Privacy Policy

Business operator

The name and address of the business operator of this website are listed on the Company page.

The name of the business operator (or of its representative, in the case of a corporation) will be provided without delay upon request from the individual, as permitted under Article 32(1) of the Act on the Protection of Personal Information. Please use the contact page to make such a request.

Scope

This policy applies to the handling of personal information on this website (dotsync.jp), in inquiries addressed to the Company, and in the sign-in shared across our products (creation of a dotSync account, authentication, and account management; the "Shared Sign-In").

The Shared Sign-In is the authentication mechanism common to the products we provide, such as offdaynote. In addition to signing in with an email address and password, it includes signing in with an Apple ID or a Google Account.

The handling of other user information within each product (such as the data you create and store in it) is governed by the privacy policy of the respective product.

Information we collect

When you contact us, we collect the information you provide, such as your name, email address, and the content of your inquiry.

This website does not use cookies or other identifiers stored on your device for analytics or behavioral tracking, and does not store information on your device while you browse.

For stable operation and troubleshooting, the servers of this website may record technical information such as access time, requested URL, and IP address as access logs and trace data. We do not use this information to identify individuals.

Information we collect for the Shared Sign-In

For the Shared Sign-In, we collect your email address and display name in order to create your account and to authenticate you.

If you sign in with an email address and password, your password is handled solely by the identity platform described under "Outsourcing". We never receive or store your password itself.

If you sign in with an Apple ID or a Google Account, we receive your email address, display name, and the unique identifier issued by that provider. We receive only what is shown on that provider's consent screen; we do not receive your contacts, calendar, photos, or any other information.

If you choose Apple's "Hide My Email", we receive a forwarding address issued by Apple (@privaterelay.appleid.com) instead of your own email address. In that case we never learn your actual email address.

We also hold an account identifier that we issue, the status of the account, and your time zone if you set one. To prevent misuse and to allow account activity to be reviewed, we store records of operations performed on the account (the time, the operation, and the identifier of the actor).

Purpose of use

We use collected personal information within the scope of the following purposes:

・To respond to and handle inquiries

・To create a dotSync account, authenticate you, and manage your account

・To provide our products and to verify your entitlement to use them (such as your plan)

・To send important service notices and communications regarding your contract and billing

・To prevent misuse and to investigate suspected misuse

・To improve this website and our services

・To comply with laws and regulations

Provision to third parties

We do not provide personal information to third parties without the consent of the individual, except as required by law.

We do not provide personal information to Apple, Google, or any other external service through the Shared Sign-In. When you use those providers, you authenticate on their own screens, and as a result we receive the information described under "Information we collect for the Shared Sign-In".

Outsourcing

We may outsource the handling of personal information to the extent necessary to achieve the purposes of use. In such cases, we select contractors appropriately and supervise them as necessary.

We use external cloud services for server monitoring and log storage, and the technical information described under "Information we collect" may be processed on servers located outside Japan. Records are retained only for the period necessary for operations.

Storage of Shared Sign-In account information (email address, display name, identifiers issued by external providers, and credentials such as passwords) and the authentication process itself are entrusted to Microsoft Entra External ID, provided by Microsoft Corporation. Within that service the information is stored in the Asia-Pacific region, including Japan, and may be processed on servers outside Japan.

Other information relating to the Shared Sign-In is processed in a Microsoft Azure region in Japan.

Security measures

We take necessary and appropriate measures to prevent leakage, loss, or damage of personal information. See our Information Security Policy for details.

Account deletion and retention

When you delete your account, we delete the account information held in the identity platform, including your email address, display name, and the identifiers issued by external providers. Under that provider's specification the data may remain recoverable for a limited period (30 days), after which it is permanently deleted.

Records of operations performed on the account are retained for one year after the account is deleted, for the investigation of misuse and to comply with laws, and are deleted thereafter.

The account identifier we issued and the record that the account has been deleted are retained to keep the data remaining in each product consistent. That record alone does not identify you.

Deletion and retention of the data stored within each product are governed by the terms of that product.

Requests for disclosure

We respond promptly to requests from individuals for disclosure, correction, addition, deletion, or suspension of use of their personal information, in accordance with the law and after verifying the identity of the requester. Please use our contact page for such requests.

When making a request, we may ask you to provide information necessary to verify your identity. We will respond by electronic means (email) in principle, free of charge.

Applicable law and users outside Japan

This policy is prepared under the laws of Japan, and this website and our services are directed at residents of Japan.

Where the EU General Data Protection Regulation (GDPR), the UK GDPR, or other foreign laws mandatorily apply, you may have additional rights such as access, rectification, erasure, restriction of processing, objection, data portability, and lodging a complaint with a supervisory authority. Nothing in this policy limits any rights granted to you under such laws. To exercise these rights, please contact us via the contact page.

Revisions

This policy may be revised in response to changes in laws or in our handling of information. Material changes will be announced on this website.

Contact

For inquiries regarding this policy or our handling of personal information, please contact us via the contact page.