Kachilu Privacy Policy
Kachilu Inc. ("we," "us," or "our") handles information about our customers, users of our service "Kachilu" (the "Service"), and other related parties (collectively, "Customers, etc.") as set forth below.
Article 1 (General Provisions)
To protect information related to Customers, etc., we comply with the Act on the Protection of Personal Information and other related laws and regulations, and strive for appropriate handling and protection of such information, including personal information.
This policy does not apply to partner services provided by operators that partner with us, or to services provided by parties other than us. For information handling in partner services, please refer to privacy policies and similar documents separately established by each provider.
Article 2 (Information We Acquire and Methods of Acquisition)
We may acquire and use information related to Customers, etc., including personal information (as defined in Article 2, Paragraph 1 of the Act on the Protection of Personal Information), in accordance with the purposes stated in Article 5 of this policy.
(1) Information Provided by Customers, etc.
- a. Name
- b. Name of affiliated company/organization
- c. Job title
- d. Gender
- e. Date of birth
- f. Address
- g. Email address
- h. Phone number
- i. Responses to surveys including questionnaires
- j. Inquiry details when contacting us
- k. Other information necessary to provide the Service
(2) Information Collected by Us When Using Our Website
a. Device Information
When Customers, etc. use our website on a device or mobile device, we may collect device information (such as identifiable device IDs) for website maintenance/improvement or fraud prevention.
b. Log Information, Behavioral History, and Usage Information
For website maintenance/improvement or fraud prevention, we may collect IP addresses automatically generated and stored during use of our website, request date/time, operation history within our website, and information about service usage status.
c. Cookies and Anonymous IDs
We may use technologies called cookies and similar technologies on our website. Cookies are industry-standard technologies by which web servers identify customers' computers. While cookies can identify a computer, they cannot identify an individual person. Cookie functions can be disabled by changing settings on a device, but some or all of our website may become unavailable.
d. Information Obtained via Integration with External Services
We may acquire IDs used by Customers, etc. in external services and other information that Customers, etc. permit to be disclosed to integrated destinations through privacy settings of those external services.
We acquire information properly and not by deception or other wrongful means. If we acquire information by means other than through use of our website, we notify or publicly announce the purpose of use in advance.
Article 3 (Pseudonymized Information)
Based on legal standards, we may create and use pseudonymized information (as defined in Article 2, Paragraph 5 of the Act) from information described in the preceding article for the purposes listed in Article 5, Paragraph 1 of this policy, including: "provision/execution of our services," "providing information to customers," and "creation of statistical data."
We handle pseudonymized information in compliance with applicable laws and in accordance with Articles 7, 8, and 9 of this policy. Except as permitted by law, we do not provide pseudonymized information to third parties.
Article 4 (Anonymized Information)
Based on legal standards, we may process information described in Article 2 into anonymized information (as defined in Article 2, Paragraph 6 of the Act) or statistical information so that individuals cannot be identified, and use such information.
The anonymized information described above includes information specified in Article 2, Paragraph 1, Item 1(b), (i) through (k), and Item 2(a) and (b) of this policy.
We handle anonymized information in compliance with applicable laws and in accordance with Articles 6, 7, 8, and 9 of this policy.
Article 5 (Purpose of Use)
We handle acquired information related to Customers, etc. appropriately within the scope of the purposes below. We do not use such information beyond the scope of purpose without the consent of the individual.
| Purpose of Use | Details | Information Used |
|---|---|---|
| Provision and Execution of Our Services |
| Name, affiliated company/organization name, job title, gender, date of birth, address, email address, phone number, and other information necessary for service provision |
| Providing Information to Customers, etc. |
| Name, affiliated company/organization name, title, address, email address, phone number Log information, behavioral history, and website usage information Cookies, anonymous IDs, and device information |
| Third-Party Provision | Third parties receiving the information listed on the right use it for the following purposes.
| Name, affiliated company/organization name, title, address, email address, phone number Log information, behavioral history, and website usage information Cookies, anonymous IDs, and device information |
| Creation of Statistical Data and Provision of Such Data to Third Parties | We analyze the information listed on the right from perspectives such as gender, age group, and service usage status to create statistical data in a format that cannot identify specific individuals or organizations. Third parties that receive statistical data related to the information on the right from us use such data for the following purposes.
| Cookies, anonymous IDs, and device information Log information, behavioral history, and website usage information Company/organization type, position, gender, date of birth, address, or location |
We may change the purposes above within a scope reasonably recognized as related to the purposes before change. In such case, we will notify Customers, etc. or publicly announce the change on our website or by other easy-to-understand methods.
