Privacy Policy

This Privacy Policy (the “Policy”) explains how Strictus GK, trading as Keelson (“we,” “us,” or “our”), handles personal information in connection with Keelson (the “Service”).

1. Scope and Definitions

This Policy applies to the personal information of people who subscribe to the Service, administrators, members, website visitors, and people who contact us. “Personal Information” means personal information as defined in Article 2, paragraph 1 of Japan’s Act on the Protection of Personal Information (the “APPI”).

“Customer” means a company, organization, or business operator that enters into a contract to use the Service. We handle Personal Information stored or processed in a Customer’s applications on that Customer’s behalf, as described in Section 7.

2. Information We Collect

Depending on the features you use and the nature of your inquiries, we collect the following information.

Information Associated with Registration, Inquiries, and Other Interactions

• Company name, contact person’s name, department, job title, and similar details.
• Contact information, such as email address, telephone number, and postal address.
• Account identifiers, profiles, settings, and authentication results. We use an external authentication service for sign-in and do not store passwords as part of our authentication records.
• Billing details, subscription plan, payment status, and transaction history. Card numbers and security codes are processed by our payment processor; we do not retain them.
• The contents of inquiries, feedback, and survey responses.

Information Collected When You Use the Service

• Device information, such as device type, operating system, and browser.
• Log information, such as IP address, access dates and times, pages viewed, and activity history.
• Identifiers collected through cookies and similar technologies.
• Usage data, such as resource consumption and error information.

3. How We Use Information

We use the information described in Section 2 for the following purposes. Our use of Personal Information stored or processed in applications is limited to the purposes described in Section 7.

1. Account registration, identity verification, authentication, and providing and operating the Service.
2. Calculating fees, billing, and managing payments.
3. Sending service notices and responding to inquiries.
4. Maintaining security, preventing unauthorized use, and addressing violations of our Terms of Service.
5. Analyzing usage, improving the Service, and developing new features and services.
6. Providing information about our services, and creating statistical information that does not identify individuals and using it for marketing.
7. Meeting legal obligations and performing activities related to the purposes above.

4. Limits on Use and Disclosure to Third Parties

Unless permitted by the APPI or other applicable laws, we do not handle Personal Information beyond what is necessary for its stated purposes without the consent of the individual concerned.

We do not disclose Personal Information to third parties without the individual’s consent, except in the following circumstances:

1. Where the disclosure is based on laws or regulations.
2. Where it is necessary to protect a person’s life, physical safety, or property, and obtaining the individual’s consent is difficult.
3. Where it is particularly necessary to improve public health or promote the healthy development of children, and obtaining the individual’s consent is difficult.
4. Where it is necessary to cooperate with a national government agency, local authority, or a party acting on their behalf in carrying out duties prescribed by law, and obtaining the individual’s consent could interfere with those duties.
5. Where Personal Information is transferred as part of a merger, corporate split, business transfer, or other business succession.

When we entrust the handling of Personal Information to service providers under Section 6, we do so within the scope that is not treated as disclosure to a third party under the APPI.

5. Joint Use of Personal Information

We do not currently engage in “joint use” of Personal Information with other organizations under the APPI. If we begin joint use, we will give advance notice or publicly announce the information involved, the parties that will jointly use it, the purposes of use, the party responsible for managing it, and other details required by law.

6. Service Providers and International Processing

We use external service providers for cloud infrastructure, authentication, payment processing, email delivery, usage analytics, error monitoring, and other functions necessary to provide the Service. We exercise necessary and appropriate oversight by selecting providers, establishing data protection obligations through contracts and other arrangements, and reviewing how they handle information.

The Service uses providers outside Japan, including in the United States. Personal Information may therefore be processed or stored outside Japan. Even if an application’s runtime environment or database is located in Japan, this does not mean that all information, including authentication, payment, and logging information, is handled only in Japan.

When Personal Information is handled outside Japan, we take the measures required by applicable law, including reviewing the destination country’s legal framework and the recipient’s data protection arrangements, and putting contractual safeguards in place. For information about our service providers, processing countries, and safeguards, please contact us using the details in Section 12.

