Privacy Policy

Article 1 (Definition of Personal Information)

In this Privacy Policy, “personal information” means information relating to a living individual that can identify a specific individual by the name, date of birth, or other descriptions contained in such information (including information that can be readily collated with other information and thereby identify a specific individual).

Article 2 (Methods of Collecting Personal Information)

The Company may collect personal information by the following methods.

• (1) When information is submitted through the inquiry form on the Company’s website;
• (2) When registering to use the Service;
• (3) When subscribing to our newsletter;
• (4) When a visitor to the customer’s website enters information (such as name, email address, phone number, company name, job title, or department name) through any of the Service’s features (AI chat, calendar booking forms, pop-ups/banners, and other input forms);
• (5) When behavioral data of visitors (such as email opens and link clicks) is obtained through the Service’s email delivery and outreach features;
• (6) When, through the Service’s features, behavioral data of visitors on the customer’s website (such as URLs of viewed pages, time on page, scroll depth, session information, engagement with each feature, and the pages viewed and viewing time of materials in the Download Center), IP addresses, device information, browser information, and cookie/session information are collected automatically;
• (7) When corporate attribute information (company name, industry, location, employee size, etc.) is estimated based on information such as IP addresses;
• (8) When data is sent to and received from an external CRM designated by the customer (such as HubSpot or Salesforce) through integration;
• (9) Otherwise, in connection with the use of the Company’s Service.

Article 3 (Purposes of Use of Personal Information)

The Company uses the personal information it collects for the following purposes.

• (1) To provide and operate the Company’s Service (including generating automated responses via the AI chatbot, creating sales opportunities, scheduling via calendar integration, and nurturing through email delivery);
• (2) To respond to inquiries;
• (3) To provide guidance and notices regarding the Service;
• (4) To improve the Service and develop new services (including improving AI models based on anonymized data);
• (5) To provide usage reports to customers;
• (6) To integrate and transfer data to an external CRM or the like designated by the customer;
• (7) To maintain the security of the Service and prevent unauthorized use;
• (8) To respond to conduct that violates the Terms of Service;
• (9) For other purposes incidental to the above purposes of use.

Article 4 (Provision of Personal Information to Third Parties)

Except as permitted by laws and regulations, the Company will not provide personal information to third parties without obtaining the customer’s prior consent. However, this does not apply in the following cases.

• Where required by laws and regulations;
• Where it is necessary to protect the life, body, or property of a person and it is difficult to obtain the consent of the individual;
• Where it is especially necessary to improve public health or to promote the sound development of children and it is difficult to obtain the consent of the individual;
• Where it is necessary to cooperate with a national government agency, a local government, or a party entrusted by either of them in carrying out affairs prescribed by laws and regulations.

Article 5 (Security Control of Personal Information)

The Company takes appropriate information security measures to prevent the loss, destruction, alteration, leakage, and the like of personal information. The Company also provides appropriate supervision of employees who handle personal information.

Article 5-2 (Data Storage Location and Communication Structure in the Event of an Incident)

1. Data Storage Location

The Company securely stores personal information and customer data obtained through the Service in data centers located within Japan.

2. Reporting to the Personal Information Protection Commission and Others

In accordance with the Act on the Protection of Personal Information, if an incident such as a leakage of personal data occurs or is likely to occur, a director will take the lead in reporting to the Personal Information Protection Commission (PPC). In such reporting, the Company will, as a general rule, provide a preliminary report within 3 to 5 days of becoming aware of the situation and, in principle, a final report within 30 days after the completion of the investigation.

3. Coordination with Relevant Authorities

In the event of a large-scale cyberattack, the Company will share information with and request technical assistance from JPCERT/CC. In addition, reports and consultations regarding suspected criminal acts such as theft, extortion, or unauthorized access will be made promptly to the Cybercrime Countermeasures Division of the police station having jurisdiction.