Article 6 (Third-Party Provision)
In principle, we do not provide personal information to third parties without the consent of the individual. However, in the following cases, we may provide personal information without such consent to the extent permitted by applicable laws and regulations.
- (1) When required by law
- (2) When necessary to protect a person's life, body, or property and obtaining consent is difficult
- (3) When especially necessary for improving public health or promoting sound child development and obtaining consent is difficult
- (4) When cooperation is necessary for a national or local government body (or an entrusted party) to perform legally prescribed affairs, and obtaining consent may impede such performance
If we provide personal information to a third party based on prior consent of Customers, etc., we will create and retain records concerning the following matters.
- (1) That prior consent has been obtained
- (2) Name and other information sufficient to identify the third party
- (3) Name and other information sufficient to identify the individual identified by the personal information
- (4) Items of personal information provided
When providing personal information included in information related to Customers, etc. to third parties, we comply with applicable laws.
Article 7 (Outsourcing of Personal Information Handling)
We may outsource all or part of the handling of personal information acquired from Customers, etc. to third parties within the scope necessary to achieve the purpose of use. In that case, we conclude confidentiality agreements or equivalent agreements with such outsourcees in advance and provide necessary and appropriate supervision to ensure proper security management.
Article 8 (Joint Use)
We may jointly use personal information acquired from Customers, etc. with partner operators or other third parties to the extent necessary for providing partner services and similar purposes. In that case, we will publicly announce in advance the items of information to be jointly used, scope of joint users, purposes of use by joint users, and the name, address, and representative of the party responsible for management of such information.
Article 9 (Security Management System)
To prevent leakage, loss, or damage of information related to Customers, etc. and otherwise protect such information, we take necessary and appropriate security control measures, including access restrictions to personal information files, limiting persons with access privileges to the minimum necessary, and introduction of security software to prevent unauthorized external access.
We appoint a personal information manager and implement proper management and continuous improvement of information related to Customers, etc.
Article 10 (Retention and Deletion of Information Obtained via Google Service Integration)
We retain the following information obtained through Google Calendar integration.
- (1) Calendar event information (title, date/time, location, attendees, etc.)
- (2) Calendar metadata (calendar name, timezone, etc.)
- (3) Access tokens and refresh tokens required for authentication
Data Retention Period
- (1) Active users: retained as long as Google Calendar integration remains enabled
- (2) Inactive users: retained for one year from the last use date, then automatically deleted
- (3) Data for disconnected integrations: deleted immediately after disconnection
Data Deletion Method
Customers, etc. may request deletion of data obtained through Google service integration by the following methods.
- (1) Google integration can be disconnected at any time from settings in the Service. Upon disconnection, all data obtained from Google is deleted immediately.
- (2) For data deletion requests, contact us by email at support@biz-db.com. We will respond within 7 business days after receiving the request.
- (3) When withdrawing from the Service, all personal information, including data obtained through Google service integration, will be deleted.
Restrictions on Data Use
We use data obtained through Google service integration only within the purposes defined in Article 5 of this policy and comply with Google API Terms of Service and Google's Privacy Policy.
Article 11 (Changes to This Policy)
We review operation status of our handling of information related to Customers, etc. as appropriate and strive for continuous improvement, and may revise this policy as necessary.
For this policy after change, we will notify that this policy is being changed and announce the content and effective date of the revised policy by posting on our website or the Service, by electronic notification such as email, or by other easy-to-understand methods. However, if a change requires consent under law, we will obtain such consent by methods separately prescribed by us.
Last updated: October 1, 2024