7. Data Stored or Processed in Applications

“Customer Data” means data that a Customer stores, sends, generates, or processes through the Service. It includes application source code, database contents, stored files, and logs produced by applications.

Where Customer Data contains Personal Information, we handle it on the Customer’s behalf and in accordance with their instructions, only as necessary to provide the Service. This includes hosting, backups, troubleshooting, and maintaining security. We do not use that Personal Information for our own marketing or advertising.

8. Usage Analytics, Error Monitoring, and Advertising Measurement

We may use the following external services to improve our website and console, detect and investigate errors, and measure advertising effectiveness:

• PostHog (usage analytics): We send user and workspace identifiers, pages viewed, activity and feature usage history, and device and browser information. We may associate usage information with an account for analysis.
• Sentry (error monitoring): We send error details, where errors occur, information about activity before and after an error, and browser and other environment information to investigate problems.
• Google Ads (advertising measurement; recipient: Google LLC): We send cookie and similar identifiers, pages viewed, information about ad clicks, and the fact that registration was completed to measure advertising effectiveness. You can opt out through Google’s Ads Settings.
• Meta Ads (advertising measurement; recipient: Meta Platforms, Inc.): We send cookie and similar identifiers, pages viewed, information about ad clicks, and the fact that registration was completed to measure advertising effectiveness. You can opt out through Meta’s Ad Preferences.

We use cookies and similar technologies to maintain login sessions, analyze usage, and measure advertising effectiveness. You can restrict or delete cookies in your browser settings, although some Service features may no longer work. These settings do not stop all logging or usage analysis performed by our servers.

We do not send registration information, such as email addresses, to advertising providers.

9. Retention and Security

Retention Periods

We retain information for as long as needed, depending on its type and purpose. When it is no longer needed, we delete or anonymize it.

Customer Data is retained as needed to provide the Service. For deletion following contract termination, see Section 20 of our Terms of Service.

After we accept a request to delete an application or workspace, we may retain Customer Data remaining in backups and similar copies for up to 30 days from acceptance to help address accidental deletion and investigate unauthorized use. This is a maximum retention period, not a guarantee that data will remain available or recoverable for 30 days. To request earlier deletion, contact us using the details in Section 12. We will verify your identity and the affected data before responding.

Application access logs are retained for a period that depends on your plan. Contact us using the details in Section 12 for information about each plan’s retention period.

Account, billing, and operational records may be retained as needed for contract administration, legal compliance, security, and dispute resolution. Where information must be kept to meet a legal retention obligation or address a specific incident of unauthorized use or a dispute, we may retain it beyond the periods above, limited to the scope and duration necessary for that purpose.

Security Measures

To help prevent unauthorized access, loss, alteration, and disclosure of Personal Information, we use measures including access restrictions, encryption in transit and at rest, activity records, and oversight of service providers. See our security page for an overview. For questions about how we protect Personal Information, please contact us using the details in Section 12.

10. Requests to Access, Correct, or Delete Personal Information

For Personal Information we manage, you may contact us using the details in Section 12 to request an explanation of its purposes of use, access to the information, correction, addition, deletion, cessation of use, erasure, or cessation of disclosure to third parties. We will verify that the request comes from the individual concerned and respond without delay in accordance with the APPI. We may be unable to fulfill a request for legal reasons.

For Personal Information within an application, the Customer operating that application is the point of contact for requests. If you contact us, we will direct you to the appropriate contact and help respond in accordance with the Customer’s instructions and applicable law.

11. Changes to This Policy

When we change this Policy, we will announce the changes and their effective date on our website or through other appropriate means. Where the law requires the individual’s consent to a change, we will obtain that consent through the appropriate process.

12. Contact Us

For questions, complaints, or requests to access or delete Personal Information, please contact:

Strictus GK — Privacy Contact

Email: [email protected]

Our business address and representative are listed in our business information (Japanese).

Revision History

• September 19, 2026: Added advertising measurement (Google Ads and Meta Ads) to Section 8.