Article 6 (Disclosure, Correction, and Deletion of Personal Information)

1. Customers may request the Company to disclose, correct, add to, delete, or suspend the use of their own personal information. Upon receiving such a request, the Company will respond within a reasonable period after verifying the identity of the person.

2. When the agreement to use the Service is terminated, the Company will, within the period defined by the Company (in principle, within 90 days of termination), delete or anonymize the identifiable personal data registered by the customer (such as name and email address).

3. Notwithstanding the preceding paragraph, the Company will retain and use behavioral history, statistical information, and metadata that have been processed so that individuals cannot be identified, for the purposes of service improvement and analysis, even after the termination of the agreement.

4. If a customer wishes to export data or have data individually deleted upon termination of the agreement, the customer must notify the Company at least 30 days prior to the date of termination. The Company will respond to such requests to a reasonable extent.

Article 7 (Use of Cookies and the Like)

On the Company’s website, we use cookies and similar technologies to improve the convenience of the Service and to analyze access. Customers can disable cookies through their browser settings, but some services may not function properly as a result.

Article 8 (Regarding Access Analysis Tools)

On the Company’s website, we use “Google Analytics,” an access analysis tool provided by Google Inc. Google Analytics uses cookies to collect traffic data. This traffic data is collected anonymously and does not identify individuals.

Article 9 (Data Handling in External Services and OAuth Integrations)

1. General Provisions

To improve customer convenience and provide features, the Company’s Service may integrate (via OAuth authentication and the like) with external services (such as Google, Microsoft, Slack, Zoom, Salesforce, and HubSpot). When integrating, the Company collects only the minimum information necessary to provide the relevant feature and handles it appropriately in accordance with the terms of each external service and the provisions of this Article.

2. Limited Use of Google API User Data

The use of information the Company’s Service receives from Google APIs, and any transfer of such information to other apps, will comply with the Google API Services User Data Policy, including the Limited Use requirements. Data obtained from Google APIs (such as calendar information) is used solely for the purpose of providing and improving the Service’s features, and is never used for ad delivery, marketing, or provision to any third party unrelated to the Service’s features.

3. Integration with Microsoft (Teams/Outlook)

Data obtained through the Microsoft Graph API is used solely for the purposes of scheduling sales meetings, setting up meetings, and the notifications incidental thereto. The obtained data is never used for advertising or profiling purposes.

4. Integration with Slack

Workspace information, channel information, message data, and the like obtained through the integration are used solely for the purposes of notifications and log creation within the Service. The obtained data is appropriately managed in accordance with Slack’s terms.

5. Integration with Zoom

Data obtained through the Zoom API (such as meeting information, user names, and email addresses) is used solely for the purposes of scheduling sales meetings, issuing meeting URLs, and the notifications incidental thereto. The Company never accesses, obtains, or stores users’ audio, video, chat content, or other communication content obtained through the Zoom API. Nor does the Company use such data to train or improve its own AI models or those of third parties. The obtained data is handled in accordance with the Zoom Privacy Statement and is never used for ad delivery or user profiling purposes. If a customer removes (uninstalls) the Service’s integration from the Zoom Marketplace, the Company will, notwithstanding the provisions of Article 6, promptly delete or anonymize the OAuth access tokens already obtained and any Zoom-related data within 24 hours.

6. Integration with CRMs (Salesforce/HubSpot)

The sending and receiving of data with external CRMs is carried out for the purposes of synchronizing data designated by the customer and making sales opportunity management more efficient.

7. Restrictions on Human Access

The Company restricts employees from viewing user data obtained through external integrations, except for reasons of security (such as investigating unauthorized use), legal obligations, or support responses for which the customer’s consent has been obtained.

Article 10 (Changes to the Privacy Policy)

The Company may change this Privacy Policy as necessary. The revised Privacy Policy shall take effect from the time it is posted on the Company’s website.

Article 11 (Contact)

For inquiries regarding this Privacy Policy, please contact us at the following.