Privacy Policy

Our approach

OpsEngine Inc. ("we", "us") treats the proper handling of personal data as a serious responsibility. We comply with Japan's Act on the Protection of Personal Information and other applicable laws, and work to collect, use and manage personal data appropriately.

This policy applies to our website and to the services we provide (OpsEngine Connect, contract development, production and consulting; together, "the services").

Information we collect

In providing the services, we may collect the following.

Name, company name and department
Email address and phone number
The content of enquiries, quote requests and instructions
What you enter when requesting materials, including which materials you requested
Website access information (IP address, browser type, pages viewed and similar)
Settings you register or select when using OpsEngine Connect (Google account email address, credentials for connected services, the output file you choose, the names of pull conditions and similar)
Run logs (time of run, the conditions used, how many records were processed, success or failure, and error details)

How we use it

We use collected information only for the following purposes.

Providing the services and performing the contract
Responding to enquiries
Sending requested materials and following up on them
Billing and payment processing
Sending important notices about the services
Investigating faults, preventing misuse, improving the services and developing new features
Meeting legal obligations

Data handling in OpsEngine Connect

OpsEngine Connect retrieves information from third-party services you hold contracts with and writes it into your spreadsheet. Handling is as follows.

We do not store the contents of the business data we retrieve.

Retrieved information is processed only to write it to the destination you specify, and is not left on our servers afterwards.
The resulting data is stored in your own Google Drive. We hold no storage of our own.
The permission we receive from Google is limited to files you select yourself and files this service creates (Google's "drive.file" scope). We cannot browse your Drive as a whole.
Credentials such as access tokens used to connect to third-party services are stored encrypted.
Run logs (section 2) are retained to investigate faults and confirm usage. They do not contain the contents of business data.

Use of information obtained from Google accounts complies with the Google API Services User Data Policy, including the Limited Use requirements.

AI processing

Some features use generative AI, such as tidying column names and notation.

Only column names and types are sent to the AI. Row data is not sent.

Row data containing your counterparties, amounts, addresses or names is not sent to AI processing.
We use settings under which what is sent is not used to train the AI provider's models.

Where AI is used during contract development or consultation, we likewise do not send information that identifies you.

Disclosure to third parties

We do not disclose your personal data to third parties except in the following cases.

Where you consent
Where disclosure is required by law
Where it is necessary to protect life, body or property and consent is difficult to obtain
Where it is provided to the subprocessors in the next section, to the extent needed to perform the work

Subprocessors

We use the following providers to operate the services. In no case do we provide information beyond what the work requires.

Google LLC (authentication, Sheets and Drive, generative AI)
Supabase, Inc. (database and authentication)
Vercel Inc. (website and application delivery)

For online payments, card details go directly to the payment provider and are not stored on our servers.

Cookies

Our website may use cookies to keep you signed in and for analytics. Cookies do not identify individuals. You can disable them in your browser, but some features will then be unavailable.

We use Google Analytics, provided by Google LLC, for site analytics. Information such as the pages you view and how long you stay is collected through cookies; it does not include anything that identifies you personally, such as your name or email address. The information collected is handled in accordance with Google's privacy policy. If you would like to stop measurement in your own browser, please use the opt-out add-on Google provides (tools.google.com/dlpage/gaoptout).

Security

To prevent leakage, loss or damage, we encrypt communications, manage access rights and store credentials encrypted. Where handling is entrusted to an external provider, we supervise them appropriately.

Access, correction and deletion

You may request disclosure, correction, suspension of use or deletion of your personal data held by us. Contact us at the address in section 12. After verifying your identity, we respond within a reasonable period.

In OpsEngine Connect, you can disconnect third-party services and delete saved settings yourself.

Changes to this policy

We may amend this policy following changes in law or in our services. The amended policy takes effect when posted on this website. For material changes, we endeavour to notify you by email or similar.

Contact

For questions about how we handle personal data, contact us at:

OpsEngine Inc. 5-14-11 Katase, Fujisawa, Kanagawa 251-0032, Japan
Email: info@opsengine.co.jp