to satisfy the currently effective core rules while also adopting a prompt-notice and incident-response standard.
We may update this Policy from time to time. Material changes will be reflected by updating the date on this page and, where appropriate, by additional notice.